🦑.fun -

Technology

General

Malware

Hardware

aufstellen/setup

UBCD

Apple

Apple (click to show / hide)
  • Mac PW reset:
    • If Apple-Silicon (ARM based CPU)(new): Shutdown, hold power until "Loading Startup Options". "Options > Continue"
    • Else if Intel-based CPU (old): While holding both "CMD" & "R", Neustart, to boot to receovery-env.
    • Select "Utilities > Terminal", `resetpassword`. Select the acc to reset. Set new PW.
  • Webroot System Analyser: Works on Mac too.
  • Mac
    • OnlyX: Routine maintenance & cleanup.
    • Seagate File Recovery: L1 data recovery
    • Activity Monitor: basically task manager
    • Recovery Environment
    • Disk Utility
    • Finder > Go > Go to Folder ...
  • Apple DBU:
    • "Migration Assistant" transfers profile & programs, over direct connection or flash-drive (WiFi has issues)
    • Migration assistant:
      • Might need Apple-acc creds for the doner-mac.
      • New's OOBE, select Migration.
      • Old-Doner: Use top-right search/magnifying glass for "Migration Assistant".
    • Afterwards, on the recipient, go through apps and remove any that are crossed-out (incompatible with recipient) to prevent confusion to cx.
  • GSX: Apple's service order system
  • Atlas: Apple's training program
  • Apple lingo: KGB (known good board), KBB (known bad board).
  • Apple HW Diag
    1. Install latest OS updates
    2. Shutdown
    3. Connect power
    4. Disconnect unneeded peripherals
    5. Determine CPU-instruction-set (Apple-silicon-ARM vs Intel-x86)
      • Apple-silicon-ARM (new)
        • If it has touch-ID: Hold that & press power
        • Else if it lacks touch-ID: hold power until you see "Options".
      • Intel-x86 (old)
        • Press power & immedietely hold "D" until you see a progress-bar or lang-selection.
      • ancient
        • Hold "Option"
    6. Progress bar is the progress of HW diags.
    7. For details, see https://support.apple.com/en-us/102550
  • Mac Malware removal
    1. Run an approved AV
      • AVG
      • Webroot? (System Analyzer might be free)
      • See KaderC approved above
      • Tell Cx to run MalwareBytes
    2. "Finder > Go > Applications", move any baddies to Müll to uninstall
    3. Empty Müll.
    4. "System Preferences > Security & Privacy > Privacy" In the left pane of privacy-accesses go through each and look at the right pane to see which apps have access to it. Remove any baddies.
    5. "System Preferences > Users & Groups"
      • Remove (via the button "-") any fake / non-human user-accounts (call cx to verify).
      • for each legit-user, select the user & from "Login Items" use the button "-" to clear any sus entries
    6. Activity Monitor, sort by process-name, kill sus processes like Vsearch, Conduit, MacKeeper, etc.
    7. Empty Müll & Neustart.
    8. Check browser extensions, homepages, toolbars
      • Safari
        • Prefs > Extensions > uninstall
        • Prefs > Websites > Plugins > remove baddies
        • If homepage is hyjacked: change in safe mode.
    9. Check the following locations for startup-items (possibly malicious, possibly just slow down mac):
      • /Library/LaunchAgents/
      • /Library/LaunchDaemons/
      • ~/Library/LaunchAgents/
      • ~/Library/LaunchDaemons/
      • System/Library/LaunchAgents/
        • (should only contain "com.appl.*" and similar)
      • System/Library/LaunchDaemons/
        • (should only contain "com.appl.*" and similar)
      • /Library/StartupItems/ (pre v10.5)
      • /Library/PrivilegedHelperTools/
    10. Check hosts file
      • "Go > Go to folder... > /Private/ > Go"
      • notice dir "etc"
      • give yourself edit perms by right-clicking the dir, get info, sharing & perms, click button "+" to add yourself. (note that you need RW perm for the entire "etc/" not just perms to the individual file within)
      • remove any sus entries within the hosts file, eg AV-sites redirected to ".xyz" or Google-sites redirected to localhost.
      • Remove your recently added perms to etc.
    11. Advanced
      • boot normally, terminal...
      • ps -ef;
        ps -ef | grep -i MyBaddie123; # record PID & file-locay
        sudo kill -9 PID_of_baddie;
        sudo rm -r Dir_of_baddie;
  • physical repair
    • iPhone SE ≈ 8 (same internals)
    • screen fix:
      • 12+: Heated Display Fixture (front button 🔴)
      • 11 & before: the metal low-tech separator

Closing Template

Closing Template (click to show / hide)
OneDrive:
MS-Office Setup: