Website keeps bringing up pop ups

I am using a Macbook Air, running 10.9.4.
Every-time I click on anything on Safari or any other browser, it brings a pop up to another website (advert). I have enabled pop up blocker but has made no difference. It does not happened on any other Mac.
Ran ClamXav it did not pick up anything.
Deleted any software that looked suspicious.
How to stop this happening, guessing I have something on my computer which is making it do this.

You may have installed the "VSearch" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Step 1
From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
Step 2
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
          Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
This trojan is distributed on illegal websites that traffic in pirated content. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that this Internet criminal has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Similar Messages

  • Macbook Pro has adware. Keep getting annoying pop-ups. How do i clean my laptop

    Macbook Pro has adware. Keep getting annoying pop-ups. How do I clean my laptop

    There is no need to download anything to solve this problem.
    You may have installed one or more of the common types of ad-injection malware. Follow the instructions on this Apple Support page to remove it. It's been reported that some variants of the "VSearch" malware block access to the page. If that happens, start in safe mode by holding down the shift key at the startup chime, then try again.
    Back up all data before making any changes.
    One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
    If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, ask for further instructions.
    Make sure you don't repeat the mistake that led you to install the malware. It may have come from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
    Malware is also found on websites that traffic in pirated content such as video. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
    In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere  should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
    Still in System Preferences, open the App Store or Software Update pane and check the box marked
              Install system data files and security updates (OS X 10.10 or later)
    or
              Download updates automatically (OS X 10.9 or earlier)
    if it's not already checked.

  • Why do I keep having macster pop ups?

    Why do I keep having macster pop ups?

    Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.
    You can try these free programs to scan for malware, which work with your existing antivirus software:
    * [http://www.microsoft.com/security/scanner/default.aspx Microsoft Safety Scanner]
    * [http://www.malwarebytes.org/products/malwarebytes_free/ MalwareBytes' Anti-Malware]
    * [http://support.kaspersky.com/faq/?qid=208283363 TDSSKiller - AntiRootkit Utility]
    * [http://www.surfright.nl/en/hitmanpro/ Hitman Pro]
    * [http://www.eset.com/us/online-scanner/ ESET Online Scanner]
    [http://windows.microsoft.com/MSE Microsoft Security Essentials] is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.
    Further information can be found in the [[Troubleshoot Firefox issues caused by malware]] article.
    Did this fix your problems? Please report back to us!

  • How do i stop mac keeper among other pop-ups keep that appearing although i have blocked popups?

    tryin to stop mac keeper and other pop ups

    You installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
    Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
    Back up all data.
    Triple-click anywhere in the line below on this page to select it:
    /Library/LaunchAgents/com.vsearch.agent.plist
    Right-click or control-click the line and select
              Services ▹ Reveal in Finder (or just Reveal)
    from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
    Repeat with each of these lines:
    /Library/LaunchDaemons/com.vsearch.daemon.plist
    /Library/LaunchDaemons/com.vsearch.helper.plist
    /Library/LaunchDaemons/Jack.plist
    Restart the computer and empty the Trash. Then delete the following items in the same way:
    /Library/Application Support/VSearch
    /Library/PrivilegedHelperTools/Jack
    /System/Library/Frameworks/VSearch.framework
    Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
    From the Safari menu bar, select
              Safari ▹ Preferences... ▹ Extensions
    Uninstall any extensions you don't know you need, including any that have the word "Spigot" or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
    This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
    You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight is inexcusable and has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

  • Link to my website keeps bringing up old website

    I created a website and then made changes and saved and published the changes. Now I've placed an ad with a link to my website but it keeps linking to my old web page. In iWeb that page is no longer there, so I don't know how it keeps going to the old page. Has anyone encountered this problem? Need help quick. Thanks.
    G4   Mac OS X (10.4.7)  

    You are probably seeing old information from your browser's memory cache. Try emptying your browser cache. If you are using Safari, look under the Safari menu and select "Empty Cache..." Then reload your site. You should now see the fully updated site!
    Best of luck!

  • Software updater pop ups invite me to download Reader X1 11.0.03 but website only provides Reader X

    Hi, can anyone explain why software updater keeps giving annoying pop ups inviting me to update to Reader 11.0.03, but when I go to the website to download I am only provided with Reader X? I updated from Reader 9 to that but still keep on getting the pop ups. My antivirus also tells me the download link in the pop ups is unsafe and carries viruses. How can I get rid of these pop ups and/or update to X1?
    Many thanks  

    It appears to have finally stopped popping up! If it returns I will take a screen shot. I did wonder if it was some kind of scam which is why I went to the website to update rather than via the link.

  • Help please.  How can I remove malware from my computer?  I keep getting this pop up Mac Protector it wants to charge me $59.95 to install, I know this is a scam because my computer is also pulling up **** signts

    How can I remove this malware virus on my compter.  I keep getting this pop up and it says my computer is infected and I need to instal this Mac Protector.  It wants to charge me $59.95, i call the MAC store and they said this was fake.  I asked how I could remove and they referred me to this website.  Can anyone help , it is real annoying I keep getting these **** pop ups too.

    This is an excellent article with removal instructions:
    http://www.reedcorner.net/guides/macvirus/

  • Pop-ups won't go away

    I keep getting pop-ups when I get on safari. It get a pop-up on the top of my browser but I can't exit out of it and on the side. Sometimes, when I click on link, it redirects me to a website that I didn't intend to go to. I went to safari-preferences-extensions, and turned it off. I still keep getting these pop-ups. How do I get rid of all this?

    This can happen if adware is installed without your knowledge.
    1. Use  free  AdwareMedic to remove adware
        http://www.adwaremedic.com/index.php
       Install , open,  and run it by clicking “Scan for Adware” button   to remove adware.
       Once done, quit AdwareMedic.
                 or
       Remove the adware manually by following the “HowTo” from Apple.
       http://support.apple.com/en-us/HT203987
    2. Safari > Preferences > Extensions
        Turn those off and relaunch Safari.
        Turn those on one by one and test.

  • - Mail error pop ups -

    I keep getting Mail pop ups saying my POP server incoming rejected password. Please re-enter password or cancel.
    I have several Mail accounts, and these messages will pop up on any one of them from time to time. Been happening quite frequently of late. I quit Mail & re-open, sometimes I have to do it twice, usually corrects the problem.
    What's going on here? Is there a malware looking for this info? If my server was causing this, why does it correct itself after quit/re-open?
    Thanks!

    I've been getting something like this also - Sophos in fact detected and removed some sort of malware (I deleted it from quarantine so don't remember what it identified), but I'm still getting the pop up when using Apple mail. Doesn't happen when using Gmail.

  • Why is there pop-ups every time I press something on chrome?

    I never had this problem before but recently i started to find out that mostly every time i pressed something on google chrome, a pop-up would pop up and the pop-up would usually be called Mackeeper and sometimes, some other ones. There also seems to be more ads on websites. I disabled pop-ups on chrome but they still show up. I also did 3-4 virus scans and nothing showed up. Please help. This is getting tiring to close the pop up every time i click something.
    Also, I read many questions related to this but nothing worked. But there is a DNS server that is 8.8.8.8 which i don't know what it is.
    This usually pops up.
    Thanks

    Pop ups are due to malware ..
    Download and run the adware removal tool here >   The Safe Mac » Adware Removal Guide
    Easy, safe, and only takes a minute or two.
    8.8.8.8 is Google's DNS server which obviously is not blocking malware.
    I've used the OpenDNS server for years without any malware.
    Open System Preferences > Network > Advanced > DNS
    Click + and type:
    208.67.222.222
    Click + again and do the same.
    208.67.220.220
    Click OK.

  • How do you get rid of angel pop ups?

    I keep getting angel pop ups.  How do I stop them?

    Please post a screenshot that shows what you mean. Be careful not to include any private information.
    Start a reply to this message. Click the camera icon in the toolbar of the editing window and select the image file to upload it. You can also include text in the reply.

  • HT202225 I keep getting pop ups on my iMac for the first time in 6 years after one of my kids tried to watch football through crichd tv. safari now opens with smart search engine rather than google every time i try to open a new web page.

    Ever since one of my kids tried to watch football on a website called crichd tv I keep getting pop us come up like Mackeeper and every time i try to open a web page it comes up with Smartsearch rather than google which is my preferred search engine in preferences. I have blocked extensions and changed homepage to google but this Smartsearch keeps overriding. Also a thing called MacKeeper keeps popping up I have followed the instructions to uninstall but the file it says to move to trash from the Applications folder but it simply isn't there or anywhere else. The file to uninstall Smartsearch is also not where they say it is in Library>frameworks>
    Very frustrating from going from a perfectly working system to a now very frustrating and annoying pop ups coming uo after every time i open a new web page.
    Any help or assistance in this matter would be very much appreciated.
    Russ

    You (or your kids) inadvertently installed adware. You do not need to download or install anything to fix it.
    Any tips on how to stop it from happening?
    Yes. To learn how to avoid it in the future read How to install adware.
    If you require them, Apple's removal instructions are linked in the Recovery Procedure near the end of that document. Read and follow them carefully. Pay particular attention to the easily overlooked passages directing you to restart your Mac when required.

  • How do i get rid of the pop ups that are constantly popping up on my mac. Everytime i search for  anything on google an ad for mac keeper comes up and every time i access Netflix another stream of ads pop up... Do i have a virus HELPPPPPP

    How do i get rid of the pop ups that are constantly popping up on my mac. Everytime i search for  anything on google an ad for mac keeper comes up and every time i access Netflix another stream of ads pop up... Do i have a virus HELPPPPPP

    You may have installed the "VSearch" trojan, perhaps under a different name. Remove it as follows.
    Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
    Back up all data before proceeding.
    Triple-click anywhere in the line below on this page to select it:
    /Library/LaunchAgents/com.vsearch.agent.plist
    Right-click or control-click the line and select
              Services ▹ Reveal in Finder (or just Reveal)
    from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
    Repeat with each of these lines:
    /Library/LaunchDaemons/com.vsearch.daemon.plist
    /Library/LaunchDaemons/com.vsearch.helper.plist
    /Library/LaunchDaemons/Jack.plist
    Restart the computer and empty the Trash. Then delete the following items in the same way:
    /Library/Application Support/VSearch
    /Library/PrivilegedHelperTools/Jack
    /System/Library/Frameworks/VSearch.framework
    ~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
    Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
    From the Safari menu bar, select
              Safari ▹ Preferences... ▹ Extensions
    Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
    Reset the home page and default search engine in all the browsers, if it was changed.
    This trojan is distributed on illegal websites that traffic in pirated content. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
    You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that this Internet criminal has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

  • How to allow pop-ups on certain websites

    I have pop-ups blocked and want to keep it that way, however I would like to disable the pop-up blocking on certain websites. I know how to do this in IE for Windows, but do not know how to do this in Safari on my MAC.
    I assume this can be done. Does anyone know how to do it?

    While the Command-Shift-K provided by QuickTimeKirk certainly works to turn the feature on and off.
    I'm with G$R, how do I get Safari to remember the list of sites I visit to automatically allow popups?

  • Firstly do I need Adobe Flash?? (bit of a technophobe) but since I've done an UPDATE i keep getting pop ups when i look at amazon??

    firstly do I need Adobe Flash?? (bit of a technophobe) but since I've done an update I keep getting pop ups when i look at amazon??also can I delete X from my applications as it does not seem to be usable (don't know what its for!!)

    You may have installed one or more of the common types of ad-injection malware. Follow the instructions on this Apple Support page to remove it. It's been reported that some variants of the "VSearch" malware block access to the page. If that happens, start in safe mode by holding down the shift key at the startup chime, then try again.
    Back up all data before making any changes.
    One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
    If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, ask for further instructions.
    Make sure you don't repeat the mistake that led you to install the malware. It may have come from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
    Malware is also found on websites that traffic in pirated content such as video. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
    In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere  should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
    Still in System Preferences, open the App Store or Software Update pane and check the box marked
              Install system data files and security updates (OS X 10.10 or later)
    or
              Download updates automatically (OS X 10.9 or earlier)
    if it's not already checked.

Maybe you are looking for

  • Hp INkjet 3545 paper jam and improper shutdown messages

    I bought and new packed piece of Inkjet 3545 all in one printer about 2 days back. After installation of the cartridges, black and tri color, and closing the top lib, the printer has been persistent with a paper jam message. The display tells me that

  • Av check disabled in issue order and enabled in delivery

    Hi guys, we are looking for a solution to deactivate the order av. check in the issue order and activate the av. check in the delivery at creation: -requirement class : 0041 -> av. check  enabled -vov6 schedule line disabled - delivery item category

  • Dual Boot Win 8.1 & Ubuntu 14.04

    Hi, I would like to create a dual boot. I have a rather new ThinkPad  Yoga. Here are my questions: 1. I was told I should make a recovery image or something when I bought it. How do I do that and what is it? is it just a plane Image or is it "Create

  • Touchscreen display monitor toggling

    Hi All, Bought an acer touchscreen monitor and hooked it up to my iMac. Its on extended display mode and when I touch the screen on the display It starts to control the mouse if its on the iMac's display. Is it possible to make the mouse jump to the

  • Flex Advanced DataGrid with dynamic grouping

    Can we implement something similiar as in below link, using flex 3. http://demos.telerik.com/aspnet-ajax/grid/examples/groupby/grouploadmodeclient/defaultcs.a spx I am not sure if flex 3 allows grouping of columns based on drag - drop component. Plus