You are here

Caught a sniffle

For current or would-be users of Apple Mac computers, with answers to many FAQs.

Re: Caught a sniffle

Postby MadManDan » Sun Jun 30, 2019 3:41 am

I should mention that this mac gets used for music only. The only exception being Netflix and YouTube. No weird installations, games, porn, or social media.

Ok so here's the timeline:

1. Everything's fine. Make my periodic backup to ext drive.

2. Need to go on toontrack.com but type toontracks by mistake. There's a dicey site asking to install flash. Well I'm tired (and used to using an old McAfee protected pc for non music stuff) so without paying attention, download.

3. Virus-like symptoms begin.

4. Attempt to restore my system by trashing the four folders in the internal hd and replacing them with the folders from my ext drive. Does not work.

5. Use Carbon Copy Cloner to restore correctly. From ext to internal hd, but correctly.

6. Now I've removed and re installed chrome. And it STILL comes up with a bootleg search engine that it won't let me remove. Arrrrrrghhh

It seems like chrome is indicating a symptom of the malware. It actually makes more sense than if removing/reinstalling chrome was to solve the problem. 

I just want a clean slate so I can carry on like I was previous to this incident.... Selectively adding plug ins from trusted sites.
User avatar
MadManDan
Frequent Poster
Posts: 515
Joined: Mon Sep 13, 2004 12:00 am
Location: Across the pond....New Yawk
Gear list: If you can't find it, grind it

Re: Caught a sniffle

Postby MadManDan » Sun Jun 30, 2019 6:47 am

Well here's something: Apparently Chrome is being "managed" . Hmmmm I never set that up. So I looked into the policies that are managing chrome and guess what... It's the search engine malware guys. So I have to do more research on deleting these management policies. Most likely will fix it.... Hopefully
User avatar
MadManDan
Frequent Poster
Posts: 515
Joined: Mon Sep 13, 2004 12:00 am
Location: Across the pond....New Yawk
Gear list: If you can't find it, grind it

Re: Caught a sniffle

Postby James Perrett » Sun Jun 30, 2019 1:59 pm

Personally I would wipe completely and start again from your backup - I get the impression that you didn't wipe completely first when you did the restore the first time.
User avatar
James Perrett
Moderator
Posts: 8435
Joined: Mon Sep 10, 2001 12:00 am
Location: The wilds of Hampshire
JRP Music - Audio Mastering and Restoration. JRP Music Facebook Page

Re: Caught a sniffle

Postby MadManDan » Sun Jun 30, 2019 3:26 pm

James Perrett wrote:Personally I would wipe completely and start again from your backup - I get the impression that you didn't wipe completely first when you did the restore the first time.
That is correct James. I restored without wiping first.

Now I've come to same conclusion as you and others and will wipe first. Let you know how it goes
User avatar
MadManDan
Frequent Poster
Posts: 515
Joined: Mon Sep 13, 2004 12:00 am
Location: Across the pond....New Yawk
Gear list: If you can't find it, grind it

Re: Caught a sniffle

Postby ConcertinaChap » Sun Jun 30, 2019 4:59 pm

Best of luck with it.

CC
User avatar
ConcertinaChap
Jedi Poster
Posts: 7589
Joined: Wed Jul 20, 2005 12:00 am
Location: Bradford on Avon
Making music: Eagle Alley, recording music: Mr Punch's Studio
If you want me I'll be down on Sound on Sound on Sound.

Re: Caught a sniffle

Postby desmond » Sun Jun 30, 2019 5:26 pm

MadManDan wrote:Now I've come to same conclusion as you and others and will wipe first. Let you know how it goes

I don't use CCC (I use SuperDuper) but this is a trivial procedure - you say "Copy this disk (the backup) to this volume (your system drive)." Whatever was on the system drive gets obliterated and you end up with the system drive being a bit for bit identical copy to the cloned backup (which is the point).

There should be no "erase" procedure necessary, it's implicit in the restore operation.
User avatar
desmond
Jedi Poster
Posts: 8881
Joined: Tue Jan 10, 2006 1:00 am
mu:zines | music magazine archive | difficultAudio

Re: Caught a sniffle

Postby MadManDan » Sun Jun 30, 2019 6:14 pm

desmond wrote:I don't use CCC (I use SuperDuper) but this is a trivial procedure - you say "Copy this disk (the backup) to this volume (your system drive)." Whatever was on the system drive gets obliterated and you end up with the system drive being a bit for bit identical copy to the cloned backup (which is the point).

There should be no "erase" procedure necessary, it's implicit in the restore operation.

Desmond, exactly my point although I disagree about it being trivial. This has to be done right.
Really wanted to take this one step at a time trial and error style. Assumed that the CCC was re doing everything fresh.

So in the end I wiped the hd, did the CCC restore again and everything looks correct. No more weird search engine on Chrome

Thanks all. MadManDan
User avatar
MadManDan
Frequent Poster
Posts: 515
Joined: Mon Sep 13, 2004 12:00 am
Location: Across the pond....New Yawk
Gear list: If you can't find it, grind it

Re: Caught a sniffle

Postby desmond » Sun Jun 30, 2019 6:49 pm

MadManDan wrote:Desmond, exactly my point although I disagree about it being trivial. This has to be done right.

Like I say, I don't use CCC, but in SuperDuper (which is CCC's better equivalent), you literally go "put this disk, onto this disk" and hit Go.

MadManDan wrote:Really wanted to take this one step at a time trial and error style.

Oh sure, if you're not experienced in this, it's absolutely vital to do this carefully, it's too easy to overwrite something, or kill backups if you don't know what you're doing.

MadManDan wrote:So in the end I wiped the hd, did the CCC restore again and everything looks correct. No more weird search engine on Chrome

Great!
User avatar
desmond
Jedi Poster
Posts: 8881
Joined: Tue Jan 10, 2006 1:00 am
mu:zines | music magazine archive | difficultAudio

Re: Caught a sniffle

Postby MadManDan » Mon Jul 01, 2019 1:42 am

Yeah just now it's time for the pain in the arse getting licenses working again. Already dealing with Waves, hopefully won't have problems with other manufacturers. :(
User avatar
MadManDan
Frequent Poster
Posts: 515
Joined: Mon Sep 13, 2004 12:00 am
Location: Across the pond....New Yawk
Gear list: If you can't find it, grind it

Previous

Who is online

Users browsing this forum: No registered users