If you don't already have at least two complete, independent backups of all data, then you must make them first. If you don't know when the attack happened, or if it was too long ago for a complete rollback to be practical, then you should erase and install OS X.
Some of those changes can be restored from a later backup. You will lose all changes to data, such as email, that were made after the time of the snapshot. Obviously, that's only practical if you know when the attack took place, and it was recent, and you have such a backup. The easiest approach is to recover the entire system from a backup that predates the attack.
The only way you can be sure that the computer is not compromised is to erase at least the startup volume and restore it to something like the state it was in before the attack.
0 kommentar(er)
