Bought Used MacBook Pro - Is it filled with malware?

I purchased a used MacBook Pro recently as my first MacBook. I reinstalled the OS but I am concerned there may be something left behind from the previous owner. I am using massive amounts of upload bandwidth for a reason I cannot determine.

MacBook Pro 15″, macOS 12.4

Posted on Jul 7, 2022 05:12 PM

Similar questions

malware on motherboard etc Hello, I've been reading that some forms of malware can survive a reset, and maybe even a reinstall. I am considering purchasing refurbished Apple items and want to be sure they are free from all malware, possibly placed by the previous owner, hiding on the motherboard, RAM, BIOS, or anywhere else. Can someone tell me with certainty if refurbished Macs are free from all forms of malware hiding in all locations? Do refurbished Macs just get a standard reset/hard reset, or are areas such as motherboard etc. also checked for malware? I'm not a tech person so hopefully my questions makes sense. Thanks
1472 7
Privacy and security issues on my MacBook Pro I was given a MacBook Pro Retina 2015. I have updated it to 12.6.7. The person I got this laptop from, has proven himself to be untrustworthy as of late, so I have suspicions about the state of this MacBook. I am troubleshooting everything I see that seems odd (which is a lot because I'm still pretty much a noob) and I got to the Macintosh HD info. From there, I see several things I am looking to get information about, or if something strikes someone as a concern, how I can fix it. And I realize the ultimate fix is to perform a factory reset, but then that also means I am deleting any proof or evidence of what this person has done, and you bet I want to hold them accountable if they gave me a fraudulent device. I appreciate any help I can get! To try to keep things organized, I will list my queries down below, with a corresponding number. I just want to know what these things mean, and if anything seems strange or out of place. Thank you so much <3 -The Family Jewelzzz- 1.In disk utility, Macintosh HD info: a. Owner's enabled- NO b. Is encrypted- NO c. Mount Point - / d. Writable- NO e. Case Sensitive- NO 2.I was in System Preferences, looking around, and I noticed there was a "Apps using iCloud" section. I clicked on it, and there was only one application using my iCloud, Reddit. What's really strange, is that I've never downloaded the Reddit app, only created a login account! When searching for Reddit In This Mac, I found three indexes using JavaScript, no date last opened. The paths were: a.MacBook>library>group containers>UBF8T346G9.office>solution packages>7-67D---F19-5D--635-96F---E7--82>package resources>off-line files>index_8C--A61---30C6-72---77483--4D--3.JS b.MacBook>library>group containers>UBF8T346G9.office>solution packages>725---BC6--B2-91 a--FA2---4B52--Coffline files>index_8C--A61---30C6-72---77483--4D--3.JS c.MacBook>library>group containers>UBF8T346G9.office>solution packages>726--38--19---8D6-5---F271-75-82>package resources>offline files>index_E--5FE--D96--00E---8849--FB---95.JS ***the -- are place holders for numbers or letters. I wasn't sure if I would be giving any personal info out with showing the whole thing so I thought to remove a few. But you can see they are all the same up until just after solution packages. The first two had the same index also. 3.While looking at software applications in the system report, everything has a version, an obtained from, and a kind, except these applications. One in particular caught my eye: Group.is.workflow. This got my attention because I've read about how workgroups can have an admin that can remote access devices, so it was a red flag for me. a. apple.com.ctcategories- no version, unknown, other b. com.microsoft.openxml- ", ", " c. droplet with settable properties- ", ", " d. group.is.workflow- ", ", " e. recursive file processing droplet- ", ", " f. recursive image file processing droplet- ", ", " I know there is more than this that is concerning, but my brain is overloaded and I cannot remember at this time. When I do, I will be sure to add them to this thread. Again, I really appreciate any advice, suggestions, or concerns any of you may have. <3 [Re-titled by Moderator]
1863 7
Making sure a newly purchased used Mac is malware free Just bought a used Mac. I want to make sure it doesn’t have any malware, viruses or spyware on it. Is “Erase all Files” enough or do I need some kind of deeper format?
3470 6

2 replies

a brody

Level 10

85,245 points

Jul 7, 2022 05:20 PM in response to Community User

The fact the machine is 2012 or later says you can use internet restore (command-option-shift-R at startup) to run Disk Utility to reformat the Mac.

Once reformatted, reinstall the OS that came with the Mac, and upgrade to the OS you desire by visiting:

High Sierra upgrading tip - Apple Community

Unless the user sold you licenses for the software packages on there, you are best off starting fresh, and then use the migration assistant after install to bring over data from your other Mac, or Windows migration assistant to bring over data from Windows.

Do not assume any used machine comes clean, unless seller has had it professionally cleaned.

a brody

Level 10

85,245 points

Jul 7, 2022 05:24 PM in response to a brody

When I professionally clean, I make sure no Macpaw, or Zeobit software is installed or any optimizers.

I look for known unsavory software with Etrecheck, and run both an Avast and Malwarebytes cleanup.

I check Google Chrome policies direct to the correct website, and remove unnecessary browser extensions.

As long as all web browsers visit the search engine I desire, and there are no cleaning utilities running, then and only then do I consider it safe to use. But simpler is just to wipe the machine. Unlike PCs it is very difficult to infect the BIOS.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Bought Used MacBook Pro - Is it filled with malware?