New To Mac-Forums?

Welcome to our community! Join the discussion today by registering your FREE account. If you have any problems with the registration process, please contact us!

Get your questions answered by community gurus Advice and insight from world-class Apple enthusiasts Exclusive access to members-only contests, giveaways and deals

Join today!

 
Start a Discussion
 

Mac-Forums Brief

Subscribe to Mac-Forums Brief to receive special offers from Mac-Forums partners and sponsors

Join the conversation RSS
OS X - Operating System General OS operation information and support

Browser windows open unexpectedly--malware?


Post Reply New Thread Subscribe

 
Thread Tools
ekandre

 
Member Since: Aug 02, 2010
Posts: 7
ekandre is on a distinguished road

ekandre is offline
MacBook 2,1
Intel Core 2 Duo
Mac OS X 10.4.11

Hello.

Would you be able to help me figure out how to get rid of some sort of malicious bug in my MacBook?

When I have FireFox open, without my knowledge additional windows will open in the background, usually with articles, advertisements, and sometimes videos.

I always close them, but others will pop up later.

I've run Sophos and MacScan. MacScan found 9 tracking cookies, which it deleted.

I thought maybe my problems might have been connected with HotSpot Shield, which I had downloaded a couple of months ago. I deleted it using Amnesia.

Still having the problems, however...

I would appreciate any suggestions.

Thanks!
QUOTE Thanks
6string

 
Member Since: Sep 09, 2009
Location: Down Under :D
Posts: 5,484
6string is a splendid one to behold6string is a splendid one to behold6string is a splendid one to behold6string is a splendid one to behold6string is a splendid one to behold6string is a splendid one to behold6string is a splendid one to behold6string is a splendid one to behold
Mac Specs: Back to my old 2.2GHz C2D MB after selling my MBP and wondering what my next Mac will be :)

6string is offline
Some sites have this.... especially porn sites, and gambling sites.
This has nothing to do with Malware, etc.

The best you can do to minimise this behaviour is in firefox preferences, make sure that in content, you have block pop up windows checked.

Also, install adblock plus while you are at it. http://adblockplus.org/en/
QUOTE Thanks
ekandre

 
Member Since: Aug 02, 2010
Posts: 7
ekandre is on a distinguished road

ekandre is offline
Thanks, 6string. This puts my mind at ease
QUOTE Thanks
schweb

 
schweb's Avatar
 
Member Since: Oct 27, 2002
Location: Cleveland, Ohio
Posts: 13,198
schweb has a reputation beyond reputeschweb has a reputation beyond reputeschweb has a reputation beyond reputeschweb has a reputation beyond reputeschweb has a reputation beyond reputeschweb has a reputation beyond reputeschweb has a reputation beyond reputeschweb has a reputation beyond reputeschweb has a reputation beyond reputeschweb has a reputation beyond reputeschweb has a reputation beyond repute
Mac Specs: MacBook Pro | LED Cinema Display | iPhone 4 | iPad 2

schweb is offline
Many member ask the question about viruses and malware on the Mac and in addition to using the search function at the top of the forum, you'll find almost all your answers here:

Official Antivirus, Malware, and Firewall FAQ

schweb | community leader
flickr facebook twitter tumblr google+ about.me

Mac-Forums: On Twitter | On Facebook | On Flickr

QUOTE Thanks
manofwar

 
Member Since: Jul 20, 2010
Posts: 15
manofwar is an unknown at this point

manofwar is offline
Can you use the console to check for anything suspicious? I am in the same position, but the same advice hasn't fixed matters.

Also, which plist files should be deleted for this issue, as per this thread?
QUOTE Thanks
ekandre

 
Member Since: Aug 02, 2010
Posts: 7
ekandre is on a distinguished road

ekandre is offline
Hi. It's still happening. Pop-ups are disabled on FireFox and Safari, AdBlockerPlus is (and has been for a long time) installed, the Sophos and MacScans don't show anything, I read all the posts on malware, I read the sticky on troubleshooting Macs, I ran disk utility, I zapped the PRAM, I deleted my caches, I checked my files in single user mode, I made sure the firewall was on, I deleted all my cookies, I turned on stealth mode, etc.

I don't visit porn sites or gambling sites.

The latest browser window to pop up had this URL:
Movies | Reviews | Movie Times | Hollywood News | Hollywood.com

I've had this MacBook for over four years and have never had anything like this happen before. Now it happens all the time.

I do use a P2P network (Vuze). I do also travel a lot and often use public wi-fi networks. I also plug my computer into my work's network.

Thanks again for your help.
QUOTE Thanks
manofwar

 
Member Since: Jul 20, 2010
Posts: 15
manofwar is an unknown at this point

manofwar is offline
ekandre, we might have the same problem.

When I clicked the "post reply" button on this thread, it opened a popup with Google Analytics then this webpage.

ClamXav hasn't detected anything on my system either.

ekandre, does the same thing happen in both Firefox and Safari?
Can you run a google webpage search, then click "Maps" and search for the same thing? Do the "next" buttons work in Google search results? (Yes, no and no in my case.)

We might have a common problem, so a common solution.
QUOTE Thanks
roflitskyle

 
roflitskyle's Avatar
 
Member Since: Dec 23, 2010
Location: United States
Posts: 544
roflitskyle has a spectacular aura about
Mac Specs: MacBook Unibody 13" 150 GB HDD

roflitskyle is offline
Have you tried deleting Safari and re-installing it? Or are you on the most current version of Safari?
QUOTE Thanks
manofwar

 
Member Since: Jul 20, 2010
Posts: 15
manofwar is an unknown at this point

manofwar is offline
That shouldn't work (Adium developers say replacing the *.app file is a waste of time), but it does. Or it seems to, in my recent browsing. Both Safari and Firefox.

@ekandre: try that too.

Thanks
QUOTE Thanks
harryb2448

 
harryb2448's Avatar
 
Member Since: Nov 28, 2007
Location: Nambucca Heads Australia
Posts: 17,266
harryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond reputeharryb2448 has a reputation beyond repute
Mac Specs: iMac i5 2.7GHz OS X.9.4 and OS X.10

harryb2448 is offline
Have you tried emptying caches and deleting history of where you have been?

Hang on to those original install discs like grim death! Using OS X.7 or later make a bootable USB thumb drive before running Installer!
QUOTE Thanks
roflitskyle

 
roflitskyle's Avatar
 
Member Since: Dec 23, 2010
Location: United States
Posts: 544
roflitskyle has a spectacular aura about
Mac Specs: MacBook Unibody 13" 150 GB HDD

roflitskyle is offline
@ManofWar did my suggestion work?
QUOTE Thanks
CrimsonRequiem

 
CrimsonRequiem's Avatar
 
Member Since: Jul 24, 2008
Posts: 6,006
CrimsonRequiem is a name known to allCrimsonRequiem is a name known to allCrimsonRequiem is a name known to allCrimsonRequiem is a name known to allCrimsonRequiem is a name known to allCrimsonRequiem is a name known to allCrimsonRequiem is a name known to all
Mac Specs: MBP 2.3 Ghz 4GB RAM 860 GB SSD, iMac 3.4 GHz Intel Core i7 32GB RAM, Fusion Drive 1TB

CrimsonRequiem is offline
If you are using Firefox try downloading and installing this add-on called Yes popups 0.9.8b. Sounds counter productive but I haven't had a single popup that has gotten past it. Unless I want it to.

死神はリンゴしか食べない。
QUOTE Thanks
roflitskyle

 
roflitskyle's Avatar
 
Member Since: Dec 23, 2010
Location: United States
Posts: 544
roflitskyle has a spectacular aura about
Mac Specs: MacBook Unibody 13" 150 GB HDD

roflitskyle is offline
@CrimsonRequiem what is the description of Yes popups?
QUOTE Thanks
manofwar

 
Member Since: Jul 20, 2010
Posts: 15
manofwar is an unknown at this point

manofwar is offline
@roflitskyle:
Better, but not perfect.

Fixed, apparently: I can navigate google. Next/Previous buttons is search pages; change from a webpage straight to map search.

Not fixed: Random background popups (also when double clicking on some words); some google search results link to ads/link farms - at least in Firefox.

I did clear cache before, I'll clear again.
QUOTE Thanks
ekandre

 
Member Since: Aug 02, 2010
Posts: 7
ekandre is on a distinguished road

ekandre is offline
Yes, it was happening in both Safari and Firefox.

I deleted and reinstalled both programs, cleared my caches, deleted all history, and installed Add Blocker Plus Pop Up Addon.

It seems to be fine now.

Thanks again for the suggestions.
QUOTE Thanks

Post Reply New Thread Subscribe


« Sound on my Mac Mini won't work | OS X Lion »
Thread Tools

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off
Forum Jump

Similar Threads
Thread
Thread Starter
Forum
Replies
Last Post
Web Browsers novicew OS X - Apps and Games 80 04-10-2010 11:02 AM
Data Partition: Using a FAT32 Partition to exchange data between Mac and Windows XP MartinT Running Windows (or anything else) on your Mac 9 11-12-2009 02:56 AM

All times are GMT -4. The time now is 09:06 AM.

Powered by vBulletin
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
X

Welcome to Mac-Forums.com

Create your username to jump into the discussion!

New members like you have made this community the ultimate source for your Mac since 2003!


(4 digit year)

Already a member?