Virus in Safari?

I recent started having an issue with Safari. In my recent searches (under the spotlight google) it says that I'm searching really strange and vulgar things. I don't know how to fix it. I would go so far as to just reinstalling all of OS X, because I just want to clean it all out anyway, but I don't know how to do that. Where can I get information on how to completely clean out my iBook? Thanks for answering.

I am afraid it is likely a result of a more disturbing source.
There are no viruses for mac or safari... there was only an couple of exploits which have been patched .. one of which required the use of the automatic execution of downloads ... (and required you to download a malicious .dmg)
Anyway moving on, I believe what you are referring to is the google search history, and it's autocompletion. If so then those vulgar things are likely to have been typed by anyone you have shared your mac with.
You should be able to remove all history and caches of these "vulgar things" by resetting safari (File> Reset Safari...>)... no other damage could have been done (other than psychological)
I suggest you have words with your fellow users and consider giving them a separate account with restricted access to the internet if you believe they cannot be trusted.
The next release of OS X includes a built in parental control feature specifically for things like the internet. This may be of interest to you. In the mean time you can limit access to specific applications under the users pref. pane.

Similar Messages

My iMac tells me it picked up a virus on safari and is telling me to call a number,could it b true

my iMac is posting me that it picked up a virus on safari and telling total a certain number to get it checked out,could it be true?

If that doesn't work, try to shutdown Safari and disconnect from the network. Then while disconnected from network restart Safari.

How can delete the serve.bannersdontwork virus from Safari on Mac?

Hello @all,
How can delete the serve.bannersdontwork virus from Safari on Mac?
About every 8-20 clicks Safari opens a webside named serve.bannersdontwork.
I can not remove this with my Avira antivirus programm.
Can anybody help me?
THX
Hallo an alle,
Ich habe mir einen Virus eingefangen, serve.bannersdontwork, auf Safari.
Alle 8-20 clicks öffnet sich diese Seite "serve.bannersdontwork" und leitet mich auf andere weiter.
Über mein Antivirusprogramm Avira konnte ich den Virus nicht beheben.
Auch die erweiterung AdBlock hilf hier nicht weiter.
Wer weiß, oder hat eine Ahnung, wie man diesen Virus wieder los wird?
Danke schonmal im voraus!!

From the Safari menu bar, select
Safari ▹ Preferences ▹ Extensions
Turn all extensions OFF and test. If the problem is resolved, turn extensions back ON and then disable them one or a few at a time until you find the culprit.
If you wish, you may be able to salvage the errant extension by uninstalling and reinstalling it. Its settings will revert to their defaults. If the extension still causes a problem, remove it permanently or refer to its developer for support.

I have a virus on safari how to resolve

i am suffering for the last couple of days that i found a virus on safari please help me out to resolve this issue i did reset safari but nothing happened .

There are no known viruses, so you may have some other malware, but you haven't provided any information that's useful.
Helpful Links Regarding Malware Protection
An excellent link to read is Tom Reed's Mac Malware Guide.
Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.
See these Apple articles:
Mac OS X Snow Leopard and malware detection
OS X Lion- Protect your Mac from malware
OS X Mountain Lion- Protect your Mac from malware
About file quarantine in OS X
If you require anti-virus protection Thomas Reed recommends using Dr.Web Light from the App Store. It's free, and since it's from the App Store, it won't destabilize the system. If you prefer one of the better known commercial products, then Thomas recommends using Sophos.(Thank you to Thomas Reed for these recommendations.) If you already use Sophos, then be aware of this if you are using Mavericks: OS X Mavericks- Sophos Anti-Virus on-access scanner versions 8.0 - 9.1 may cause unexpected restarts
From user Joe Bailey comes this equally useful advice:
The facts are:
1. There is no anti-malware software that can detect 100% of the malware out there.
2. There is no anti-malware that can detect anything targeting the Mac because there
     is no Mac malware in the wild, and therefore, no "signatures" to detect.
3. The very best way to prevent the most attacks is for you as the user to be aware that
     the most successful malware attacks rely on very sophisticated social engineering
     techniques preying on human avarice, ****, and fear.
4. Internet popups saying the FBI, NSA, Microsoft, your ISP has detected malware on
    your computer is intended to entice you to install their malware thinking it is a
    protection against malware.
5. Some of the anti-malware products on the market are worse than the malware
    from which they purport to protect you.
6. Be cautious where you go on the internet.
7. Only download anything from sites you know are safe.
8. Avoid links you receive in email, always be suspicious even if you get something
    you think is from a friend, but you were not expecting.
9. If there is any question in your mind, then assume it is malware.

Need help getting rid of Trovi virus on Safari and Chrome. Cannot use the instructions Apple sent because the copy command under the edit tab does not work.

I use OS X 10.9.5. I have a trovi virus on Safari and Chrome. Yesterday I thought I had gotten rid of Trovi, but it's back on both my search engines. The directions Apple sent yesterday do not work; the copy function under the edit tab is grayed out and non-responsive. Can anyone help me to get rid of this virus? Thanks.

Are you referring to these instructions?
Remove unwanted adware that displays pop-up ads and graphics on your Mac - Apple Support
If so, be sure to read the instructions carefully, and note that you will need to repeat the numbered steps in the Conduit/Trovi/SearchProtect removal instructions for each line shown, not all together.
If those instructions aren't working for you, for whatever reason, try my Adware Removal Guide. It provides similar instructions, worded differently, as well as an app (AdwareMedic) that can help you do the removal automatically.
(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

Virus in safari after installing OS Lion

Shortly after installing OSX Lion, I downloaded content from three "Rorshach" sites, and now whenever I open Safari, three windows open and a dialogue box pops up in front saying I have won a free iPad. There is no way to close the pop-up, and I have to force quite Safari to use my computer. I can't uninstall and reinstall Safari, because it is part of the operating system. What should I do? I have time machine backups of my data, but not my OS.

As Kirk says, you don't have a virus.
In Lion, apps re-open whatever windows were open when they quit the next time you start them up. So, you quit Safari with those pop-ups open, so it's trying to re-open them every time you launch it again.
Why can't you close those pop-ups? All Safari windows should be closeable, and I'm not aware of any way to prevent that. Can you provide a screenshot? Use command-shift-3 (or command-shift-4 to select only a part of the screen), then upload the photo here by clicking the camera icon in the editor.

Ipad virus? safari randomly shuts down.

how do you get rid of an ipad virus? everyone says there is no way an ipad can get a virus, im not sure if i fully beleive that it is IMPOSSIBLE. i have the first generation ipad and in the last few weeks my internet will randomly shut off and take me to the home screen. when this happens the whole screen goes black and then the home screen reappears. Also my email has apparently sent out spam/virus to my contact list, which i am unable to veiw.

You could try a reset on the iPad. Hold down the Home button and the power button until it restarts. That might help Safari run a little better.
Is your email account set up on any other devices? Maybe your email address is being spoofed. I would suggest changing your email password.

How can I remove a virus on safari?

when I try to enter safari, I get a message that I may have picked up a virus and I should call a particular telephone number. I do not recognize the name of the company (it is not apple). Is there anything I can do? I have tried to trash the safari application and I am told that OS X requires safari. I installed Google Chrome so that I am able to use that as my search engine. Can anyone help?

Choose Force Quit from the Apple menu, close Safari, and then launch it with the Shift key held down. If that doesn't work, temporarily disconnect the computer from the Internet.
(124986)

Help iMac w/Lion. Virus/malware Safari can't shutdown. Got pop up saying I won a prize. Did not select OK. Have to force shutdown. On restart of Safari get same pop up. Locks up Safari. Any help would be greatly appreciated.

PiCked up a virus/malware please help me get rid of it. While browsing with Safari got pop up saying I won a prize. Click OK to find out what I won. Did not click Ok, but cannot close Safari without using forced shutdown. Powering down computer and restarting then selecting Safari brings up same prize window. Just installed Trend Microsoftware for Mac. It's scanning now. Don't think it will work.
If I open another on same iMac everything seems ok.
Any help would be greatly appreciated.
Thanks

I am also running Lion and had the same problem: a persistent popup on top of a half-opened Safari window saying that I had won a prize and should click OK to claim it. If I forced Safari to quit, the same pages and popup menu would appear when I then reopened Safari. From what I can tell, the problem results simply from the fact that Safari in Lion defaults to auto-reopening web pages that were open when Safari last quit, including those suspicious pages that may have prompted the user to force-quit Safari in the first place. I solved the problem this way:
(1) After force-quitting Safari, I went to my user Library folder and found the Saved Application State folder within. I then found the folder for Safari (com.apple.Safari.savedState), opened it and deleted its contents. Now the next time I open Safari, there will be no pages to auto-reopen.
(2) Since this problem could happen again, I decided to disable the auto-reopen feature in Safari. I did this by highlighting the "com.apple.Safari.savedState" file and choosing the File-->Get Info command, and then in the Get Info box, I turned on the Locked checkbox. This prevents Safari from adding any files to this folder.
This solution has worked well for me, and it has the advantage of not requiring the user to reset Safari. It also preserves Lion's auto-reopen feature for all other applications.
I need to give credit to David Pogue for the information I used to solve this problem. He describes this procedure on page 169 of his book, Mac OSX Lion, the missing manual.
Steve

I think I have a virus on safari!

A pop up has locked me out of safari not allowing me any access to the system preferences and it says that it has detected a virus and to call a phone number.. ive tried restarting, quitting the program and everything. Mac also wont allow me to delete safari because its a required app.. Please help!!

You may have installed the "VSearch" trojan. Remove it as follows.
Malware is always changing to get around the defenses against it. These instructions are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Step 1
From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
Step 2
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
          Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the Internet criminal behind VSearch has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Adware Virus in Safari 8

I upgraded to Yosemite and it's great but in browsing the web I think I must have picked up a virus as every time I click or type in Safari a new window opens taking me to either Mackeeper Home Page or some other Adware site which is annoying.
I have turned extensions off in the preferences and cleared the browsing history/cache but the adware/malware is still there.
How does one uninstall and then reinstall Safari ? OR does one have to do a clean boot of Yosemite ?
The other option is to give up on Safari and just use Chrome which isn't ideal. HELP !

As Linc Davis recommends :
"You may have installed the "VSearch" trojan. Remove it as follows.
Malware is always changing to get around the defenses against it. These instructions are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Step 1
From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
Step 2
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
          Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the Internet criminal behind VSearch has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return."

How to remove fbi cyber virus in safari

Safari is blocked by "FBI Cyber Department" virus. I can Force Quit safari by can not "reset" in safari
dead in the water. FBI request for money keeps appearing on screen.

You are welcome. I neglected to mention in my first post, but never respond to, or call any toll free numbers represented in those popup scams.

Do you know how to fire search-quick virus from safari ?

a virus called search-quick entered safari and became my search engine instead of google

There is no need to download anything to solve this problem. You may have installed a variant of the "VSearch" ad-injection malware.
Malware is always changing to get around the defenses against it. These instructions are valid as of today, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
The VSearch malware tries to hide itself by varying the names of the files it installs. To remove it, you must first identify the naming pattern.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
/Library/LaunchDaemons
In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "LaunchDaemons" may open. Look inside it for two files with names of the form
          com.something.daemon.plist
and
           com.something.helper.plist
Here something is a variable word, which can be different in each case. So far it has always been a string of letters without punctuation, such as "cloud," "dot," "highway," "submarine," or "trusteddownloads." Sometimes the word is "apple," and then you must be especially careful not to delete the wrong files, because many built-in OS X files have similar names.
If you find these files, leave the LaunchDaemons folder open, and open the following folder in the same way:
/Library/LaunchAgents
In this folder, there may be a file named
          com.something.agent.plist
where the word something is the same as before.
If you feel confident that you've identified the above files, back up all data, then drag just those three files—nothing else—to the Trash. You may be prompted for your administrator login password. Close the Finder windows and restart the computer.
Don't delete the "LaunchAgents" or "LaunchDaemons" folder or anything else inside either one.
The malware is now permanently inactivated, as long as you never reinstall it. You can stop here if you like, or you can remove two remaining components for the sake of completeness.
Open this folder:
/Library/Application Support
If it has a subfolder named just
           something
where something is the same word you saw before, drag that subfolder to the Trash and close the window.
Don't delete the "Application Support" folder or anything else inside it.
Finally, in this folder:
/System/Library/Frameworks
there may an item named exactly
            v.framework
It's actually a folder, though it has a different icon than usual. This item always has the above name. Drag it to the Trash and close the window.
Don't delete the "Frameworks" folder or anything else inside it.
If you didn't find the files or you're not sure about the identification, post what you found.
If in doubt, or if you have no backups, change nothing at all.
The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Then, still in System Preferences, open the App Store or Software Update pane and check the box marked
          Install system data files and security updates (OS X 10.10 or later)
or
          Download updates automatically (OS X 10.9 or earlier)
if it's not already checked.

Norton Virus on Safari

My software update to 6.1.6, and now it load a NORTON anti-virus page prompting me to call 8xx number, which will not go away. All drop down boxes are locked, so I cannot access any commands. Is this a known virus?

1.Force Quit .
   Press command + option + esc keys together at the same time. Wait.
   When Force Quit window appears, select the Safari if not already.
   Press Force Quit button at the bottom of the window.   Wait.
   Safari will quit.
   Relaunch Safari holding the shift key down.
2. Safari > Preferences > Extensions
    Turn those off and try Safari.
3. Safari > Preferences > Privacy > Cookies and other website data:
    Press “Remove all website data” button.
4. Download and run Adware Removal Tool.
    http://www.thesafemac.com/art/

HT1430 Possible virus on safari and facebook?

I may have a virus on iPad can't connect to Facebook at home and when on safari some sites are interfered with how can I clean the iPad up?

Clearing your browser cache would do nothing against a virus.
There are no viruses for iOS.
What happens is a website is either shady or has been hacked so they place a cookie in your browser.
Your browser then keeps displaying a pop up or taking you to a site you don't want.
Clearing your cache gets rid of it.
It's annoying and inconvenient but it's not a virus.

Virus on Safari

I think I may have some sort of virus on my safari as whenever i visit a page there are some words that are underlined and when you hover over them an add pops up. Also on the facebook pages of users with timelines there are ads that can't be removed that pop up saying things like "find singles near you" and such, but most of the time the ad doesn't load. Also whenever there's a search box on a website, as i type in my search a search engine appears that remembers all the searches i've made on every website.
I've tried every Mac trojan detecting device including MacScan and nothing resolved the problem. I updated safari to the newest version and the problem went away, however after a couple of days it returned.
Does anyone have any idea on how to fix this problem?
The following is an example of some of the ads i see.

One key to your answer lies in the image you posted: "Text Enhance".
Enter those two words into your favorite search engine and you'll see dozens of related discussions about how to block or disable at least some of the pop-up content coming from related websites.
This article on a competing website is Windows Internet Explorer-specific, but specifically names three of the sites responsible for some of that annoying pop-up content:
us.intellitxt.com
vibrantmedia.com
cdn.optmd.com
Link to full thread: http://answers.microsoft.com/en-us/ie/forum/ie8-windows_xp/how-can-i-remove-the- malware-text-enhance-that/654cedb8-9b9d-402e-aa30-bd8299266429
I've entered those web addresses (and may others) into my wireless router's 'website filter' to prevent those specific sites from displaying content.
Safari 5.0.5 offers an add-on extension that might help too: AdBlockPlus, but because I block at the router level, I haven't tested it.

Virus in Safari?

Similar Messages

Maybe you are looking for