Did someone make Adware for Safari!!? Getting pop-ups!!

I have two websites that I have set to open all the time. MacRumors and my local TV station. All of a sudden I've been getting the same kind of pop-ups on both sites. I emailed each and they said that there shouldn't be any pop-ups. I don't block pop-ups because I need them for Fed-Ex shipping. I started going to some other sites that I frequent and I'm still getting these random pop-ups that I never got before. I think I have some app in my mac that's doing this. Anyone know how to figure it out?

I never got a chance to test changing the DNS Servers because the pop-ups suddenly stopped. But I noticed a big slow down in my web surfing. Pages loading really slow so I started researching and actually changed my DNS Servers to openDNS (your suggestion) I actually changed my router first and then I saw those same openDNS numbers come up in my computer so I thought all was well. I tried surfing and it was still slow so I went back into network prefs and the servers back to 85.255.115.27 and 85.255.112.217!! I'm just leaning about this stuff so I don't know if that's normal. Anyway I hit the plus button and add the OpenDNS numbers to the list. The 85.255.112.217 were greyed out so I couldn't hit the minus button and remove them. I found that interesting because the OpenDNS site says to write down and delete the old numbers.
By accident I noticed that I have this message showing up every minute in my Console Messages log:
com.apple.launchd[1] (0x10bfb0.cron5126): Could not setup Mach task special port 9: (os/kern) no access
So I started looking into that and found this in a forum:
"I did a bit of research, and there don't appear to be any figuring out exactly WHY cron is generating an error for launchd, but it does appear to match each time a cron job is run. On my system it was happening every minute.
However, the reason cron was running every minute, was to run the following script:
* * * * \"/Library/Internet Plug-Ins/QuickTime.xpt\">/dev/null 2>&1
The '* * * * *' says to run every minute, and the script is a trojan, which may or may not affect your internet connection. It attempts to redirect your DNS (domain name service) to a pair of servers in eastern europe.
If you have this entry in your crontab, or particularly in your root crontab, delete the script, and another script in the same directory 'plugins.settings', then delete the crontab entry. If you want more info, do a google search on 'QuickTime.xpt' and you've find more than you ever wanted to know.
To check for the crontab entry, use 'sudo crontab -l' (that's a lowercase "L") from a terminal, and if the entry is there, and nothing else, just delete the crontab file via 'sudo crontab -r' and if there are other lines you wish to keep, use 'sudo crontab -e' to edit the crontab file. Knowledge of 'vi' or 'emacs' may be required to edit the file. If you don't know what any of this means, please ask for help from a local Mac expert, a unix expert, or your local Apple Store's Genius Bar.
Hope this helps someone. I'm glad I took the time to sort this out."
So now I'm wondering if I have a trojan or if those DNS numbers were from embarq?

Similar Messages

  • I am getting pop ups on safari and firefox lately and am worried i may have malware or something now on my computer doing this. What is the best way to check this out for sure and remove it?

    I am getting pop ups on safari and firefox lately and am worried I may have malware or something now on my computer doing this. What is the best way to check this out for sure and remove it?

    Please review the options below to determine which method is best to remove the Adware installed on your computer.
    The Easy, safe, effective method:
    http://www.adwaremedic.com/index.php
    If you are comfortable doing manual file removals use the somewhat more difficult method:
    http://support.apple.com/en-us/HT203987
    Also read the articles below to be more prepared for the next time there is an issue on your computer.
    https://discussions.apple.com/docs/DOC-7471
    https://discussions.apple.com/docs/DOC-8071
    http://www.thesafemac.com/tech-support-scam-pop-ups/

  • Virus for macbook pro warning.  ran software and didn't detect anything buy i keep getting pop ups

    i had a virus warning for my macbook pro.  ran anti virus software but nothing was detected.  however i keep getting pop ups.

    Harry
    You Mac does not have any viruses as there are no viruses for MacOSX. What you have a malware scam. Did you download MacDefender, or MacProtector? To get rid of them, open activity monitor and look for the process MacDefender, or MacProtector, double click the process and force quit. Go to system preferences to accounts, login items and remove MacDefender, or MacProtector by highlighting it and hitting the minus sign. Go to your applications folder and drag MacDefender or MacProtector to the trash. Open finder and do a search for Macdefender or MacProtector trash any related files. Do the same with a Spotlight search, it is the little magnyfing glass far top right in the menubar. Lastly, go open finder, select your user folder, go to library then loo in aoplication support and remove MacDefender or Mac Protector from there, close that folder then go to preferences and remove any preference file for MacDefender or MacProtector. Hope this helps.
    Joseph

  • I bought my iphone from a lady at the mall but she didnt remember her icloud password well now i keep getting pop ups about the icloud password but she doesnt remember it and whenever i try turning it off it asks me for the password but i dont know it?

    i bought my iphone from a lady at the mall but she didnt remember her icloud password well now i keep getting pop ups about the icloud password but she doesnt remember it and whenever i try turning it off it asks me for the password but i dont know it?

    That is the activation lock. Your iPad will be useless unless you can remove it.

  • HT1766 I have an iphone 5 and I keep getting pop ups asking for my voicemail password and it is so annoying.

    I have an iphone 5 and I keep getting pop ups asking for my voicemail password.  How do i get rid of it?

    Contact your carrier and have them re-set your voice mail password. Once they do, you should only have to enter it once. Then you won't be prompted again.

  • I accidentally erased my keychain passwords, how can I replace it?  I thought I was deleting one account but it deleted everything.  I now keep getting pop-ups asking me for a keychain password...which I don't remember ever creating.

    I accidentally erased my keychain passwords, how can I replace it?  ( I was in the keychains folder on the password link when i pressed delete). I thought I was deleting one account but it deleted everything.  I now keep getting pop-ups asking me for a keychain password...which I don't remember ever creating.

    Try running Keychain Access/First Aid and resetting the original keychain.
    Keychain Reset
    Keychain Issues - Resolve  see post by Kappy

  • Firstly do I need Adobe Flash?? (bit of a technophobe) but since I've done an UPDATE i keep getting pop ups when i look at amazon??

    firstly do I need Adobe Flash?? (bit of a technophobe) but since I've done an update I keep getting pop ups when i look at amazon??also can I delete X from my applications as it does not seem to be usable (don't know what its for!!)

    You may have installed one or more of the common types of ad-injection malware. Follow the instructions on this Apple Support page to remove it. It's been reported that some variants of the "VSearch" malware block access to the page. If that happens, start in safe mode by holding down the shift key at the startup chime, then try again.
    Back up all data before making any changes.
    One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
    If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, ask for further instructions.
    Make sure you don't repeat the mistake that led you to install the malware. It may have come from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
    Malware is also found on websites that traffic in pirated content such as video. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
    In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere  should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
    Still in System Preferences, open the App Store or Software Update pane and check the box marked
              Install system data files and security updates (OS X 10.10 or later)
    or
              Download updates automatically (OS X 10.9 or earlier)
    if it's not already checked.

  • My Mac Pro is getting pop ups and is very slow.  How can I fix that?

    I Have a Mac Pro
    PRocessor 2.4 GHz Intel Core i5
    memory 4GB 1333 MHz DDR3
    MAckintosh HD Startup Dis
    GRaphics Intel HD Graphics 3000 384 MB
    SAfari 8.0.3
    Os Yosemite version 10.10.2
    MY Mac Pro is slow and keeps getting pop ups that will not go away. one of the pop ups says I need to scan and use their cleaning and security system. What can I do to improve my computer speed and get rid of pop ups.

    Click here and follow the instructions, or if there’s a type of adware not covered by them on the computer, these ones. If you're willing to use a tool to remove it(you don't need to, but may find it easier), you can instead run Adware Medic; this link is a direct download.
    (124219)

  • Getting pop-ups and mac running slow

    my macbook air is running slow and I keep getting pop-ups. Does anyone know of a good anti-virus program for a macbook air computer.  Simple

    Does anyone know of a good anti-virus program for a macbook air computer.
    None are worthwhile and most will make a mess of an already bad situation.
    For the popups and a potential solution for what you describe, read How to install adware

  • I have adblock but still get pop ups and ads

    I get pop ups and ads on both safari and google chrome and have an adblocker on both. These pop ups are ads in many different ways most common is a new tab opening usually that stupid mac keeper website.

    You installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
    Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
    Back up all data.
    Triple-click anywhere in the line below on this page to select it:
    /Library/LaunchAgents/com.vsearch.agent.plist
    Right-click or control-click the line and select
              Services ▹ Reveal in Finder (or just Reveal)
    from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
    Repeat with each of these lines:
    /Library/LaunchDaemons/com.vsearch.daemon.plist
    /Library/LaunchDaemons/com.vsearch.helper.plist
    /Library/LaunchDaemons/Jack.plist
    Restart the computer and empty the Trash. Then delete the following items in the same way:
    /Library/Application Support/VSearch
    /Library/PrivilegedHelperTools/Jack
    /System/Library/Frameworks/VSearch.framework
    ~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
    Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
    From the Safari menu bar, select
              Safari ▹ Preferences... ▹ Extensions
    Uninstall any extensions you don't know you need, including any that have the word "Spigot" or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
    This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
    You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight is inexcusable and has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

  • Keep getting pop-ups on my mac.

    I have my pop-up blocker enabled and i get pop-ups when browsing all websites. How can i stop this?

    The Safe Mac » Adware Removal Tool
    Helpful Links Regarding Malware Protection
    An excellent link to read is Tom Reed's Mac Malware Guide.
    For adware removal see The Safe Mac » Adware Removal Guide and The Safe Mac » Adware Removal Tool.
    Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.
    See these Apple articles:
      Mac OS X Snow Leopard and malware detection
      OS X Lion- Protect your Mac from malware
      OS X Mountain Lion- Protect your Mac from malware
      OS X Mavericks- Protect your Mac from malware
      About file quarantine in OS X
    If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.)
    From user Joe Bailey comes this equally useful advice:
    The facts are:
    1. There is no anti-malware software that can detect 100% of the malware out there.
    2. There is no anti-malware that can detect anything targeting the Mac because there
         is no Mac malware in the wild, and therefore, no "signatures" to detect.
    3. The very best way to prevent the most attacks is for you as the user to be aware that
         the most successful malware attacks rely on very sophisticated social engineering
         techniques preying on human avarice, ****, and fear.
    4. Internet popups saying the FBI, NSA, Microsoft, your ISP has detected malware on
        your computer is intended to entice you to install their malware thinking it is a
        protection against malware.
    5. Some of the anti-malware products on the market are worse than the malware
        from which they purport to protect you.
    6. Be cautious where you go on the internet.
    7. Only download anything from sites you know are safe.
    8. Avoid links you receive in email, always be suspicious even if you get something
        you think is from a friend, but you were not expecting.
    9. If there is any question in your mind, then assume it is malware.

  • I am getting pop-ups, and web pages are opening with "special offers." My yahoo mail has advertising covering the mail messages. This is new. What do I do?

    I am getting pop-ups, and web pages are opening with "special offers." My yahoo mail has advertising covering the mail messages. This is new. What do I do?

    Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.
    SCAN WITH ALL PROGRAMS.
    * [http://www.microsoft.com/security/scanner/default.aspx Microsoft Safety Scanner]
    * [http://www.malwarebytes.org/products/malwarebytes_free/ MalwareBytes' Anti-Malware]
    * [http://support.kaspersky.com/faq/?qid=208283363 TDSSKiller - AntiRootkit Utility]
    * [http://www.surfright.nl/en/hitmanpro/ Hitman Pro]
    * [http://www.eset.com/us/online-scanner/ ESET Online Scanner]
    [http://windows.microsoft.com/MSE Microsoft Security Essentials] is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.
    Further information can be found in the [[Troubleshoot Firefox issues caused by malware]] article.
    Did this fix your problems? Please report back to us!

  • Although I have 'Block pop-ups' turned on, I'm still getting pop-ups. How can I fix this?

    I've triple checked the 'blocked pop-ups' is turned onion my settings, I'm still getting pop-ups and want them to stop. Any help?

    Sorry, this is for my ipad 2. Any help would be appreciated!

  • I keep getting pop ups saying that my subscription has expired? I have paid and have credit because this has happened before and I paid 3 times. Can I just download the programs rather than pay a monthly charge?

    I keep getting pop ups that say my subscription has expired? I have paid and have credit because this has happened before and i paid 3 times. Can I just buy a download instead of paying a monthly subscription?

    We often find this happens when the wrong software gets run (so the subscription doesn't apply).
    So,to start with  what exactly is your subscription for - please check your account details and confirming email?

  • I use MacIntosh, system 10.5.8. But I keep getting pop-ups . I have tried to install Firefox and it responds saying it is not compatible with my systems architecture. What should I do to stop the pop-up?

    I use G4 MacIntosh, System 10.5.8. I keep getting pop-ups asking me to upgrade my version of Firefox. But when I try to install I get the message that Firefox cannot operate with my computers architecture. How can I stop the pop-ups?

    I believe Firefox 4 is Intel only. That means it will not install on a PPC Mac. You can get TenFourFox, which is made for PPCs.
    http://www.floodgap.com/software/tenfourfox/

Maybe you are looking for

  • My weather widget keeps saying "weather offline" when im on wifi or have full service?

    on my iphone 4 in the notification centre, my weather widget says "weather offline" sometimes, most of the time is shows the weather, but sometimes it is offline even when im on wifi or have full service. its so annoying. how can i fix this?

  • I am trying to add a footer and Adobe Pro XI keeps crashing

    I am trying to add a footer to my document and Adobe Pro XI keeps crashing.  Any ideas?

  • No TV service today? See you tomorrow

    I never do this, but I am appalled by the solution/customer service to my problem today, maybe its just me, maybe others have experienced the same issue. A little background, after some convincing and researching, we switched to Verizon Fios from Tim

  • Windows Serch is inconsistent

    We have a Windows Server 2008 R2 SP1 server with the File Services role and the Windows Search service installed. We do not have the Indexing service installed. There is a piece of software that process PDF's and spits out a .img file into a specific

  • Help with select from USREXTID table

    HI, I try to select from table USREXTID and when i try to use do the select like below SELECT bname FROM usrextid    INTO TABLE lt_bname        WHERE type    = 'DN'        AND extid     =  temp_extid        AND status    = 'X'. here when i take the e