Safari Alert Suspicious Activity
I got this today when clicking a picture link in a online sport magazine, Safari frozen, so I called to the supposed Support for Apple toll free number and they re-directed and connected me to a TECH CARE LIVE INC. (online technicians) who charge me $169 to solve and clean up my computer online. Was this a scam? if so here is their phone number and e-mail:
1-855-245-1262 [email protected] so Apple can take corrective actions and stop it.
Appreciate any advise
It's a scam.
Can you still use Safari ok?
Apple's toll free number in the U.S is: 1-800-275-2273
Apple never sends email such as the one you received. Nor will they send you an email to verify your Apple ID credentials.
I sincerely hope you did not give then your credit card payment information.
In the future, if you receive an actual email asking to verify your Apple ID or call a tech support number, please forward that email to: [email protected]
That way Apple has a record of it.
Similar Messages
-
Started to get pop ups when tried to open a video on face book. Directed for a download of MPlayerX-2.dmg and did attempt to install but never got video up/.
Error message also states to
To fix it please call Support for Apple +1 800-680-4131 (Toll Free) immediately! and also gives out a web site of http://mac-online-support.comYou may have installed the "Downlite" or "VSearch" ad-injection malware. Follow the instructions on this Apple Support page to remove it.
Back up all data before making any changes.
Besides the files listed in the support article, you may also need to remove this item in the same way:
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, then you may have one of the other kinds of adware covered by the support article. Follow the rest of the instructions in the article.
The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This malware is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates
if it's not already checked. -
Anyone have problems with safari browser getting hijacked to "search" browser. Also then took me to page with this alert "
Suspicious Activity Found On Your Computer, Due to Pop-Up Advertisement Windows and Invasive Links.
Please Contact Certified Live Technicians 1-888-893-2451 (Toll Free)" How do I get this to stop.Force quit Safari and then launch it with the Shift key held down. If that doesn't work, temporarily disconnect the computer from the Internet.
(122945) -
Safari-alert keeps popping on iphone5s...how to remove this?
hi everyone! i have an iphone 5s with upgraded ios to 8.1...i was using safari to search for movies when this popup came and continuously block my screen and asked me to call a number....it was showing safari-alert suspiciou activity mighthave been detected.......and asked me to call this number +18662200627...is this a spam? HOW CAN I REMOVE THE POP UP SO I CAN CONTINUE USING THE SAFARI ON MY PHONE?
See this article.
(Note that I am affiliated with that site, and some pages contain ads). -
Safari won't work. It flashes an alert. Alert says that a Suspicious Activity Might Have been Detected. Major Security Issue. How do i fix this? Please help. Thanks!
You may have installed a variant of the "VSearch" ad-injection malware. Follow Apple Support's instructions to remove it.
If you have trouble following those instructions, see below.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
The VSearch malware tries to hide itself by varying the names of the files it installs. To remove it, you must first identify the naming pattern.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
/Library/LaunchDaemons
In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "LaunchDaemons" may open. Look inside it for two files with names of the form
com.something.daemon.plist
and
com.something.helper.plist
Here something is a variable string of characters, which can be different in each case. So far it has always been a string of letters without punctuation, such as "cloud," "dot," "highway," "submarine," or "trusteddownloads." Sometimes it's a meaningless string such as "e8dec5ae7fc75c28" rather than a word. Sometimes the string is "apple," and then you must be especially careful not to delete the wrong files, because many built-in OS X files have similar names.
If you find these files, leave the LaunchDaemons folder open, and open the following folder in the same way:
/Library/LaunchAgents
In this folder, there may be a file named
com.something.agent.plist
where the string something is the same as before.
If you feel confident that you've identified the above files, back up all data, then drag just those three files—nothing else—to the Trash. You may be prompted for your administrator login password. Close the Finder windows and restart the computer.
Don't delete the "LaunchAgents" or "LaunchDaemons" folder or anything else inside either one.
The malware is now permanently inactivated, as long as you never reinstall it. You can stop here if you like, or you can remove two remaining components for the sake of completeness.
Open this folder:
/Library/Application Support
If it has a subfolder named just
something
where something is the same string you saw before, drag that subfolder to the Trash and close the window.
Don't delete the "Application Support" folder or anything else inside it.
Finally, in this folder:
/System/Library/Frameworks
there may an item named exactly
v.framework
It's actually a folder, though it has a different icon than usual. This item always has the above name; it doesn't vary. Drag it to the Trash and close the window.
Don't delete the "Frameworks" folder or anything else inside it.
If you didn't find the files or you're not sure about the identification, post what you found.
If in doubt, or if you have no backups, change nothing at all.
The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Then, still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates (OS X 10.10 or later)
or
Download updates automatically (OS X 10.9 or earlier)
if it's not already checked. -
I'm unable to open Safari. I keep getting a alert security message Suspicious Activity Might Have been Detected. How can I fix this problem?
You may have installed the "VSearch" trojan. Remove it as follows.
Malware is always changing to get around the defenses against it. These instructions are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Step 1
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
Step 2
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the Internet criminal behind VSearch has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. -
I got a message on my MacBook pro screen that says " Safari Alert" and then goes on to say "suspicious activity might have been detected". It doesn't let me exit the site and keeps reappearing even after I force quit Safari and even after I shut down my computer and turn it back on. What can I do?
Launch Safari with the Shift key held down. If that doesn’t work, disconnect the computer from the Internet.
(116847) -
MAcBook Pro, 2.4 Ghz Intel Core 2 Duo, 4GB 1067Mhz DDR3, Software Mac OS X Lion 10.7.5 (11G63).
Problem: i tried to open Safari about a couple of hours ago and I was presented with this error message block with an address of http://www.virushealthcheck.com. The message is; Windows detected security error, due to suspicious activity found on your computer. Contact Windows Certified Live Tech ( 1.866.606.2003). If I clk the OK button , there are multiple layered windows that will appear after that. Can't get out of it , except to quit Safari. earlier today before this happened I was on Facebook, Instagram, responding email cutting and paste transactions and saving it to Microsoft word. then I turned off my lap top for several hours. When I turned it back on awhile ago, I discovered this problem. on top of that aI can't even clear the history everything is gray out except for the Earlier today, and the day and date of the month. I tried several times to quit Safari, turn off and turn back on my lap top to no avail. My question is; How do I go by to in getting this error message when I click on Safari? Does that mean that I might have a virus in my lap top? Please Help. Thanks.Force Quit .
Press command + option + esc keys together at the same time. Wait.
When Force Quit window appears, select the Safari if not already.
Press Force Quit button at the bottom of the window. Wait.
Safari will quit.
Relaunch Safari holding the shift key down.
http://www.thesafemac.com/fbi-ransomware-virus-rampant/ -
Safari is blocked by fraudulent claim that my computer is infiltrated by suspicious activity
Unable to use Safari as it is blocked by a (fraudulent) message that my computer has an error due to suspicious activity.
How can I unblock Safari?See reply by Kurt Lang
Problem with Safari being blocked by ***.a2ztech.us -
when opening safari i get a message that says major security issue please contact apple immediately suspicious activity might have been detected. what is this and how do i get rid of it so i can use my internet?
A misleading and malicious popup. Launch Safari with the Shift key held down; if that doesn't work, temporarily disconnect the computer from the Internet.
(121307) -
I have a macbook air. Upon searching in safari a window opens up and says http://www.safaricontact-help.com SAFARI ALERT "Your browser has been locked because of possible infections found in your machine. Due to which your browser might be corrupted because of suspicious activity found. Major Security Issue. For immediate assistance through our Apple Certified technicians CALL: +1-855-337-8048(toll free)". I called the number and they don't even answer Apple they just say thank you for calling please continue to hold for the next available agent.
Is this legit and can I get my safari back?It's a JavaScript scam that only affects your web browser, and only temporarily. There are several ways to recover.
1. Some of those scam pages can be dismissed very easily. Press the key combination command-W to close the tab or window. A huge box will pop up. Press the return key and both the box and the page will close. If that doesn't happen, continue.
2. Press and hold command-W. You may hear repeating alert sounds. While holding the keys, click the OK button in the popup. A different popup may appear, which you can cancel out of as usual.
3. From the Safari menu bar, select
Safari ▹ Preferences... ▹ Security
and uncheck the box marked Enable JavaScript. Leave the preferences dialog open.
Close the malicious window or tab.
Re-enable JavaScript and close the preferences dialog.
4. If the Preferences menu item is grayed out, quit Safari. Force quit if necessary. Relaunch it by holding down the shift key and clicking its icon in the Dock. None of the windows and tabs will reopen.
After closing the malicious page, from the menu bar, select
Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data
to get rid of any cookies or other data left by the server. Open your Downloads folder and delete anything you don't recognize. -
I was browsing Safari on my IMac today when I suddenly got a dialogue box supposedly from Apple Security called Safaro-Alert. It claims suspicious activity detected. Your browser might have been hijacked and then it gives a number to call 1-866-782-9808 (Not Apple)
Since then I cannot quit Safari on the IMac and when I force quit it returns as soon as I open it.
Anyone else had this experience. Bob (Using my wife's MacBook)1. Some of those scam pages can be dismissed very easily. Press command-W to close the tab or window. A huge box will pop up. Press the return key and both the box and the page will close. If that doesn't happen, continue.
2. From the Safari menu bar, select
Safari ▹ Preferences... ▹ Security
and uncheck the box marked Enable JavaScript. Leave the preferences dialog open.
Close the malicious window or tab.
Re-enable JavaScript and close the preferences dialog.
3. If the Preferences menu item is grayed out, quit Safari. Force quit if necessary. Relaunch it by holding down the shift key and clicking its icon in the Dock. From the menu bar, select
Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data
to get rid of any cookies or other data left by the server. Open your Downloads folder and delete anything you don't recognize. -
On Friday afternoon, I attempted to reply to emails in my Yahoo Inbox, but I received a pop-up message preventing me from sending the emails. It said that my emails cannot be sent due to suspected "suspicious activity" on my email account and cannot send it in order to protect me and those I am attempting to send the messages to. I looked up Yahoo Help and the online suggestion was that my ISP might be blocking the email and I might have to change my ISP address. My antivirus software carrier's server went down briefly a couple of weeks ago and I could not upload the updates until they were up and running again. I had some suspicious emails generated from my account during that time, without my knowledge. I changed my password immediately and updated my Email Protection through my antivirus software program. But now I can't send emails. Any suggestions? Thank you!
From the Mail menu bar, select
Window ▹ Connection Doctor
Click the Show Detail button. A drawer opens. Click Check Again and post the text that appears. Anonymize any personal information before posting. -
While sending an email message to someone a pop up that says there is suspicious activity in my account.
It says that I cannot send. What can I do?This might be caused by corrupted cookies.
Clear the cache and the cookies from sites that cause problems.
"Clear the Cache":
*Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
*Tools > Options > Privacy > Cookies: "Show Cookies"
*http://kb.mozillazine.org/Cookies -
Is there a "Safari Alert" phishing scam that asks you to call tech support at 844-877-7978
Is there a "Safari Alert" phishing scam that asks you to call tech support at 844-877-7978
Yes, it's a scam. Do not call any phone number.
Helpful Links Regarding Malware Problems
If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide, remove adware that displays pop-up ads and graphics on your Mac, and AdwareMedic. If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.) You might consider adding this Safari extensions: Adblock Plus 1.8.9.
Open Safari, select Preferences from the Safari menu. Click on Extensions icon in the toolbar. Disable all Extensions. If this stops your problem, then re-enable them one by one until the problem returns. Now remove that extension as it is causing the problem.
The following comes from user stevejobsfan0123. I have made minor changes to adapt to this presentation.
Fix Some Browser Pop-ups That Take Over Safari.
Common pop-ups include a message saying the government has seized your computer and you must pay to have it released (often called "Moneypak"), or a phony message saying that your computer has been infected, and you need to call a tech support number (sometimes claiming to be Apple) to get it resolved. First, understand that these pop-ups are not caused by a virus and your computer has not been affected. This "hijack" is limited to your web browser. Also understand that these messages are scams, so do not pay any money, call the listed number, or provide any personal information. This article will outline the solution to dismiss the pop-up.
Quit Safari
Usually, these pop-ups will not go away by either clicking "OK" or "Cancel." Furthermore, several menus in the menu bar may become disabled and show in gray, including the option to quit Safari. You will likely have to force quit Safari. To do this, press Command + option + esc, select Safari, and press Force Quit.
Relaunch Safari
If you relaunch Safari, the page will reopen. To prevent this from happening, hold down the 'Shift' key while opening Safari. This will prevent windows from the last time Safari was running from reopening.
This will not work in all cases. The shift key must be held at the right time, and in some cases, even if done correctly, the window reappears. In these circumstances, after force quitting Safari, turn off Wi-Fi or disconnect Ethernet, depending on how you connect to the Internet. Then relaunch Safari normally. It will try to reload the malicious webpage, but without a connection, it won't be able to. Navigate away from that page by entering a different URL, i.e. www.apple.com, and trying to load it. Now you can reconnect to the Internet, and the page you entered will appear rather than the malicious one.
Maybe you are looking for
-
Search in Internal Table Utility -- Need Pointers
Hi Experts, As per my requirement i need to search for words in internal table and arrange internal table based on ranking i.e record which has maximum no. of hits should come first. Example: search for a string 'media rent'. Incoming internal table
-
Vol of the HD be read with labvew 7
hi, how can the vol of the HD be read with labvew 7 without using the system exe?
-
DVD shows no files but Finder info says DVD is full to the brim
Hello, I have a DVD which a friend of mine burned for me; he used a HD-Recorder to record a tv show for me which I missed, but I do not know which model he owns. When I insert it into my MacBooPro3,1 model with 10.6.1, which does run in 32-bit-mode (
-
Hi experts i've created in SRm 7.0 EBP some surveies and some questionnaires. They appare done perfectally via SAP GUI in SRM, but when i log in in Enterprise Portal, in the Tab "Vendor Evaluation" i cannot see the work saved via SAP GUI. Is there a
-
hi guys, i'm having a issue where not able to get the data from selected_items below with zero_count NE 'X'. fact is we have data in the table, however for some unknown reason it doesn't pick up during the looping. pleaase kindly advise. thanks.