Is this malware???

Hello,
I have recently started to get the following popup message in Safari:
"Popup blocking software has prevented display of the Trend Micro Security Services dashboard. Open an Internet Explorer window and enter the following URL in the Address box: http://tmss.trendmicro.com/dashboard."
It pops up on almost any website I go to, including just doing a search on Google so I dont think its related to a certain site.
Now, I dont use IE, Ive not installed anything to do with Trend Micro, I've cleared the cache and history but this message is appearing quite regularly...
If I go to the link I get forwarded to the following page:
http://tmss.trendmicro.com/Dashboar...terror10.aspx
My housemate has also just installed a new wireless router: a d-link DI-624M which appears on the above link. Surely the router isnt creating the popup is it?!
Can anyone offer any solutions or shed any light on the problem???
Many thanks

Turns out it is the router.
I got the same popup on my Powerbook without really visiting any of the usual sites and my housemate mentioned that she gets it on her computer too. She also mentioned that the router has something to do with Trend but she wasnt sure.
What a stupid thing to set on a router!!!
Now just have to get my other ousemate to disable it somehow...
Many thanks for the replies

Similar Messages

Can anyone advise on the harm of this malware?

Yesterday googled "George Stephenson £5 Note" to get information about the previous UK banknote that has not been legal tender since 2003. The sixth website in the search results is some sort of malware that starts warning you your computer is infected and appears to start scanning your hard drive. Annoying enough - but it also starts putting files into the download list.
I was concerned this may be spyware and eventually have downloaded for use the 30 day trial of macscan. This has found nothing - but takes hours to do. Even though I still have the last one of these downloads in trash, so maybe it is not Trojan Spyware.
I have sent a message to goggle about this malware site and tried to find anyone else to report this to but have failed to find anyone who will investigate.
So I attach the link to the website below in the hope that someone is expert enough to cope with this and tell me what it is. PLEAE DO NOT USE THIS LINK UNTIL SOMEONE COMPETENT HAS ADVISED ON HOW HARMFUL IT IS - IT IMMEDIATELY STARTS DOWNLOADING FILES TO YOUR MACHINE: -
www.fashmedia.co.uk/clients2/george-stephenson-5-pound-note

You need to get that junk off your computer, if you accepted the download and install. Apple has information and instructions for removal:
http://support.apple.com/kb/HT4650
For additional information, see also:
http://www.reedcorner.net/news.php/?p=138
http://www.reedcorner.net/guides/macvirus/
It doesn't matter where you are located, by the way; that's not relevant to the issue, and your firewall won't help in this circumstance if you approve the download and install yourself, though you may be tricked into doing so.
If the message is just popping up when you web surf and you aren't allowing a download and install, then you are just encountering a hacked web site (which may not be the one to which you post the URL; it doesn't when I go there) that has the ad for that fakeware.
Regards.
Message was edited by: Dave Sawyer

The lastest version of Flash on my pc has a typo in the properties, see as follows: "Adober Flashr Player Update Service 13.0 r0". Notice the "r" at the end of both Adobe and Flash. Is this malware of just a poorly completed application?

Is this malware, OR just a poorly completed application?
It updates to a version that is not the absolute latest on the Adobe website downloads page which is what first got my attention. Yesterday I had to delete the updater executable to get Flash to update to the latest. Yet today here goes the updater again with the properties: "Adober Flashr Player Update Service 13.0 r0".

Can you post a screenshot of what you see: https://forums.adobe.com/thread/1070933

Help my safari web browser has been hijacked by some type of malware. My browser is locked in on a web page that pretends to be from the FBI. Is there security software I can purchase to eliminate this malware?

I am not sure if this is the correct forum but I had these bastards who have stolen my web browser. Natually they ask me to send them monies to unlock my browser. It is a dangerous place out there. I would appreciate any recommendations as to possible security software to remove this malware will be much appreciated
thank you
Hijacked Safari Browser

Information.
https://discussions.apple.com/message/17680743#17680743

An unknown excel file has appeared on my desktop. It cannot be deleted and I cannot get any information about it. Is this malware? How can I get rid of it?

An unknown excel file has appeared on my desktop. It cannot be deleted and I cannot get any information about it.
Is this malware? How can I get rid of it?

Hello Jeff,
Thanks very much for your reply. I looked over the article you mentioned, but I have tried all of these methods, but only get the response "The item “29394D00” can’t be moved to the Trash because it can’t be deleted." Similarly, I cannot Get Info on the file. This is why I'm so concerned, it just appeared on my desktop, but I cannot touch it, or open it or delete it...
If you have any more tricks up your sleeve, I'd love to hear about them...
Derek

Can anyone tell me how to get rid of tlb search? it unfortunately entered into my mac. Whenever I use safari, a pop-up window opens with some ads. Please help me to find a way to remove this malware.

Can anyone tell me how to get rid of tlb search? It unfortunately entered into my mac. Whenever I use safari, a pop-up window opens with some ads. Please help me to find a way to remove this malware.

You installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
          Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot" or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight is inexcusable and has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

TS3899 Our CEO has an iPhone and an iPad. Everytime he is at a specific airport (BWI) he is unable to send or recieve email over 4G or wifi. Everything else seems to work just fine over wifi or 4G LTE. Has anyone ever seen anything similar? is this malwar

Our CEO has an iPhone and an iPad. Everytime he is at the Baltimore Washington Airport (BWI) he is unable to send or recieve email over 4G or wifi. Everything else seems to work just fine over wifi or 4G LTE. Has anyone ever seen anything similar? is this malware?
Both devices are on Verizons 4G LTE network. Both devices do have some of the same APPS installed. Can this be a case of him connecting to a rogue wifi network of a hacker that may have installed malicious code on his devices when he connected? That would explain why only his devices have the same exact issue only at BWI airport.

Something similar I've experienced. I was once having to use a AT&T hotspot and the iPad simply refused to access my mail via the mail app. But if I used safari I could get it. So the internet was working, but my supposition is that something with the hotspot's firewall messes with mail exchange.
next time your boss is at BWI, do you guys have a web interface? (for example if I wanted to access my work mail I could get them to set it up via the mail app and exchange, or I could go to a certain web address and access my mail that way via safari)
He could try using safari and the web interface if you have it.
If it's something in the hotspot's firewall I doubt it's anything that can be changed.

Is the iPad and iPhone affected by this malware virus that has infected all these Macs?

I am wondering if this malware that has infected so many Macs has also made iPad and iPhone vulnerable? Could my iPad be infected and how do I check to see if it is or how do you fix this?

I'm not going to post links just so you can have fun mocking. You're a big boy, go read. Something anyone knew had to happen eventually, hackers have gotten tired of zipping into PC's and are turning their attention to Macs. Give it a few years and they'll find a way too poke a hole into Android and iOS and Linux....bored folks with nothing better to do.
Any 'panic' is to be expected especially since Mac has always been very superior in it's 'don't get viruses/less vulnerable to viruses' stuff. Well, that's not because they were never vulnerable, just because hackers have always focused on the larger target base, PC's. But now that Mac market shares are growing, they're a bigger target. Just as tablets will become a bigger target as more and more are put into use.
There will eventually be an iPad virus. May take a few years, but someone will do it if for no other reason than to brag that they did.

Amazon home page opens as 1999 after clicking on a a flash update for youtube in safari. is this malware?

Amazon home page opens as 1999.. when i click anywhere on the page it fades away and the actual site appears. this happened shortly after on safari i clicked on flash update from youtube. is this malware? I ran disk utility but no luck :/ What should I do guys?
Also the same problem exists in both safari and chrome so its not just a safari web hacker

Hello there,
Have you attempted to restart your network by unplugging your router for a full minute, then plugging it back in? This can help with intermittent issues such as what you're seeing with sluggish websites.
Additionally, clearing your browsers cookies and cache can help remove excess data that could be causing some loading issues. For each browser follow the links below:
Safari: https://discussions.apple.com/thread/4448839?tstart=0
Chrome: https://support.google.com/chrome/answer/95582?hl=en-GB
Give those steps a try and see if the issue still persists.
Keep us posted!

Deleted downloaded "Mac Protector Program." Is my computer safe: not infected by this "malware"?

A security alert appeared on my computer; "Install Mac Protector Program". The downloaded file requested that I install It. I did not install the download. I deleted the download and exited safari. Is my computer safe from this "malware'? I assume that it could not install on its own. Am I correct in this, or should I be worried about my computer being infected?

Thank you for your quick response. I was worried that I might have gotten myself into trouble just by downloading the application.
I'm relieved.
Thanks again.

Adobe_flashplayer_e2c7b_Setup.dmg Is this malware? If so, how to detect and remove it?

adobe_flashplayer_e2c7b_Setup.dmg
Is this malware? If so, what is the easiest way to detect and remove it?

There is no need to download anything to solve this problem.
You may have installed one or more of the common types of ad-injection malware. Follow the instructions on this Apple Support page to remove it. It's been reported that some variants of the "VSearch" malware block access to the page. If that happens, start in safe mode by holding down the shift key at the startup chime, then try again.
Back up all data before making any changes.
One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, ask for further instructions.
Make sure you don't repeat the mistake that led you to install the malware. It may have come from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
Malware is also found on websites that traffic in pirated content such as video. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates (OS X 10.10 or later)
or
Download updates automatically (OS X 10.9 or earlier)
if it's not already checked.

On boot a window comes up requesting my password for iCould. Is this malware fishing for my password? It clears ofter 2 refusals.

On boot a window comes up requesting my password for iCould. Is this malware fishing for my password? It clears ofter 2 refusals.

Thank you Eric. This solved my "problem." It was more of a concern. When I set up the latest operating systems of the iPhone and MacBook Pro I did vey little in the Cloud. I just as soon have all my files local have only a MacBook Pro and iPhone.

How do I get rid of this malware? Please help...

At least I think it's malware. I realized last night that there were an awful amount of ads, pop-up windows, and warnings coming from my normally visited sites. This only happens on Google Chrome (does not happen on Firefox and Safari) So I ran Sophos Anti-Virus software. It found two "threats" that I quickly cleaned up. No luck.
Someone in another thread said it is a variant of a "VSearch" trojan and suggested deleting bogus-looking daemons from my /Library/LaunchDaemons folder. I deleted "com.google.keystone.agent.plist" and "com.oracle.java.Java-Updater" (which seemed to help another user), restarted my computer and emptied the trash. No luck. Same results when I followed these instructions as well.
Can someone think of or suggest another way to get this taken care of?
Thank you in advance,
Robin
(OS X Yosemite 10.10.1, Mac Mini)

If removing Chrome extensions doesn't solve the problem, and if you're sure the ads are not just normal web content, then see below.
1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.
The test works on OS X 10.7 ("Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.
Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.
2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.
There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.
You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.
In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.
You may not be able to understand the script yourself. But variations of it have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.
Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.
4. Here's a general summary of what you need to do, if you choose to proceed:
☞ Copy a particular line of text to the Clipboard.
☞ Paste into the window of another application.
☞ Wait for the test to run. It usually takes a few minutes.
☞ Paste the results, which will have been copied automatically, back into a reply on this page.
These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.
5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is sometimes, but not always, slow, run the test during a slowdown.
You may have started up in "safe" mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.
6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.
7. Load this linked web page (on the website "Pastebin.") The title of the page is "Diagnostic Test." Below the title is a text box headed by three small icons. The one on the right represents a clipboard. Click that icon to select the text, then copy it to the Clipboard on your computer by pressing the key combination command-C.
If the text doesn't highlight when you click the icon, select it by triple-clicking anywhere inside the box. Don't select the whole page, just the text in the box.
8. Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad and start typing the name.
Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.
9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter
exec bash
and press return. Then paste the script again.
10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.
If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.
11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:
[Process started]
        Part 1 of 8 done at … sec
        Part 8 of 8 done at … sec
        The test results are on the Clipboard.
        Please close this window.
[Process completed]
The intervals between parts won't be exactly equal, but they give a rough indication of progress. The total number of parts may be different from what's shown here.
Wait for the final message "Process completed" to appear. If you don't see it within about ten minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it and go to the next step. You'll have incomplete results, but still something.
12. When the test is complete, or if you stopped it because it was taking too long, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.
At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.
If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.
13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.
14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you're told to do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.
Copyright © 2014, 2015 by Linc Davis. As the sole author of this work (including the referenced "Diagnostic Test"), I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Is this malware/a scam

i accidentally searched a website and it redirected about 5 times and i got a pop up saying safari has detected malware with a girls voices saying safari has detected malware and to call a number i did not call is this for real or a scam because it was not siri's voice and i did not trust it at all any help would be nice i just want to know if i should have my computer looked at by someone smarter than me

It's not malware and you do not need to download anything. It's a Web scam that only affects your browser, and only temporarily. There are several ways to recover.
1. Some of those scam pages can be dismissed very easily. Press the key combination command-W to close the tab or window. A huge box will pop up. Press the return key and both the box and the page will close. If that doesn't happen, continue.
2. Press and hold command-W. You may hear repeating alert sounds. While holding the keys, click the OK button in the popup. A different popup may appear, which you can cancel out of as usual.
3. From the Safari menu bar, select
Safari ▹ Preferences... ▹ Security
and uncheck the box marked Enable JavaScript. Leave the preferences dialog open.
Close the malicious window or tab.
Re-enable JavaScript and close the preferences dialog.
4. If the Preferences menu item is grayed out, quit Safari. Force quit if necessary. Relaunch it by holding down the shift key and clicking its icon in the Dock. None of the windows and tabs will reopen.
After closing the malicious page, from the menu bar, select
Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data
to get rid of any cookies or other data left by the server. Open your Downloads folder and delete anything you don't recognize.

I noticed a filed called h264daemon in my allowed firewall options. I didn't put it there. Is this malware? I can't delete it but only turn it off. Thanks in advance for any help.

I didn't put it there and can't delete it. I can only turn it off. Is this some kind of Malware? I am not using any other operating system with OS X Version 10.8.2

From Apple support, I found out this file is in the operating system folder. Apple support is satisfied that it's not a virus because a virus wouldn't be mixed with the operating system files. I only have familiarity with PCs and know that malware frequently disguises itself within the Windows operating system. Are there any out there who are adept with OS X 10.8.2? There must be someone. I mean, people code software for new Macs all the time. Anything would be helpfull: a book, an article--anything. I don't want to spend money on an antivirus program that may not even work and probably also slow down my computer. I went through all the major antivirus programs on my PCs. All of them allowed malware to get onto my computers. And what's worse, they couldn't delete the viruses. They would just give complicated instructions that involved manually editing the registry in Windows. The primary reason I bought a Mac is that I was told at a Mac retail store that I don't need an antivirus program; that the operating system is designed with built in barriers to malware. I thank anyone in advance for help.

How to get rid of this Malware

A few days ago I down loaded something something off the internet and now my computer is going crazy with pop-ups and and redirects to different sites. I have tried to to reset all browser settings deleted all cookies hoping that would work but still no luck. Even on Google, every time I search for something I get the yellow add links that were never there before when searching in google. I understand this is a malware problem and the same thing is happening for every browser I used. I ran antivirus software, still says its clean. I am scared to login to any of my accounts for I feel like my computer is at risk. PLEASE HELP!!

You may have inadvertently installed adware. Eradicating it is simple. For an explanation or how this may have occurred, how to avoid it in the future, and for one possible solution read How to install adware.
I ran antivirus software, still says its clean.
Your question was posted in the Classic Mac OS (OS9, OS8 & System 7) forum, and if that is in fact what you are running, please clarify. Assuming you are running a recent version of OS X and not a fifteen+ year old "classic" Mac OS, anti-virus software is useless. Whatever you installed, get rid of it.

Is this malware???

Similar Messages

Maybe you are looking for