When opening safari i get a message that says major security issue please contact apple immediately suspicious activity might have been detected. what is this and how do i get rid of it so i can use my internet?
when opening safari i get a message that says major security issue please contact apple immediately suspicious activity might have been detected. what is this and how do i get rid of it so i can use my internet?
A misleading and malicious popup. Launch Safari with the Shift key held down; if that doesn't work, temporarily disconnect the computer from the Internet.
(121307)
Similar Messages
-
I'm unable to open Safari. I keep getting a alert security message Suspicious Activity Might Have been Detected. How can I fix this problem?
You may have installed the "VSearch" trojan. Remove it as follows.
Malware is always changing to get around the defenses against it. These instructions are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Step 1
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
Step 2
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the Internet criminal behind VSearch has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. -
I got a message on my MacBook pro screen that says " Safari Alert" and then goes on to say "suspicious activity might have been detected". It doesn't let me exit the site and keeps reappearing even after I force quit Safari and even after I shut down my computer and turn it back on. What can I do?
Launch Safari with the Shift key held down. If that doesn’t work, disconnect the computer from the Internet.
(116847) -
Safari won't work. It flashes an alert. Alert says that a Suspicious Activity Might Have been Detected. Major Security Issue. How do i fix this? Please help. Thanks!
You may have installed a variant of the "VSearch" ad-injection malware. Follow Apple Support's instructions to remove it.
If you have trouble following those instructions, see below.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
The VSearch malware tries to hide itself by varying the names of the files it installs. To remove it, you must first identify the naming pattern.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
/Library/LaunchDaemons
In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "LaunchDaemons" may open. Look inside it for two files with names of the form
com.something.daemon.plist
and
com.something.helper.plist
Here something is a variable string of characters, which can be different in each case. So far it has always been a string of letters without punctuation, such as "cloud," "dot," "highway," "submarine," or "trusteddownloads." Sometimes it's a meaningless string such as "e8dec5ae7fc75c28" rather than a word. Sometimes the string is "apple," and then you must be especially careful not to delete the wrong files, because many built-in OS X files have similar names.
If you find these files, leave the LaunchDaemons folder open, and open the following folder in the same way:
/Library/LaunchAgents
In this folder, there may be a file named
com.something.agent.plist
where the string something is the same as before.
If you feel confident that you've identified the above files, back up all data, then drag just those three files—nothing else—to the Trash. You may be prompted for your administrator login password. Close the Finder windows and restart the computer.
Don't delete the "LaunchAgents" or "LaunchDaemons" folder or anything else inside either one.
The malware is now permanently inactivated, as long as you never reinstall it. You can stop here if you like, or you can remove two remaining components for the sake of completeness.
Open this folder:
/Library/Application Support
If it has a subfolder named just
something
where something is the same string you saw before, drag that subfolder to the Trash and close the window.
Don't delete the "Application Support" folder or anything else inside it.
Finally, in this folder:
/System/Library/Frameworks
there may an item named exactly
v.framework
It's actually a folder, though it has a different icon than usual. This item always has the above name; it doesn't vary. Drag it to the Trash and close the window.
Don't delete the "Frameworks" folder or anything else inside it.
If you didn't find the files or you're not sure about the identification, post what you found.
If in doubt, or if you have no backups, change nothing at all.
The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Then, still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates (OS X 10.10 or later)
or
Download updates automatically (OS X 10.9 or earlier)
if it's not already checked. -
Started to get pop ups when tried to open a video on face book. Directed for a download of MPlayerX-2.dmg and did attempt to install but never got video up/.
Error message also states to
To fix it please call Support for Apple +1 800-680-4131 (Toll Free) immediately! and also gives out a web site of http://mac-online-support.comYou may have installed the "Downlite" or "VSearch" ad-injection malware. Follow the instructions on this Apple Support page to remove it.
Back up all data before making any changes.
Besides the files listed in the support article, you may also need to remove this item in the same way:
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, then you may have one of the other kinds of adware covered by the support article. Follow the rest of the instructions in the article.
The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This malware is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates
if it's not already checked. -
please
Hi..
It's a sham.
Apple will never contact in this manner. If it happens again, do not call the 800#
If you can't quit Safari the normal way, use the force quit keyboard shortcut.
Command + Option + Esc
If you can't force quit Safari, see the post by: Linc Davis here > Safari-Alert ?scam? | Apple Support Communities
This the Apple contact number: 1 800 275 2273 -
iTunes will not open. I get a message that says, "The iTunes Library.itl file cannot be found or created. The default location for this file is in the "iTunes" folder in the music folder". How can I fix this?
Hi pgarard1,
If you are having issues with launching iTunes after an update, you may want to take a look at the troubleshooting in the following article:
iTunes for Windows: Doesn't open after upgrading in Windows Vista or Windows 7
http://support.apple.com/kb/TS2363
Regards,
- Brenden -
I keep getting message that i cant open application Microsoft Sync Services because PowerPC applications are no longer supported - what is this and how do I get rid of this?
Thanks- so if I remove the old apps that i no longer use then the message will automatically go away?
-
Hi. I tried using Pinterest tonight and got a message that I have a bot in my network..what is this, and how do I get rid of it? My phone has been running really slow too on Safari (but not on Google Chrome)
Google changed their menu bar. Firefox hasn't used Google for the default homepage since the Firefox 3.6 versions. Firefox 4+ versions use '''about:home'''.<br />
http://www.theverge.com/2011/11/29/2598717/google-bar-redesign-rethinks-the-navigation-bar -
I am having a hard time trying to set up my cc info on iTunes. I keep getting a message that says invalid security code which is on the back of my card and the same card I use to make purchases online with all the time. What may be the problem?
iTunes Store: My credit card's security code or zip code does not match my bank's records
http://support.apple.com/kb/TS1646 -
I get a message that say: ITunes could not connect to IPhone *** because the pairing record is missing" I never saw this before anyone know about this??
Do you still get that one if you restart the PC and try to connect again?
-
The Apple store has re booted my i phone with the latest software, my computer now will noy talk to my iphone because the software is in need of updating, however every time I try to update it it pops up with a box saying"invalid signature" what is this and how do I get round it, I'm running windows XP with macafee, help, Steve H
I tried to download itunes again from the web several times, I also reomved using the tools the smart screen filter, somehow eventually, after 3.5 hours of trying I managed to get the computer to talk to my phone, however it would not download some of my stuff because it says it was corrupt, I think this was my message and call history because I think that is all that was missing. Apple should come up with a simple fix for this I see that I am not the only one to have encountered this issue, Steve H
-
my epson stylus SX235W has all of a sudden decided it won't print from my mac. it says rastertoescpII has unexpectedly quit. what is this and how do i get it to print from my mac again?
Open the Sharing pane in System Preferences. If the Computer Name is not set, enter a name. You may first have to click the lock icon in the lower left corner and authenticate to unlock the settings.
Credit for this solution to ASC user Yuengdog1983. -
I have a small icon at the top right of my iphone 4G right to the left of the battery percent. What is this and how do I get rid of it? It looks like a lock with a circle 3/4 of the way around it
That icon indicates your iPhone is rotation locked.
To remove it, swipe up from the bottom of the screen to open Control Center. Tap the similar looking icon there to turn it off. -
My iPhone says "o death" where the date should be on the lock screen, why is it doing this and how do I get the date back?
I tried powering off and on and it went away, but I can't tell if it's been broken into since everything works fine (I'm using it now) is there a test to see if it's been broken into?
Thanks for all your replies!
Maybe you are looking for
-
Memory overflow in RSA3 but not in FM on which datasource created
Hi I am getting the short dump in the generic datasource extraction ( To extract CDPOS and CDHDR data) which is based on a FM. when i directly execute the FM its not giving any dump and giving me correct data, but when execute through RSA3, it gives
-
Buffer Overrun in iTunes 6.0.3.5
I'm sure many of you have been getting this error, but there is a buffer overrun error when I try and watch any newer movies in either iTunes, Quicktime, or on my iPod (.m4v). The iPod simply freaks out and I have to reset it, while iTunes says that
-
Post Author: jalmeida CA Forum: Formula I have a report that is made up of two groups; grouper 1, then grouper 2. I supress the details section, and group footers. The report is being used as table of contents(sub report) at the beginning of my main
-
Error during the installation of CS6 web premium
Hello, during el'installation CS6 premium web, I encountered problems , software photoshop, illustrator, indesign and do not install , errors are: Exit Code: 6 Please see Specific errors and warnings below for troubleshooting . For example, ERROR: DF
-
My MacBook Pro will not start up after entering correct password.
My MacBook Pro will not start up after entering password. Circle with an X in it and 'cancel' below it is on bottom of screen. When clicking on cancel, nothing happens. This just started last night.