Safari Virus Infected Mac Alert-Is it Legitimate or a Scam?

When I opened Safari today (iMac with Yosemite) I received a macsecurity alert that warmed me that the last website I visited infected my Mac with a virus "Tapsnake". It then lead me to MacKeeper to install something free to remove the virus. I did not do that but was wondering if it is a SCAM or an legitimate warning from Safari. I am running a virus scan now on my computer- any one else had any warnings from safari similar to this? Thanks

They could have left behind software that could allow them to remotely access your computer.
Boot to the Recovery Volume (command - R on a restart or hold down the option/alt key during a restart and select Recovery Volume) or if your OS is 10.6 or earlier, boot off the DVD . Run Disk Utility Verify/Repair and Repair Permissions until you get no errors. Reformat the drive using Disk Utility/Erase Mac OS Extended (Journaled), then click the Option button and select GUID. Then re-install the OS.
OS X Recovery
OS X Recovery (2)
When you reboot, use Setup Assistant to restore your data from your backup that pre-dates the telephone call

Similar Messages

Is there a virus infecting Macs called Tapsnake?

I'm running OS X Yosemite 10.10.2
I received an alert that my mac was infected by a virus called Tapsnake and then directed to download a virus removal.
Is this a scam?

BE wary of what was telling you that you,have this virus.
if mackeeper, get rid of it.
google how to remove it.

SAFARI VIRUS ON MAC

Safari no longer opens on my Macbook air 2013 model running 10.10.1, can someone please help!!

You may have installed the "Genieo" or "InstallMac" ad-injection malware. Follow the instructions on this Apple Support page to remove it.
Back up all data before making any changes.
Besides the files listed in the linked support article, you may also need to remove this file in the same way:
~/Library/LaunchAgents/com.genieo.completer.ltvbit.plist
If there are other items with a name that includes "Genieo" or "genieo" alongside any of those you find, remove them as well.
One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, then you may have one of the other kinds of adware covered by the support article. Follow the rest of the instructions in the article.
Make sure you don't repeat the mistake that led you to install the malware. Chances are you got it from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates
if it's not already checked.

I think I have a safari virus.

Hi Guys,
I know the title seems a little over exaggerated but recently I have had an alarming affiliate redirection take over safari. When I do a google search no mater what I search every link is a redirect through six pages of the same affiliate redirect crap to end up at a blank page. I have to cut and past the link under the description in the search results directly into the title bar to get where I want to go. The dodgy links only last for 2 heading clicks at a time then its normal but if you search something else there back for another 2. This is really frustrating. I view/download alot of **** as I have an affiliate site of my own but I am concerned that alot of people may encounter this issue causing a grey cloud over the virus free mac slogan. Any ideas guys???

Whilst no viruses that can attack OS X have so far been detected 'in the wild', i.e. in anything other than laboratory conditions, the appearance of Trojans that can infect a Mac seems to be growing.
SecureMac has introduced a free Trojan Detection Tool for Mac OS X. It's available here:
http://macscan.securemac.com/
The DNSChanger Removal Tool detects and removes spyware targeting Mac OS X.
Upon running the installer, the user's DNS records are modified, redirecting incoming internet traffic through the attacker's servers, where it can be hijacked and injected with malicious websites and pornographic advertisements. The trojan also installs a watchdog process that ensures the victim's DNS records stay modified on a minute-by-minute basis.
SecureMac's DNSChanger Removal Tool allows users to check to see if the trojan has been installed on their computer; if it has, the software helps to identify and remove the offending file. After a system reboot, the users' DNS records will be repaired.
A white paper has recently been published on the subject of Trojans by SubRosaSoft, available here:
http://www.macforensicslab.com/ProductsAndServices/index.php?mainpage=document_general_info&cPath=11&productsid=174
Also, beware of MacSweeper:
MacSweeper is malware that misleads users by exaggerating reports about spyware, adware or viruses on their computer. It is the first known "rogue" application for the Mac OS X operating system. The software was discovered by F-Secure, a Finland based computer security software company on January 17, 2008
http://en.wikipedia.org/wiki/MacSweeper
On June 23, 2008 this news reached Mac users:
http://www.theregister.co.uk/2008/06/23/mac_trojan/
More information on Mac security can be found here:
http://macscan.securemac.com/
The MacScan application can be downloaded from here:
http://macscan.securemac.com/buy/
You can download a 30 day trail copy which enables you to do a full scan of your hard disk. After that it costs $29.95.
More on Trojans on the Mac here:
http://www.technewsworld.com/story/63574.html?welcome=1214487119
The latest news on the subject, from July 25, 2008, is:
Attack code that exploits flaws in the net's addressing system are starting to circulate online, say security experts.
The code could be a boon to phishing gangs who redirect web users to fake bank sites and steal login details.
In light of the news net firms are being urged to apply a fix for the loop-hole before attacks by hi-tech criminals become widespread.
Net security groups say there is anecdotal evidence that small scale attacks are already happening.
Further details here: http://news.bbc.co.uk/2/hi/technology/7525206.stm
There may be other ways of guarding against Trojans, viruses and general malware affecting the Mac, and alternatives will probably appear in the future.

Some one has blocked Safari on my Mac Air for 'security reasons'

Someone has blocked Safari on my Mac air " for security" temporarily the same message came up on my iPhone 6 Plus but is now gone. Need to remove the block from my computer

Helpful Links Regarding Malware Problems
If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide, remove adware that displays pop-up ads and graphics on your Mac, and AdwareMedic. If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.) You might consider adding this Safari extensions: Adblock Plus 1.8.9.
Open Safari, select Preferences from the Safari menu. Click on Extensions icon in the toolbar. Disable all Extensions. If this stops your problem, then re-enable them one by one until the problem returns. Now remove that extension as it is causing the problem.
The following comes from user stevejobsfan0123. I have made minor changes to adapt to this presentation.
Fix Some Browser Pop-ups That Take Over Safari.
Common pop-ups include a message saying the government has seized your computer and you must pay to have it released (often called "Moneypak"), or a phony message saying that your computer has been infected, and you need to call a tech support number (sometimes claiming to be Apple) to get it resolved. First, understand that these pop-ups are not caused by a virus and your computer has not been affected. This "hijack" is limited to your web browser. Also understand that these messages are scams, so do not pay any money, call the listed number, or provide any personal information. This article will outline the solution to dismiss the pop-up.
Quit Safari
Usually, these pop-ups will not go away by either clicking "OK" or "Cancel." Furthermore, several menus in the menu bar may become disabled and show in gray, including the option to quit Safari. You will likely have to force quit Safari. To do this, press Command + option + esc, select Safari, and press Force Quit.
Relaunch Safari
If you relaunch Safari, the page will reopen. To prevent this from happening, hold down the 'Shift' key while opening Safari. This will prevent windows from the last time Safari was running from reopening.
This will not work in all cases. The shift key must be held at the right time, and in some cases, even if done correctly, the window reappears. In these circumstances, after force quitting Safari, turn off Wi-Fi or disconnect Ethernet, depending on how you connect to the Internet. Then relaunch Safari normally. It will try to reload the malicious webpage, but without a connection, it won't be able to. Navigate away from that page by entering a different URL, i.e. www.apple.com, and trying to load it. Now you can reconnect to the Internet, and the page you entered will appear rather than the malicious one.

How can I clean virus infected files on my Time Machine disk?

I am running McAfee VirusScan and it locates and cleans virus infected files just fine on my computer, but when it finds infected files on my Time Machine backup drive it says "Repair Failed". Is there a way to clean infected files on my Time Machine backup drive?
Related question: Is this because the actual files are saved in a central hidden location and the files I see when I open the backup disk with finder are actually just alias links?

Schmactor,
First, it is unlikely that your software is actually finding a virus of any kind. Many supposed reports of a virus will, in fact, be perfectly legitimate (and harmless) files. While it is possible that you'll receive a virus, it is still unlikely. Most ISPs run anti-virus software on their email servers; if a virus is sent to you in an email, it is usually removed before you download it.
Even if you have downloaded an email, it is even less likely that you're going to send it to a Windows-using friend. Since any Windows virus is going to do absolutely nothing on your Mac, you most likely will just delete it. Are you in the habit of forwarding random emails that have unidentifiable attachments to your friends?
Keep in mind that it is always in the best interest of the developers of anti-virus software titles that the software constantly "finds" things, even when nothing exists. If you were to purchase anti-virus software, only to find that it does absolutely nothing for months at a time, you will not pay for further updates. I have been using a Mac for many, many years, and I have never run any kind of anti-virus software. I have also never sent a virus to someone else.
Scott

What is the best mac cleaner and anti virus for mac pro.

what is the best mac cleaner and anti virus for mac pro.

OS X already includes everything it needs to protect itself from viruses and malware. Keep it updated with software updates from Apple.
A much better question is "how should I protect my Mac":
Never install any product that claims to "speed up", "clean up", "optimize", or "accelerate" your Mac. Without exception, they will do the opposite.
Never install pirated or "cracked" software, software obtained from dubious websites, or other questionable sources. Illegally obtained software is almost certain to contain malware.
Don’t supply your password in response to a popup window requesting it, unless you know what it is and the reason your credentials are required.
Don’t open email attachments from email addresses that you do not recognize, or click links contained in an email:
Most of these are scams that direct you to fraudulent sites that attempt to convince you to disclose personal information.
Such "phishing" attempts are the 21st century equivalent of a social exploit that has existed since the dawn of civilization. Don’t fall for it.
Apple will never ask you to reveal personal information in an email. If you receive an unexpected email from Apple saying your account will be closed unless you take immediate action, just ignore it. If your iTunes or App Store account becomes disabled for valid reasons, you will know when you try to buy something or log in to this support site, and are unable to.
Don’t install browser extensions unless you understand their purpose. Go to the Safari menu > Preferences > Extensions. If you see any extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone.
Don’t install Java unless you are certain that you need it:
Java, a non-Apple product, is a potential vector for malware. If you are required to use Java, be mindful of that possibility.
Disable Java in Safari > Preferences > Security.
Despite its name JavaScript is unrelated to Java. No malware can infect your Mac through JavaScript. It’s OK to leave it enabled.
Block browser popups: Safari menu > Preferences > Security > and check "Block popup windows":
Popup windows are useful and required for some websites, but popups have devolved to become a common means to deliver targeted advertising that you probably do not want.
Popups themselves cannot infect your Mac, but many contain resource-hungry code that will slow down Internet browsing.
If you ever see a popup indicating it detected registry errors, that your Mac is infected with some ick, or that you won some prize, it is 100% fraudulent. Ignore it.
Ignore hyperventilating popular media outlets that thrive by promoting fear and discord with entertainment products arrogantly presented as "news". Learn what real threats actually exist and how to arm yourself against them:
The most serious threat to your data security is phishing. To date, most of these attempts have been pathetic and are easily recognized, but that is likely to change in the future as criminals become more clever.
OS X viruses do not exist, but intentionally malicious or poorly written code, created by either nefarious or inept individuals, is nothing new.
Never install something without first knowing what it is, what it does, how it works, and how to get rid of it when you don’t want it any more.
If you elect to use "anti-virus" software, familiarize yourself with its limitations and potential to cause adverse effects, and apply the principle immediately preceding this one.
Most such utilities will only slow down and destabilize your Mac while they look for viruses that do not exist, conveying no benefit whatsoever - other than to make you "feel good" about security, when you should actually be exercising sound judgment, derived from accurate knowledge, based on verifiable facts.
Do install updates from Apple as they become available. No one knows more about Macs and how to protect them than the company that builds them.
Summary: Use common sense and caution when you use your Mac, just like you would in any social context. There is no product, utility, or magic talisman that can protect you from all the evils of mankind.

Cleaning virus-infected files on external hard drive used for Time Machine

I am kinda reposting this with some extra explanation since I didn't really get any good respnses on my first post:
I am running McAfee VirusScan and it locates and cleans virus infected files just fine on my computer, but when it finds infected files on the external hard drive I use for Time Machine backups, it says "Repair Failed". Is there a way to clean infected files on my Time Machine backup drive?
I had found a virus in several documents on my Mac, which I cleaned, but it seemed to infect a bunch of the files located in Time Machine as well. I know these files shouldn't harm my Mac, but I still don't like having virus infected files. They seem to propagate and I don't want to give them to any of my Windows-using friends.

Hi,
Usually (but not always), virus-infected files aren't system-related, so if they cannot be repaired, there should be an option in VirusScan to delete them or quarantine them instead of repairing them. Assuming that you are archiving Mac-related files and not archives of Windows files, then it should certainly be safe to just have VirusScan delete or quarantine them. An alternative is that you could delete them manually. But before you do any of this, be sure to take a look at the filename and its location in the folder hierarchy to make sure that you aren't removing a file that's critical to the operation of some piece of software.
Hope this helps,
Ken

Mac Alert systems issue

Hello I just got an Mac Alert systems issue security warning on my screen. I tried getting apple to help me out but they directed with firefox when the problem is Safari. I unistalled Safari and then redownloaded but it still shows up. What do I do

Hello
I tried to relaunch while holding down shift key and it didnt do anything to solve the issue.

Virus for Macs

Hi everyone
Should we be worried about this?
Mario
PS:I found this on CNN
Apple users may find worm
Virus spread through instant messaging is the first to attack the Mac OS X platform.
February 17, 2006: 5:51 AM EST
SAN FRANCISCO (Reuters) - A malicious computer worm has been found that targets Apple Computer Inc.'s Mac OS X operating system, believed to be the first such virus aimed specifically at the Mac platform.
The worm is called OSX/Leap-A, according to a posting on the Web site of antivirus software company Sophos, which said the worm is spread via instant messaging programs.
The worm attempts to spread via Apple's (Research) iChat instant messaging program, which is compatible with America Online's popular AIM instant messaging program, according to the Sophos Web site.
The worm sends itself to available contacts on the infected users' buddy list in a file called "latestpics.tgz," according to the Sophos Web site.
The vast majority of malicious hacks are aimed at Microsoft Corp.'s Windows operating system and some of its products, largely because Microsoft has more than 90 percent of the market for computer operating systems.
"This first Macintosh OS X threat is an example of the continuing spread of malicious code on to other platforms," said Vincent Weafer, senior director at Symantec Security Response, in a statement.
The worm will not automatically infect Mac computers, but will ask users to accept the file, Weafer said.
Symantec ranked the new worm as a Level 1 threat (with 5 being the most severe).
An Apple spokesperson was not immediately available to comment.
---------------

Hi Mario!
Read these:
Macworld: News: Leap-A malware: what you need to know
Macworld: News: Digging deeper into the Leap-A malware
More links in Ralph Johns (UK) Post.
ali b

How to delete safari virus programs

how to delete safari virus programs from the publicity videos software

liviufrommontrouge wrote:
how to delete safari virus programs from the publicity videos software
I'm not sure I understand what that is. Can you clarify?
It's likely that jaredfs' proposed solution will work, if you are infected with some kind of adware. However, it's hard to tell whether that's the case from your description.

Transfer virus from Mac to Windows?

My work computer running Windows XP just got a virus/trogan. It's called Antivirus Live and apparently it's transferred via pdf files. The only pdf I've opened in recent memory is one from my partner who was using a Macbook running Snow Leopard. She does not have Windows installed on her Mac. The pdf was created on the Mac from a Pages file and had not been edited on any other computer before she sent it to me.
So, can Macs be a 'carrier' of viruses and infect Windows machines? If so, how do I get rid of it on the Mac so that it doesn't continue to infect Windows machines?

Antivirus Live infections are not transferred via PDF unless there's a very new version of this malware that I haven't seen nor heard about.
Did you respond to any "virus" warnings on your Windows system recently? Antivirus Live (and it's many, many sibling versions) is contracted by a Windows user who while surfing the web sees the fake "virus warning" that the developers make pop up by hacking or tagging onto other web sites. The user, being fooled by the popup into thinking their system has viruses, then mistakenly downloads and install this "antivirus software" which is in and of itself is malware. The only way a PDF file could be involved would be if someone were to disguise the installer as a PDF file and so entice to get the user to run it.
Macs be a 'carrier' of viruses and infect Windows machines?
Only if a Mac user were to deliberately send an malware file to a Windows user. This could be done by trickery, making the user thing that the file was something another user might want, but as of today there have been no confirmed reports of any virus (other than the Word macro virus) or worm that can infect Mac OS X, much less transmit themselves to a Windows system.
Hope this helps clear things up.

Safari is infected with adware

Safari has been compromised by some adware virus. It takes over the preferences and will not let me change them.
I cannot delete Safari to re-install it. I reinstalled Yosemite, but Safari remained infected.
Is there anything I can do? The only answer I found so far is to just use another browser app like Firefox.

Please review the options below to determine which method is best to remove the Adware installed on your computer.
The Easy, safe, effective method:
http://www.adwaremedic.com/index.php
If you are comfortable doing manual file removals, use the Apple support document below.
http://support.apple.com/en-us/HT203987
Also read the articles below to be more prepared for the next time there is an issue on your computer.
https://discussions.apple.com/docs/DOC-7471
https://discussions.apple.com/docs/DOC-8071
http://www.thesafemac.com/tech-support-scam-pop-ups/

ITunes major cause of virus infections?

At my company, the "Corporate Compliance Officer" made this statement,
"First and foremost, download sites such as iTunes are one of the major causes of virus infections."
This got me thinking: Is he right or is he just blowing smoke? Has anyone compiled a statistic on this? I would love to disprove this statement. Therefore, does anyone have any ammunition for me to use because iTunes URL is now being blocked due to this reasoning?
Thanks for your help.
PowerMac G5 Mac OS X (10.4.8)

Complete rot. The iTunes Music Store has never been shown to be a source of any type of virus or other infection (a few video iPods recently have shipped with a Windows worm copied on them - sloppy security precautions by the manufacturing plant, clearly- but that's a different issue). In fact, I'd rate is as just about impossible, since all the tracks and videos on the iTunes Music Store are in a copy-protected format that would be very difficult to infect with any sort of virus payload.
I think your "compliance officer" is thinking of peer-to-peer sites such as Limewire and is either mistakenly lumping the iTunes Music Store in with them or is just badly misinformed.

Had to have my computer wiped clean due to virus infection. In trying to install acrobat 9, i get a message invalid serial number, even though it is the serial number in my account. What to do?

Had to have my computer wiped clean due to virus infection. In trying to re-install acrobat 9, i get a message "invalid serial number", even though it is the serial number in my account. What to do?

there is a lot of info at that link. by checking that link you'll see that serial number only works for the exact product for which it was purchased.
ie, if you purchase acrobat 9 std, you need to use acrobat 9 std installation files, not acrobat 9 pro.
Downloadable installation files available:
Suites and Programs: CC 2014 | CC | CS6 | CS5.5 | CS5 | CS4, CS4 Web Standard | CS3
Acrobat: XI, X | 9,8 | 9 standard
Premiere Elements: 13 | 12 | 11, 10 | 9, 8, 7 win | 8 mac | 7 mac
Photoshop Elements: 13 |12 | 11, 10 | 9,8,7 win | 8 mac | 7 mac
Lightroom: 5.7.1| 5 | 4 | 3
Captivate: 8 | 7 | 6 | 5.5, 5 | 1
Contribute: CS5 | CS4, CS3 | 3,2
FrameMaker: 12, 11, 10, 9, 8, 7.2
Download and installation help for Adobe links
Download and installation help for Prodesigntools links are listed on most linked pages. They are critical; especially steps 1, 2 and 3. If you click a link that does not have those steps listed, open a second window using the Lightroom 3 link to see those 'Important Instructions'.

Safari Virus Infected Mac Alert-Is it Legitimate or a Scam?

Similar Messages

Maybe you are looking for