AIM virus? "Virus-detection" popups in Safari?

Could it be, some sort of virus on my beloved macbook pro? Here is the story..
Last night when I logged into Adium, I received a message from "aim" claiming that I had some sort of friend request waiting for my approval, and someone wanted to list me in their profile. I hovered over the link and it went to the aim website, and curiosity always kills the cat.. I clicked. (Dumb, right?) Well, it did take me to the aim website and it was asking for my log in, so I closed.
Since then the same IM pops up every time I log on. I'm not sure if that has any affiliation with my next problem, but it could be useful information. I went to myspace.com, and I received a pop up saying something along the lines of "Malware/Spyware has been detected on your computer and you should resolve it by going to this website and downloading our anti-virus software." There was a URL at the top, not sure where it went to because it didn't matter. I canceled out because I had no other option, and it came up again. I canceled once more, and it came up again with only OK as the option. I tried force quitting Safari, and it didn't work at first. I received yet another pop up talking about slow script, asking if I wanted to continue to run it, and I said no, then hit apple alt esc and managed to close Safari.
Everything seems to be working fine in Firefox. Any suggestions as to how to rid of whatever might be happening, or any information on what it is at all would be greatly appreciated, I am not sure where to start. I'll be the first to admit that I an a novice when it comes to this sort of thing. Thank you for your help. I will be happy to give anymore information if needed.

Yes, sites like that (Adium, FaceBook, YouTube) are notorious for being the prime sources of 'scareware' and malware, most of which is aimed at Windows users and extracting unnecessary money from them with pointless, worthless software. No malware can affect your Mac unless you allow it to install, which in most cases would require your root password.
In your case you may have acquired a 'tracker cookie' sending you to other sites than you intended.
To get rid of them you ned MacScan:
The appearance of Trojans and other malware that can possibly infect a Mac seems to be growing, but is a completely different issue to viruses.
If you allow a Trojan to be installed, the user's DNS records can be modified, redirecting incoming internet traffic through the attacker's servers, where it can be hijacked and injected with malicious websites and pornographic advertisements. The trojan also installs a watchdog process that ensures the victim's (that's you!) DNS records stay modified on a minute-by-minute basis.
SecureMac has introduced a free Trojan Detection Tool for Mac OS X. It's available here:
http://macscan.securemac.com/
The DNSChanger Removal Tool detects and removes spyware targeting Mac OS X and allows users to check to see if the trojan has been installed on their computer; if it has, the software helps to identify and remove the offending file. After a system reboot, the users' DNS records will be repaired.
(Note that a 30 day trial version of MacScan can be downloaded free of charge from:
http://macscan.securemac.com/buy/
and this can perform a complete scan of your entire hard disk. After 30 days the cost is $29.99. The full version permits you to scan selected files and folders only, as well as the entire hard disk. It will detect (and delete if you ask it to) all 'tracker cookies' that switch you to web sites you did not want to go to.)
A white paper has recently been published on the subject of Trojans by SubRosaSoft, available here:
http://www.macforensicslab.com/ProductsAndServices/index.php?mainpage=document_general_info&cPath=11&productsid=174
Also, beware of MacSweeper:
MacSweeper is malware that misleads users by exaggerating reports about spyware, adware or viruses on their computer. It is the first known "rogue" application for the Mac OS X operating system. The software was discovered by F-Secure, a Finland based computer security software company on January 17, 2008
http://en.wikipedia.org/wiki/MacSweeper
On June 23, 2008 this news reached Mac users:
http://www.theregister.co.uk/2008/06/23/mac_trojan/
More information on Mac security can be found here:
http://macscan.securemac.com/
The MacScan application can be downloaded from here:
http://macscan.securemac.com/buy/
You can download a 30 day trail copy which enables you to do a full scan of your hard disk. After that it costs $29.95.
More on Trojans on the Mac here:
http://www.technewsworld.com/story/63574.html?welcome=1214487119
The latest news on the subject, from July 25, 2008, is:
Attack code that exploits flaws in the net's addressing system are starting to circulate online, say security experts.
The code could be a boon to phishing gangs who redirect web users to fake bank sites and steal login details.
In light of the news net firms are being urged to apply a fix for the loop-hole before attacks by hi-tech criminals become widespread.
Net security groups say there is anecdotal evidence that small scale attacks are already happening.
Further details here: http://news.bbc.co.uk/2/hi/technology/7525206.stm
A further recent development is the Koobface malware that can be picked up from Facebook (already a notorious site for malware), as reported here on December 9, 2008:
http://news.bbc.co.uk/newsbeat/hi/technology/newsid_7773000/7773340.stm
There may be other ways of guarding against Trojans, viruses and general malware affecting the Mac, and alternatives will probably appear in the future. In the meantime the advice is: be careful where you go on the web and what you download!

Similar Messages

  • I have a mac book air. Have had no issues with any virus before but today my safari page keeps directing me to a page which says " cyber crime" posing to be by Cheshire Police AUthority uk metropolitan police.Tells me that I have 24 hours

    I have a mac book air. Have had no issues with any virus before but today my safari page keeps directing me to a page which says " cyber crime" posing to be by Cheshire Police AUthority uk metropolitan police.Tells me that I have 24 hours to pay a 100 pounds.Using my ipad I looked it up and it appears to be a very common virus.I am worried about my Mac(relieved at the same time that I am not a cyber criminal
    !) so anyway what should I do.I tried to fonce quit and then open safari but only that page keeps opening up.Looking up online their was a suggestion to reset safari, but I am unable to click on the reset safari tab as the pop up for stay on page keeps coming up.i have switched off my lap top now.But am really worried.How can I get rid of it?

    It's not a virus. It's a JavaScript scam that only affects your web browser, and only temporarily.
    Some of those scam pages can be dismissed very easily. Press command-W to close the tab or window. A huge box will pop up. Press the return key and both the box and the page will close. If that doesn't happen, continue.
    From the Safari menu bar, select
              Safari ▹ Preferences... ▹ Security
    and uncheck the box marked Enable JavaScript. Leave the preferences dialog open.
    Close the malicious window or tab.
    Re-enable JavaScript and close the preferences dialog.
    If the Preferences menu item is grayed out, quit Safari. Force quit if necessary. Relaunch it by holding down the shift key and clicking its icon in the Dock. From the menu bar, select
              Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data
    to get rid of any cookies or other data left by the server. Open your Downloads folder and delete anything you don't recognize.

  • Error Message: "A virus was detected in FILENAME. This file will not be uploaded"

    I have been synching files using Creative Cloud Connect for many months. During the past few weeks, I get the message "Some files failed to sync". When I click on "Learn more", it has 3 files there and all have the message "A virus was detected in filename . This file will not be uploaded". I scanned all three files with AVG and Malwarebytes (installed on my system) and both report that there is no virus in those files. I have tried to chat with support but I could not find any resolution with them. I believe that I never got to the right place. I was connected with 5 different people. At the end of the last discussion I spoke to Adobe Captivate support. It so happens that the files with that error are all Adobe Captivate files. But that support also concluded that they couldn't help. I could not find similar entries in the forums either. Did anyone else have this problem?
    I appreciate any help.
    Angela

    No unfortunately, I have not.  I spent over an hour on the phone with them already regarding this topic. In the end, the support in Adobe Captivate (that's the 5th support group they connected me to) told me that I wasn't allowed to upload Captivate files since Adobe Captivate 8 is not a CC application and that's why the problem was happening. I am absolutely sure that this is untrue since I have many Captivate files on CC. I think the key will be to get to the right support group. Good luck! I really hope you find a solution. Keep me informed. Thanks.

  • I have a virus that has taken over Safari and will not allow me to use Safari or even shut down my computer.  It claims I need to send $1000 to a "green dot account to get my on line capability.Help

    I have a virus that has taken over Safari and will not allow me to browse of even shut down the computer.  The request is to send $1,000 to a "green dot" address to get the virus removed.
    Help!
    lawrencefromchatham

    Command, option and escape keys held down together will open the "Force Quit" dialog window.
    Quit Safari and then relaunch it while holding down the shift key.

  • When trying to update my reader, it hangs up during step 2 & I get a message that a virus was detect

    when I try to update my reader it hangs up during step 2 & says a virus was detected & download aborted

    1st time was when a news letter suggested my PDF Downloads of there letter probably were not working because of outdated programs & they linked Adobe for an update download. WHen the problem I 1st described happen, I then went to Adobe Site & tried it and it happened again.

  • Message saying a virus was detected when opening pdf files

    I can't open any pdf files any longer. A message appears saying a virus was detected and the file was deleted.  I uninstalled all adobe programs and now
    I can't re-install any of them, the same message appears when I try.

    Your antivirus is giving "False positives". NO Adobe products (legitimate Adobe products from this site) contain viruses.
    Also, it's nearly impossible to embed an actual virus in a PDF. Links to virus downloads? Yes, but the executable files themselves? No.
    Disable your antivirus. (It may be time to consider a different A/V software too. AVG is about the best in the industry when it comes to updating definitions, which prevents "false positives".)
    Download the full Adobe Reader installer here: http://get.adobe.com/reader/enterprise/

  • Whe trying to install the software I get an error message that  a virus was detected....can you help me?

    When I try to install the software on my computer I get an error message ....that a virus was detected and deleted. Can you help?

    Hi jjmaurer,
    There must be virus in your system.
    First scan your system and delete the corrupted files then again try to download the Acrobat software.
    Please let us know if you require further assistance.
    Regards,
    Florence

  • How to delete a virus that is now a safari default

    I accidentally downloaded something that is more than likely a virus. now when i open safari it goes straight to a website that I've never seen before, the logo is "Trovi" and says its sponsored by Bing. how do i get rid of it and make sure my computer is safe. also so my safari will go back to being normal and open with my top sites. thank you to who ever helps!

    You installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
    Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
    Back up all data.
    Triple-click anywhere in the line below on this page to select it:
    /Library/LaunchAgents/com.vsearch.agent.plist
    Right-click or control-click the line and select
              Services ▹ Reveal in Finder (or just Reveal)
    from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
    Repeat with each of these lines:
    /Library/LaunchDaemons/com.vsearch.daemon.plist
    /Library/LaunchDaemons/com.vsearch.helper.plist
    /Library/LaunchDaemons/Jack.plist
    Restart the computer and empty the Trash. Then delete the following items in the same way:
    /Library/Application Support/VSearch
    /Library/PrivilegedHelperTools/Jack
    /System/Library/Frameworks/VSearch.framework
    ~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
    Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
    From the Safari menu bar, select
              Safari ▹ Preferences... ▹ Extensions
    Uninstall any extensions you don't know you need, including any that have the word "Spigot" or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
    This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
    You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight is inexcusable and has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

  • HT5242 Hello to everyone!I think that I have installed a virus to my mac because safari opens advertising sites all the time and Facebook stucks a lot.What i should do to make my mac as it was before?

    Hello to everyone!I think that I have installed a virus to my mac because safari opens advertising sites all the time and Facebook stucks a lot.What i should do to make my mac as it was before?

    From the Safari menu bar, select
    Safari ▹ Preferences... ▹ Extensions
    Turn all extensions OFF and test. If the problem is resolved, turn extensions back ON and then disable them one or a few at a time until you find the culprit.

  • How do I get rid of annoying popups in Safari?

    All of the sudden I started getting annoying popups in Safari.  When I close them, they reopen a short time later.  I have popups blocked in my preferences.  Please help.  It's driving me crazy.

    Click here and follow the instructions, or if there’s a type of adware not covered by them on the computer, these ones. If you're willing to use a tool to remove it(you don't need to, but may find it easier), you can instead run Adware Medic; this link is a direct download.
    (120751)

  • Why am I seeing popups in Safari

    I have been seeing these strange popups in Safari on my ipad 2 running ios 7.
    One says
    setup.exe. 0 bytes
    open in ...      open in Skydrive
    the other one:
    cannot install profile
    Safari could not install a profile due to an unknown error. 
    Any idea why these are appearing?

    If these are native dialogs (not fake dialogs displayed in the web page) and if they are unexpected, you may be visiting web sites that are trying to automatically download malware.
    The "setup.exe" file is likely targeted at PCs running Windows.  I would definitely not open the file in Skydrive, though, because you don't want someone on a PC to open the file later, not knowing what it is.
    The error message about not being able to install a profile is more concerning, however, because Safari for iOS does support installing configuration profiles (*.mobileconfig) files.  Safari (or Settings) would have still asked you if you wanted to install the profile had it been valid, but you should always say "No" unless you expected to download such a file.
    Note that there could also be more benign reasons for these to appear (for example, if you clicked on a download link for setup.exe for legitimate software in a mail message), but if they appeared unexpectedly during browsing, I would suggest that you be more cautious about visiting those web sites in the future.
    Hope that helps.

  • Popups on safari and chrome

    could you help me please to stop popups from safari and chrome ..???
    MacBook Pro (Retina, 13-inch, Late 2013) 2.4 GHz Intel Core i5, OS X yosemite (10.10.1)
    8 GB 1600 MHz DDR3
    thanks..

    Click here and follow the instructions, or if they don't cover the type of adware on the computer, these ones. If you're willing to use a tool to remove it(you don't need to, but may find it easier), you can instead run Adware Medic; this link is a direct download.
    (118392)

  • How do I delete a folder that I moved to Trash from my external backup drive when a virus was detected? Trash will not delete the folder.

    I have tried unsuccessfully to remove a folder from Trash. My anti-virus program (Sophos) detected a virus which had to  be manually removed. I tried (unsuccessfully) to find and remove the infected file. I moved the Folder from my external backup drive and placed it in Trash. Now I cannot get Trash to delete the folder. It asks me if I wish to delete "unlocked" or "all" items. Either selection does not delete the folder. I went to change the permissions to "read & write" and unlocked the folder, but it is still there. I tried to "move" the folder from Trash back to the external harddrive but it seems I can only "copy" it and not "move" it. I am afraid that by copying it, I will not have the folder in two locations (Trash & External HD).
    Would appreciate any suggestions and guidance on this. I hope that I have explained the problem clearly!
    Thank you!

    Before deleting it we should know more about this folder and its contents.
    If it is invected and is using other apps, or other apps are still using it, then it cannot be deleted in the normal manner.
    You might contact Sophos and ask them about it.
    If you are using TM or have a backup of your system before the infection occurred, then you can delete the item(s) in Trash, but there is the possiblity of system corruption and the need for a reinstall, if any of these files are necessary for the OS to work properly, even though they are infected.
    Sophos may not have been able to remove the infection from inside a file which is why they suggested manual removal.
    You might consider downloading and running ClamXav first and see if it can't do better than Sophos.
    All that being said, you can always remove the contents of the Trash using the terminal. Usually as administrator, or in some cases as root (su). Unless you are very familiar with the terminal I do not suggest doing this without some study.

  • Annual Survey virus not detected by any anti-malware program.

    I have been getting the 2014 Annual Visitor's Survey pop up continuously over the last two days. I have checked the add ons - extensions. None found. I have run Windows Defender, MalwareBytes, Hitman Pro, Ad-Aware, and ESET, they detected nothing. I have checked add/remove programs, startup and anywhere else I can think of where a malicious program may hide. Found nothing. The pop up blocker is on with no exceptions. I have reset Firefox. Still there. I am running Windows 8.1 fully updated. Any suggestions? This thing is driving me crazy!

    ''mtech03 wrote:''
    I have run Windows Defender, MalwareBytes, Hitman Pro, Ad-Aware, and ESET, they detected nothing.
    Were the anti-malware tools you used updated when you ran them? They have a definitions database, same as anti-virus software. Be sure to run AdwCleaner, TDSSKiller and others listed in the malware support article that you haven't mentioned.
    * [[Troubleshoot Firefox issues caused by malware]]
    ''mtech03 wrote:''
    I have checked add/remove programs, startup and anywhere else I can think of where a malicious program may hide.
    Sort the list by install date. Look for programs you don't recognize among the recently installed ones. The program name can be SeeSimilar, SuperLyrics, LyricsContainer, Wajam, Webcake, HD-Video, Coupon Server, and others.
    Also check if your IPv4 and IPv6 DNS settings have been tampered with. They should be set to "automatically detect", your ISP's servers, or known open DNS services like Google DNS.
    * [http://openw3.com/how-to-change-dns-server-settings-in-windows8.html How to change DNS server settings in Windows 8 | OpenW3 Technology Blog]
    If the problem persists, refer to a forum specializing in malware removal, like the following.
    * https://forums.malwarebytes.org/index.php?showtopic=9573

  • Itunes wont start and when I try and reinstall a virus is detected

    I am running windows vista and Installed the Itunes update over the weekend.  Now I can't start I tunes and when I try and download the program I am told that it contains a virus and my system won't allow the install.  Help

    Try Here...
    http://www.apple.com/hk/en/support/itunes/store/giftcard/
    If no joy...
    Contact iTunes Customer Service and request assistance
    Use this Link  >  Apple  Support  iTunes Store  Contact
    OR...
    The Server could indeed be  temporary unavailable and you will need to try again later.

Maybe you are looking for