Safari Virus?

I appear to have a virus on my Safari browser. I'm getting unblocked popup ads for any and all websites (popup blocker has worked normally 'til now). Any thoughts on how to locate and remove the problem?

Forgot, if you've installed MacKeeper you'll have to Force Quit the process in Activity Monitor, remove it's log-in item in your system Preferences > Accounts, then Easy Find (Spotlight won't catch all of it) and Trash Zeobit or MacKeeper results it's turns up.
Good Luck.
If all that fails, you can hold c and boot from the installer disk again and this time use Disk Utility to Erase with Security Option Zero the whole drive, format it HFS+ Journaled (same name as before) and reinstall OS X, setup (same user name, different password) Software Update and then install programs from fresh sources and user file folder contents back into their same folders again. (same hard drive name and user name preserves iTunes playlists etc.)
Just make sure you have all your serials first and any other essential data as this second method wipes the whole drive, but removes any malware for sure.
Consider cloning your boot drive to a external using Carbon Copy Cloner and connect it only to update it, it's hold the option key bootable, which could have saved your bacon in this case. Just reverse clone and a hour or so later your back to before the mess started occuring.
TimeMachine can do that as well, but it's not bootable and tends to remain connected, updates the malware to the TM drive.

Similar Messages

How to delete safari virus programs

how to delete safari virus programs from the publicity videos software

liviufrommontrouge wrote:
how to delete safari virus programs from the publicity videos software
I'm not sure I understand what that is. Can you clarify?
It's likely that jaredfs' proposed solution will work, if you are infected with some kind of adware. However, it's hard to tell whether that's the case from your description.

Safari virus customer service scam

i catch a Safari virus , it shows the number to call for help 1-877-***-**** - they are asking for the money to help. Should i trust them? And how i can remove the 3rd party bug?
<Edited by Host>

See: A Browser Pop-up has Taken Over Safari to remove such scams.
Use ScamZapper to prevent scams like this from appearing in the future.
(Note that I am affiliated with that site, and some pages contain ads).

I think I have a safari virus.

Hi Guys,
I know the title seems a little over exaggerated but recently I have had an alarming affiliate redirection take over safari. When I do a google search no mater what I search every link is a redirect through six pages of the same affiliate redirect crap to end up at a blank page. I have to cut and past the link under the description in the search results directly into the title bar to get where I want to go. The dodgy links only last for 2 heading clicks at a time then its normal but if you search something else there back for another 2. This is really frustrating. I view/download alot of **** as I have an affiliate site of my own but I am concerned that alot of people may encounter this issue causing a grey cloud over the virus free mac slogan. Any ideas guys???

Whilst no viruses that can attack OS X have so far been detected 'in the wild', i.e. in anything other than laboratory conditions, the appearance of Trojans that can infect a Mac seems to be growing.
SecureMac has introduced a free Trojan Detection Tool for Mac OS X. It's available here:
http://macscan.securemac.com/
The DNSChanger Removal Tool detects and removes spyware targeting Mac OS X.
Upon running the installer, the user's DNS records are modified, redirecting incoming internet traffic through the attacker's servers, where it can be hijacked and injected with malicious websites and pornographic advertisements. The trojan also installs a watchdog process that ensures the victim's DNS records stay modified on a minute-by-minute basis.
SecureMac's DNSChanger Removal Tool allows users to check to see if the trojan has been installed on their computer; if it has, the software helps to identify and remove the offending file. After a system reboot, the users' DNS records will be repaired.
A white paper has recently been published on the subject of Trojans by SubRosaSoft, available here:
http://www.macforensicslab.com/ProductsAndServices/index.php?mainpage=document_general_info&cPath=11&productsid=174
Also, beware of MacSweeper:
MacSweeper is malware that misleads users by exaggerating reports about spyware, adware or viruses on their computer. It is the first known "rogue" application for the Mac OS X operating system. The software was discovered by F-Secure, a Finland based computer security software company on January 17, 2008
http://en.wikipedia.org/wiki/MacSweeper
On June 23, 2008 this news reached Mac users:
http://www.theregister.co.uk/2008/06/23/mac_trojan/
More information on Mac security can be found here:
http://macscan.securemac.com/
The MacScan application can be downloaded from here:
http://macscan.securemac.com/buy/
You can download a 30 day trail copy which enables you to do a full scan of your hard disk. After that it costs $29.95.
More on Trojans on the Mac here:
http://www.technewsworld.com/story/63574.html?welcome=1214487119
The latest news on the subject, from July 25, 2008, is:
Attack code that exploits flaws in the net's addressing system are starting to circulate online, say security experts.
The code could be a boon to phishing gangs who redirect web users to fake bank sites and steal login details.
In light of the news net firms are being urged to apply a fix for the loop-hole before attacks by hi-tech criminals become widespread.
Net security groups say there is anecdotal evidence that small scale attacks are already happening.
Further details here: http://news.bbc.co.uk/2/hi/technology/7525206.stm
There may be other ways of guarding against Trojans, viruses and general malware affecting the Mac, and alternatives will probably appear in the future.

Safari Virus Infected Mac Alert-Is it Legitimate or a Scam?

When I opened Safari today (iMac with Yosemite) I received a macsecurity alert that warmed me that the last website I visited infected my Mac with a virus "Tapsnake". It then lead me to MacKeeper to install something free to remove the virus. I did not do that but was wondering if it is a SCAM or an legitimate warning from Safari. I am running a virus scan now on my computer- any one else had any warnings from safari similar to this? Thanks

They could have left behind software that could allow them to remotely access your computer.
Boot to the Recovery Volume (command - R on a restart or hold down the option/alt key during a restart and select Recovery Volume) or if your OS is 10.6 or earlier, boot off the DVD . Run Disk Utility Verify/Repair and Repair Permissions until you get no errors. Reformat the drive using Disk Utility/Erase Mac OS Extended (Journaled), then click the Option button and select GUID. Then re-install the OS.
OS X Recovery
OS X Recovery (2)
When you reboot, use Setup Assistant to restore your data from your backup that pre-dates the telephone call

Safari virus pop up ad question.

Minutes ago I encountered a pop up ad that said my computer had a virus and I should click on said pop up to remove it. I did not click on it but was unable to close Safari until I forced shut down on my computer. My macbook pro is 2012 and I am new to the Mac world so I need help. Could I still have a virus on my Mac? How would I figure this out? I have an online business and I am worried about my credit card info or other info being compromised. What is security protocol for a situation like this? I use private wifi that is supposedly locked but I live in an apartment and worry about hackers. Am I just being paranoid? Any help will be greatly appreciated.

This is not a virus, just a scam web page. See:
Tech support scam pop-ups
(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

Safari virus? bestsafety14.xorg.pl

I have a strange problem. Safari now comes up with a popup message: http://www3.bestsafety14.xorg.pl Warning! Your computer is vulnerable to malware attacks. We recommend you to check your system immediately. Press OK to start the process now.
OK is the only choice! I have not pressed it, but Safari is therefore unusable. I have yet to find a way to get Safari Mobile out of this without pressing the button (until the dialog is cancelled, no Safari commands are available.)
I tried clearing caches, history and cookies in Settings, but that makes no difference.
What do you think this is, and how can I get out of it and prevent it? iPad doesn't allow you to delete the Safari app.

This isn't a virus, this is a scam popup that tries to trick Windows users into installing malicious software by pretending to be an official Windows alert. It's probably harmless to Mac users, and useless on an iPad/iPhone, since you can't download web content anyway.
Can you get to the tabs button in the bottom right corner of Safari? (The one that's one box on top of the other).
If so, just click on that and hit the red X in the top left corner to close the window.
If that doesn't resolve it, then how are you opening Safari? Did you somehow save this page as a homescreen icon? If so it will try to load that page every time you click on it and you should just delete it (delete added icons by clicking and holding down on them for a few seconds until they start to shake, then an "x" should appear above it)
Message was edited by: C. Ogle

This is a Safari virus?

Every now and then Safari starts showing "**** th3 w0rld!" on its title bar.
Any ideas what this is or maybe how can I fix it?
OS X: 10.5.5
Safari: 3.1.2 (5525.20.1)

LOL!
Not a virus, but possibly a Trojan.
This can be fixed by downloading and running a freeware utility called DNSChanger Removal Tool which you can download from here:
http://www.versiontracker.com/dyn/moreinfo/macosx/33696
Once you have run that utility you have to re-boot your Mac, then reset Safari, and re-enter your DNS settings in System Preferences/Network.

Iphone 4S Safari virus

Safari on my iPhone 4S opens spam websites on its own when I try to visit specific sites that did not used to be a problem. I can visit the sites on any other device without problems. When I visit it on safari on my phone, it loads but then immediatly changes to a spam website. I've tried closing the browser window and exiting Safari. I even tried resetting my phone by holding the home and power buttons until the silver apple appears. I don't know what else to do now except totally erase my phone and then redownload everything. What can I do?

i did the "reset all content and settings" thing after backing up my phone to icloud but when i loaded the backup back onto my phone, the problem was still there.
i think i'm going to have to do the itunes restore and start my phone as a new phone, no icloud backup since it contains the "virus" or whatever is taking over my phone.
i don't see how the itunes restore would not help but i'll post an update afterwards anyway.

A Safari virus?

I am afraid I got a virus on Safari: it doesn't allow me neither to shut the mac down nor simply to quit Safari. Could someone please help?

Help, I have a similar problem, but I don't know if it is a bug of what - my husband's iMac is unable to move from the safari screen which has a pop up saying "congratulations! You could have a chance win an Apple iPad 2! click OK for details" The screen is stuck, he can't change to another site at all. We have tried quitting but the same pop up appears in the same web site address. Please help!

Safari virus different

Lately I have noticed my mac acting different when it comes to searching online. Whenever I try googling something on google, safari opens up a new tab with a irrelevant website i didn't google. Am I experiencing a virus? I need help ASAP. Its getting annoying especially when I'm trying to do homework online and every time i submit my answer safari opens up a new tab once again.

There is no need to download anything to solve this problem. You may have installed a variant of the "VSearch" ad-injection malware. Follow Apple Support's instructions to remove it.
If you have trouble following those instructions, see below.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
The VSearch malware tries to hide itself by varying the names of the files it installs. To remove it, you must first identify the naming pattern.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
/Library/LaunchDaemons
In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "LaunchDaemons" may open. Look inside it for two files with names of the form
          com.something.daemon.plist
and
           com.something.helper.plist
Here something is a variable string of characters, which can be different in each case. So far it has always been a string of letters without punctuation, such as "cloud," "dot," "highway," "submarine," or "trusteddownloads." Sometimes it's a meaningless string such as "e8dec5ae7fc75c28" rather than a word. Sometimes the string is "apple," and then you must be especially careful not to delete the wrong files, because many built-in OS X files have similar names.
If you find these files, leave the LaunchDaemons folder open, and open the following folder in the same way:
/Library/LaunchAgents
In this folder, there may be a file named
          com.something.agent.plist
where the string something is the same as before.
If you feel confident that you've identified the above files, back up all data, then drag just those three files—nothing else—to the Trash. You may be prompted for your administrator login password. Close the Finder windows and restart the computer.
Don't delete the "LaunchAgents" or "LaunchDaemons" folder or anything else inside either one.
The malware is now permanently inactivated, as long as you never reinstall it. You can stop here if you like, or you can remove two remaining components for the sake of completeness.
Open this folder:
/Library/Application Support
If it has a subfolder named just
           something
where something is the same string you saw before, drag that subfolder to the Trash and close the window.
Don't delete the "Application Support" folder or anything else inside it.
Finally, in this folder:
/System/Library/Frameworks
there may an item named exactly
            v.framework
It's actually a folder, though it has a different icon than usual. This item always has the above name; it doesn't vary. Drag it to the Trash and close the window.
Don't delete the "Frameworks" folder or anything else inside it.
If you didn't find the files or you're not sure about the identification, post what you found.
If in doubt, or if you have no backups, change nothing at all.
The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Then, still in System Preferences, open the App Store or Software Update pane and check the box marked
          Install system data files and security updates (OS X 10.10 or later)
or
          Download updates automatically (OS X 10.9 or earlier)
if it's not already checked.

Safari virus/walware warning on ipad

Hi
the other day i got a warning on Safari about a website was trying to download a virus to my mobile device
on the pop up it was saying mobile device not computer, it said to press ok to continue,
i couldn't change the page or anything so i closed safari then opened it up & it was still the same
so i closed with the double press of the circle & pressed the x then i opened up safari again & it was still the same
i didnt know what to do so i pressed ok & tried to close down the page
i need my ipad for work, is there anything i need to worry about??

It's a scam. There are no viruses or malware affecting iPads, unless you have jailbroken the iPad.
Try this - Reset the iPad by holding down on the Sleep and Home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider - let go of the buttons. (This is equivalent to rebooting your computer.) No data/files will be erased. http://support.apple.com/kb/ht1430
 Cheers, Tom

Safari Virus - December 07, 2006

I thought this day would never come but could it be that Safari now has a virus that is quickly affecting MAC users who attempt to access the internet. First it was Safari now my mail server is timing out or unable to connect to the network. Has an official update been posted anywhere from Apple ?????

Not every mac user. I'm not having this issue with Safari. Remember - only those with issues are writing in about them. If 10% of users are having a problem - they are all going to write in. The other 90% don't need to. Be pretty boring (not to mention irritating) if they did Hi, I'm not having a problem from a bunch of folks would only clog up the works. Good luck figuring out what is slowing you down - it could be one or a couple of a miriad of issues.

What is the best way to get rid of troyan virus and safari virus?

what is the best way to get rid of viruses on my macbook? the viruses are causing popups and saying that the device is infected.

ds store wrote:
ClamXav is only a scanner, it can't remove the MacDefender malware.
Yes, it can. ClamXav scans and quarantines it. It was updated.
http://www.reedcorner.net/news.php/?p=98
17" 2.2GHz i7 Quad-Core MacBook Pro  8G RAM  750G HD + OCZ Vertex 3 SSD Boot HD 

Slow safari (virus or similar)

I have an IMac with OS X Yosemite version 10.10.2. Processor is 2.5 GHz, Memory is 4GB. My safari is very slow because some advertisement pages pop up each type I browse the web.Slow

There are instructions here to help remove the causes of such problems:
•Remove unwanted adware that displays pop-up ads and graphics on your Mac - Apple Support
Good luck!

Safari Virus?

Similar Messages

Maybe you are looking for