Why am I constantly being re-linked to ads and pop ups

I have only had my Macbook Pro a week, and I cannot go onto safari without constantly being re-directed to advertising pages and pop ups appearing on sites that would never have them. I have compared all my settings to my girlfriends Macbook Pro with no differences that we can see. Even when I checked the T's and C's box to agree to the apple support community it opened up 2 other tabs to advertisement websites. Can anyone help me out as I am new to mac and its really annoying me after only having it for one week. I have downloaded adobe flash player and Utorrent but did not download any torrents as of yet. I have tried ClamXav and the scans come back with no results.
Any help will be gratefully appreciated.

You may have installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
          Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot" or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight is inexcusable and has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Similar Messages

  • Constantly being asked to set time and date (Apple TV 2nd Gen)

    I am constantly being asked to set time and date on my Apple TV 2nd Gen. Has anyone had this problem? I get the screen with this message about 10-15mins after I connect to my home network. I connect, everything works fine, but then streamin, browsing stop and this screen appears. Any help would be appreciated.
    Thanks!!

    what if you try something simple as to restart your phone and check again. 
    "I'd rather be hated for who I am, than loved for who I am not." Kurt Cobain (1967-1994)

  • Why are my emails being sent as "Apple Inc" and how do I change it?

    Why are my emails being sent as "Apple Inc" and how do I change it?

    See:
    iOS: Wi-Fi or Bluetooth settings grayed out or dim
    If not successful, an appointment at the Genius Bar of an Apple store is usually in order.
    Apple Retail Store - Genius Bar

  • Why won't Firefox open sponsored links on ebay and Google?

    Firefox is incapable of opening sponsored links on eBay and Google, whether in a new tab or not.

    This is due to the Ad Block Plus plugin. If you disable the plugin and restart firefox, it works. I'm guessing there might also be a tweak in ABP that might allow it to work, but I haven't found it yet.

  • Why am I constantly being asked to enter my password?

    All of a sudden I am being asked to enter my password every few hours.  Various applications are asking for it ... Safar, iCloud something or other, calendar agent ... it's getting really annoying and I cannot, for the life of me, figure out how to STOP IT.
    It began after I setup my new iMac and transferred all my info from my "old" iMac.  the old one is still being used and IT'S doing it now as well.
    help!

    Hi DarleenMB,
    Thanks for using Apple Support Communities.  You might try using Keychain First Aid to detect and repair any issues with your keychain that may be causing this (this article applies to most versions of the OS including Mavericks):
    Mac OS X 10.6: Solving problems with keychains
    http://support.apple.com/kb/PH7296
    If the issue persists I would try resetting your Keychain using Keychain Access as described here:
    Resetting your keychain in Mac OS X
    http://support.apple.com/kb/ts1544
    Cheers,
    - Ari

  • Why am I constantly being asked to restart??

    For the past 4 days, suddenly my computer freezes and a grey box appears that says I need to restart (in several languages) and the power button symbol is embedded in the background of this message. I can't pinpoint specific times when it happens, it just appears. There are a few times when I did power off and when I powered back on, the message appeared before I could even enter my password. Is my PowerBook dying?

    Welcome to Apple Discussions!
    The reason is that your kernel is panicking. No this does not mean the machine is dying. It means that either some incompatible hardware is there, some RAM has died, insufficient disk space is allowing the machine to boot, the directory is damaged, or some driver was damaged due to an improper shutdown. Is your data backed up?

  • Why is yahoo firefox being ran by "unknown" source and verified by equifax on my computer?

    When I sign into yahoo-firefox, I click on the padlock at the bottom of screen and it reads, "Authenticated by Equifax" and it's also run by an "unknown" source. I don't know whether it is my settings not being correct, or what the problem is.

    If it matters, I have a Canon camcorder and imported the clips using a firewire cable. The external drive is connected via a second firewire cord to the other firewire port.

  • Why do I constantly get "DNS lookup error" messages and have to reload a page 5-10 times before it will actually load?

    This seems to be happening more and more frequently. I am running Firefox 23.0.1 on Mac OS 10.8.4. It even happens on the Mozilla support page. It used to happen every so often; now it happens at least 50% of the time.

    Try to disable IPv6 in Firefox (network.dns.disableIPv6 = true).
    *http://kb.mozillazine.org/Error_loading_websites
    You can try to reset (power off/on) the router.

  • Why can't I close the Firefox browser or any pop-ups?

    This is a problem I had with Firefox before I formatted my computer a few weeks ago. Firefox was working just fine after the fresh windows install which was great (I actually had to switch to using Safari because I couldn't stand how glitchy Firefox was), but looks like the same problem is happening again!!
    In sum: the Firefox browser will not close when I click the X close button in the top corner. Also, no pop-ups will close, whether I click on OK or X or anything to either accept or deny changes. When a pop-up is prompted on a website so that I can upload a picture or other media (such as uploading a new profile picture on twitter), I am not able to scroll through my computer's content on the pop-up (scrollbars don't work), X close the pop-up or even press OK to accept the changes and choose the picture. However, I am still able to access the content, choose an item and browse through folders for what is displayed on my screen, so it is not frozen. It won't even let me use the arrow keys to scroll through the content though.
    I have to ctrl+alt+del to close firefox. No, restarting my computer doesn't help. Clearly reinstalling firefox doesn't help as I recently did that when I formatted my computer, and internet explorer, safari and opera work just fine.

    Invoke the music player, Options -> Exit. It's the last one in the list
    Cheers,
    DeepestBlue
    5800 XpressMusic (Rock Stable) | N73 Music Edition (Never Say Die) | 1108 (Old and faithful)
    If you find any post useful, click on the Green "Kudos" Button on the left to say Thank You...

  • Macbook is running very slow and pop-ups come up constantly while using both Safari & Chrome.

    My 2008 macbook has a virus on it caused by me accidentally clicking a wrong download while making a mix tape for a friend ( I was using a website that is not illegal btw) and now my computer is running very slow. As well as having pop ups all over my chrome and safari with EVERYTHING I do. If someone out there could help me its very much appreciated as I am a college student with various online classes. I am running OS X Lion 10.7.5 currently.

    Download the Adware removal tool on The Safe Mac site.
    http://www.thesafemac.com/art/
    If you still have problems after removing, download EtreCheck and paste results here for help troubleshooting.
    http://www.etresoft.com/etrecheck

  • Why Firefox 25.0 does not show Google ads and Facebook comments and likes. All other browsers do.

    I've just upgraded to FireFox 25.0 and I have issues viewing Google ads and Facebook comments and likes on my website (wellfitstyle.com). All other browsers show Google adds in the right sidebar and Facebook comments and likes under each post. Great number of people in Eastern Europe (where I am) use FireFox and I would like to know how this issue can be fixed.
    Tnx.

    Hi there,
    Starting in Firefox 23, if a secure page includes certain types of insecure content, Firefox blocks the insecure content and a shield icon will appear in the address bar. See this article for more information about the new mixed content blocker: [[How does content that isn't secure affect my safety?]]
    To temporarily allow the mixed content to be displayed:
    *Click the '''shield icon''' [[Image:Mixed Content Shield]] in the address bar and choose '''Disable Protection on This Page''' from the dropdown menu.
    [[Image:Fx23MixedContentBlocker]]
    To allow insecure content to be displayed in all secure pages, enter '''about:config''' in the address bar and double-click on this preference, to toggle it from true to false:
    '''security.mixed_content.block_active_content'''
    You can also use this add-on instead, to toggle the preference:
    *[https://addons.mozilla.org/firefox/addon/toggle-mixed-active-content/ Toggle Mixed active content] add-on
    You may want to do this only for the current session, then reset the preference back to "true" and check back with the site to see whether it's been fixed, since this is a global setting that exposes you on all sites, not just the one you care about.

  • Why does my Safari browser keep having pop-ups and new windows open without permission?

    Whenever I click on a button to go to another page or something, a new tab with a new website opens up. When I search on Google, there are all kinds of ads and pop-ups on there. I really know nothing about Internet security, so I do not know what is wrong.

    There is no need to download anything to solve this problem.
    You may have installed the "VSearch" trojan. Remove it as follows.
    Malware is always changing to get around the defenses against it. These instructions are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
    Back up all data before proceeding.
    Step 1
    From the Safari menu bar, select
              Safari ▹ Preferences... ▹ Extensions
    Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
    Reset the home page and default search engine in all the browsers, if it was changed.
    Step 2
    Triple-click anywhere in the line below on this page to select it:
    /Library/LaunchAgents/com.vsearch.agent.plist
    Right-click or control-click the line and select
              Services ▹ Reveal in Finder (or just Reveal)
    from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
    Repeat with each of these lines:
    /Library/LaunchDaemons/com.vsearch.daemon.plist
    /Library/LaunchDaemons/com.vsearch.helper.plist
    /Library/LaunchDaemons/Jack.plist
    Restart the computer and empty the Trash. Then delete the following items in the same way:
    /Library/Application Support/VSearch
    /Library/PrivilegedHelperTools/Jack
    /System/Library/Frameworks/VSearch.framework
    ~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
    Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
    The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
    This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow.
    You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the Internet criminal behind VSearch has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

  • I am constantly being shown this message: "Firefox prevented this page from automatically redirecting to another page." Why does this happen?

    I am constantly being shown this message: "Firefox prevented this page from automatically redirecting to another page." The result is that I am often looking at a blank screen with an option to click on "Allow." But sometimes the message comes up and I am on the page I want to be on anyway. I don't understand this and don't know how to change this setting, if indeed I have set up Firefox this way. Help?

    That message is a result of your settings
    *''Firefox button/File > Options > Advanced > General >'' un-check "Warn me when web sites try to redirect or reload the page" to no longer see that message
    '''If this reply solves your problem, please click "Solved It" next to this reply when <u>signed-in</u> to the forum.'''

  • All of a sudden, my settings have been changed, my homepage, and EVERYTHING. No matter how many times I go in and change them again, the SAME pages open up when I start FireFox and I am constantly being asked if I want Yahoo as my start page and default s

    I don't know what happened. All of a sudden, my settings have been changed, my homepage, and EVERYTHING. No matter how many times I go in and change them again, the SAME pages open up when I start FireFox and I am constantly being asked if I want Yahoo as my start page and default search engine. I click the box 'do not ask me again' and it comes up EVERY TIME. I change things like I don't want history remembered, and when I reload FireFox again, it's back to the way it was BEFORE. EVERY SINGLE TIME. I don't know why this is happening, or how to fix it. What do I do??

    I do not want to download another virus program.. I do not believe it is a virus. I am running the full version of Norton 360 and it is doing a daily scan. I have Windows 7, 64 bit OS.
    This is very irritating !! If I wanted Yahoo I would ask for it !

  • Why can't i open a link to a PDF in a new tab?

    I want to click on a link in an email i was just sent from my teacher after her seminar, which is supposed to open a PDF of info. But when I right click it and select, open in a new tab, only a blank page shows up! But, since i KNOW it must be a proper link, I tried around and found another way: if I select, "save link as", a window pops up and lets me save it as an adobe reader PDF file in my computer, which i can then open and read. Why?
    I mean, what could be the problem? I have never had the problem before of not being able to right click something and select "open in a new tab", and have it work just that like, without the extra steps!

    A link can have several different scripts attached to it that supersede the normal behavior. These include actions that occur when you click (mouse down followed by mouse up) or when a mouse button is pressed on the link (mouse down) or when it is released over the link (mouse up). Usually the right-click > Open in New Tab/Window will bypass those.
    However, in some cases, when you mouse over a link you may occasionally see that it has no destination address, or seems to point to the same page, or starts with javascript:. In these cases, the right-click operation fails because it copies that nonexistent or dysfunctional link instead of running the script attached to the link.

Maybe you are looking for

  • Starting exetutable java file from java code

    Hi I was wondering how I can start a executable java file from java code? thanks

  • Why can't I select or update the Record using the PreparedStatement?

    the DB is oracle9i,here is the test table test id number; name char(10); intro char(10); I have insert a record in the table. Now I will select or update the record by using the PreparedStatement here is my code: sqlStr = "update test set intro = ? w

  • ISync 2.4 and Nokia 6315i

    My company just purchased the field team Nokia 6315i phones (verizon). Has anyone had success with this phone and iSync? It's not on the list of devices that work... powerbook g4 12"   Mac OS X (10.4.9)  

  • Webdynpro VS VC

    Hi Experts I am very new to EP at present I am working on creating iviews Since i am from java background I choosed webdynpro Java but look and feel wise it is not so good. Our Team is recommanding me Visual Composer for this work but i feel less com

  • Class And instance name

    how can i access a movieclip via a instance name in 1 class file (Not The Main Document) And Make The class reconize  the movieclip when i use a code like this :   this.y = player.y player is the instance name. thanks