Mac keeper and missing files

[Mark R]

I don't keep up with mac stuff very much. But my mom recently got herself an iMac for her writing and photography.

I had set her up with a remote backup service with carbonite, because she couldn't bear to lose all here data.

Anyway, I got a bit of a panicked call from her today. She had apparently bought an expensive anti-virus and security package called "mac keeper" a couple of weeks ago. Ever since the computer had been super slow, but she assumed it was something do with the scanning process, so ignored it.

Anyway, the problem that she noticed today is that most of her photos and videos and writings had gone. Even more distressing, the carbonite software had been removed leaving her without access to the backups, and with no backups made for the last few weeks.

I'm hoping that this is some sort of weird user error, but as i'm totally out of the loop with macs, what should I be looking for and what tools should I turn to.

 

[KeithP]

If you do a Google search on "MacKeeper Warning" you will find a lot information about it. From what I have read, I believe it is basically malware.

Personally I don't trust any system when something like this happens. I would wipe the drive and reinstall OS X from scratch. Can you sign into her Carbonite account on the web and check to see if all her files are present prior to the Mackeeper install?

A few OS X security tips that you may, or may not, be aware of...
- You should have two users accounts minimum; the normal day to day account should be a standard user and you also need an administrator account for software installs, updates, etc.
- If Safari is being used, go into Safari Preferences and under "General" uncheck "Open safe files after downloading" (personally I would recommend Chrome so Flash doens't have to be installed separately)
- Under "Security & Privacy" System Preference you might want to check "Mac App Store" under "Allow apps downloaded from". That way only stuff from the Apple's App Store can be installed. (http://support.apple.com/en-us/HT202491)
- You might want to look at setting up Yosemite's Parental Controls to further secure the account she uses (http://support.apple.com/kb/PH18571)

-KeithP

 

[Mark R]

Thanks. I hadn't checked out mac keeper properly. It looked like some freeware anti-malware, but it appears to be some sort of fakeware utility.

It's not the first time, she's been caught out by this. I remember the fight I had with her, when I fixed her PC by removing "hotbar". The trouble was she had PAID $30 for the registered version of hotbar.

It appears she's paid the best part of $200 for a 1 year subscription to mac keeper. Looks like this is going to be an expensive lesson.

Thanks for the tips. I had set the mac up with 2 users, but I resisted for a while, but ended up having to give her the admin password.

 

[JAG87]

but ended up having to give her the admin password.

If she has the admin password, she is the administrator. She shouldn't be calling you for help.

That's my policy.

 

[dave_the_nerd]

If she has the admin password, she is the administrator. She shouldn't be calling you for help.

That's my policy.

my mom

Your policy is invalid.

 

[JAG87]

Your policy is invalid.

It doesn't really matter who it is. You don't need administrative rights to use a computer on a daily basis. If and when she needs it, she can call. If she can call AFTER the OS is wrecked, she can call before hand too.

 

[kbp]

If it's not in the app store, don't install it!

 

[suklee]

http://www.macworld.com/article/2861435/how-to-uninstall-mackeeper-from-your-mac.html