Browser windows open unexpectedly--malware?

Joined
Aug 2, 2010
Messages
9
Reaction score
0
Points
1
MacBook 2,1
Intel Core 2 Duo
Mac OS X 10.4.11

Hello.

Would you be able to help me figure out how to get rid of some sort of malicious bug in my MacBook?

When I have FireFox open, without my knowledge additional windows will open in the background, usually with articles, advertisements, and sometimes videos.

I always close them, but others will pop up later.

I've run Sophos and MacScan. MacScan found 9 tracking cookies, which it deleted.

I thought maybe my problems might have been connected with HotSpot Shield, which I had downloaded a couple of months ago. I deleted it using Amnesia.

Still having the problems, however...

I would appreciate any suggestions.

Thanks!
 
Joined
Sep 9, 2009
Messages
5,473
Reaction score
201
Points
63
Location
Down Under :D
Your Mac's Specs
Back to my old 2.2GHz C2D MB after selling my MBP and wondering what my next Mac will be :)
Some sites have this.... especially porn sites, and gambling sites.
This has nothing to do with Malware, etc.

The best you can do to minimise this behaviour is in firefox preferences, make sure that in content, you have block pop up windows checked.

Also, install adblock plus while you are at it. http://adblockplus.org/en/
 
Joined
Oct 27, 2002
Messages
13,172
Reaction score
348
Points
83
Location
Cleveland, Ohio
Your Mac's Specs
MacBook Pro | LED Cinema Display | iPhone 4 | iPad 2
Joined
Jul 20, 2010
Messages
15
Reaction score
0
Points
1
Can you use the console to check for anything suspicious? I am in the same position, but the same advice hasn't fixed matters.

Also, which plist files should be deleted for this issue, as per this thread?
 
OP
E
Joined
Aug 2, 2010
Messages
9
Reaction score
0
Points
1
Hi. It's still happening. Pop-ups are disabled on FireFox and Safari, AdBlockerPlus is (and has been for a long time) installed, the Sophos and MacScans don't show anything, I read all the posts on malware, I read the sticky on troubleshooting Macs, I ran disk utility, I zapped the PRAM, I deleted my caches, I checked my files in single user mode, I made sure the firewall was on, I deleted all my cookies, I turned on stealth mode, etc.

I don't visit porn sites or gambling sites.

The latest browser window to pop up had this URL:
Movies | Reviews | Movie Times | Hollywood News | Hollywood.com

I've had this MacBook for over four years and have never had anything like this happen before. Now it happens all the time.

I do use a P2P network (Vuze). I do also travel a lot and often use public wi-fi networks. I also plug my computer into my work's network.

Thanks again for your help.
 
Joined
Jul 20, 2010
Messages
15
Reaction score
0
Points
1
ekandre, we might have the same problem.

When I clicked the "post reply" button on this thread, it opened a popup with Google Analytics then this webpage.

ClamXav hasn't detected anything on my system either.

ekandre, does the same thing happen in both Firefox and Safari?
Can you run a google webpage search, then click "Maps" and search for the same thing? Do the "next" buttons work in Google search results? (Yes, no and no in my case.)

We might have a common problem, so a common solution.
 
Joined
Dec 23, 2010
Messages
544
Reaction score
9
Points
18
Location
United States
Your Mac's Specs
MacBook Unibody 13" 150 GB HDD
Have you tried deleting Safari and re-installing it? Or are you on the most current version of Safari?
 
Joined
Jul 20, 2010
Messages
15
Reaction score
0
Points
1
That shouldn't work (Adium developers say replacing the *.app file is a waste of time), but it does. Or it seems to, in my recent browsing. Both Safari and Firefox.

@ekandre: try that too.

Thanks :D
 
Joined
Nov 28, 2007
Messages
25,564
Reaction score
486
Points
83
Location
Blue Mountains NSW Australia
Your Mac's Specs
Silver M1 iMac 512/16/8/8 macOS 11.6
Have you tried emptying caches and deleting history of where you have been?
 
Joined
Dec 23, 2010
Messages
544
Reaction score
9
Points
18
Location
United States
Your Mac's Specs
MacBook Unibody 13" 150 GB HDD
@ManofWar did my suggestion work?
 

CrimsonRequiem


Retired Staff
Joined
Jul 24, 2008
Messages
6,003
Reaction score
125
Points
63
Your Mac's Specs
MBP 2.3 Ghz 4GB RAM 860 GB SSD, iMac 3.4 GHz Intel Core i7 32GB RAM, Fusion Drive 1TB
If you are using Firefox try downloading and installing this add-on called Yes popups 0.9.8b. Sounds counter productive but I haven't had a single popup that has gotten past it. Unless I want it to.
 
Joined
Dec 23, 2010
Messages
544
Reaction score
9
Points
18
Location
United States
Your Mac's Specs
MacBook Unibody 13" 150 GB HDD
@CrimsonRequiem what is the description of Yes popups?
 
Joined
Jul 20, 2010
Messages
15
Reaction score
0
Points
1
@roflitskyle:
Better, but not perfect.

Fixed, apparently: I can navigate google. Next/Previous buttons is search pages; change from a webpage straight to map search.

Not fixed: Random background popups (also when double clicking on some words); some google search results link to ads/link farms - at least in Firefox.

I did clear cache before, I'll clear again.
 
OP
E
Joined
Aug 2, 2010
Messages
9
Reaction score
0
Points
1
Yes, it was happening in both Safari and Firefox.

I deleted and reinstalled both programs, cleared my caches, deleted all history, and installed Add Blocker Plus Pop Up Addon.

It seems to be fine now.

Thanks again for the suggestions.
 
Joined
Dec 23, 2010
Messages
544
Reaction score
9
Points
18
Location
United States
Your Mac's Specs
MacBook Unibody 13" 150 GB HDD
@ekandre glad you got it to work!
 

CrimsonRequiem


Retired Staff
Joined
Jul 24, 2008
Messages
6,003
Reaction score
125
Points
63
Your Mac's Specs
MBP 2.3 Ghz 4GB RAM 860 GB SSD, iMac 3.4 GHz Intel Core i7 32GB RAM, Fusion Drive 1TB
@CrimsonRequiem what is the description of Yes popups?

Would have responded sooner but you know how family never wants to leave. >_>" Linky to the actual thing, has descriptions etc.
 
Joined
Dec 23, 2010
Messages
544
Reaction score
9
Points
18
Location
United States
Your Mac's Specs
MacBook Unibody 13" 150 GB HDD
Would have responded sooner but you know how family never wants to leave. >_>" Linky to the actual thing, has descriptions etc.


Haha I know what you mean. I was just curious about the name. Thank you, might have to download it for Fire Fox!
 
Joined
Jul 20, 2010
Messages
15
Reaction score
0
Points
1
Afraid I can't say the same, depsite clearing cache/history, etc. Help still appreciated.
 

Shop Amazon


Shop for your Apple, Mac, iPhone and other computer products on Amazon.
We are a participant in the Amazon Services LLC Associates Program, an affiliate program designed to provide a means for us to earn fees by linking to Amazon and affiliated sites.
Top