Malware popup warning on browsers

Fake apple support. How do I remove this. Can't use safari or foxfire without freezing. Her is message. Apple Mac Online Support Message
**************************************
Mac OS X has detected a Virus on the system, Due To Unsafe Browsing

Warning !!! System Auto Locked to prevent virus to contain OS Files

Contact Apple Support Helpline For Assistance

Toll-free Helpline: 1-877-524-3836

Its strongly adviced to contact Our Online Support to have the virus removed as it can cause a system failure.

Contact Apple Support Helpline For Assistance

Toll-free Helpline: 1-877-524-3836

This is called ransomware. Because usually if the phone number is called...some fake business offers to fix things for a fee.

What you need to do is:

- Disconnect your WiFi (turn Airport off on the computer).
- Quit the browser apps.
- Relaunch the apps.
- Close all the browser tabs.
- Turn the WiFi (Airport) back on.

HTH,

- Nick

Might also downloading adware medic and run it. Follow it's recommendations for what it suggests to to.

AdwareMedic

Then consider adding as extensions to your browser Adblock Plus and Ghostery. They will help.

Lisa

Just adding some of my details to this thread, so people know what to expect. Is there a recommended site to report these pages?



Recently my mother was Google searching for Inspirational quotes:
The number (1-877-524-3836) was listed in a Pop Up for adware or malware removal.

Site:
marktermeontop(dot)xyz

Previous site in History:
designcarrot(dot)co

After Force Quitting Chrome, I went to designcarrot again and was prompted for a media player update, then after clicking the X in the top right corner, I got the rather official looking set Google Chrome alerts that won't go away until I Force Quit from the Cmd+Opt+Esc dialog. Chrome menu has Quit greyed-out/disabled. Right-Click, Quit from the Dock icon does nothing.


• Pop Up reads:
"The page at marktermeontop(dot)xyz says:
System Alert.

Your Computer is infected with an adware or
malware causing you to see this popup.

This may happen due to obsolete virus protections.

To fix, please call system support at
1-877-524-3836 immediately. Please ensure you do
not restart your computer to prevent data loss.

Possibility of Data & Identity theft, if not fixed
immediately."



•• If I clicked OK it displays a new Pop Up, repeating the first information, and adds this:

" Possibility of Data & Identity theft, if not fixed immediately.

YOUR COMPUTER HAS BEEN BLOCKED*

Virus System Alert!!

System has been infected due to unexpected error!
Please Contact Support 1-877-524-3836 Immediately!
to unblock your computer.

Suspicious Activity Detected. Your Browser might have been hijacked or hacked.

ANONYMOUS ACTIVITY

Private and Financial Data is at RISK:
. Your credit card details and banking information
. Your e-mail passwords and other account passwords…"



••• Clicking Cancel adds another PU repeating the first information, and replaces the title with:

"Confirm Navigation"

It adds:
– A Check Box: "Prevent this page from creating additional dialogs."

– A Looping Audio Message:
"Important security message. Please call the number provided as soon as possible. You will be guided for the removal of the ad ware spyware virus on your computer. Seeing these Popups means that you have a virus installed on your computer which puts the security of your personal data at a serious risk. It's strongly advised that you call the number provided and get your computer fixed before you do any shopping online."

– A Pair of Buttons: "Stay on this Page" and " Leave this Page".

•••• Leave this Page regenerates the first PU.


Not sure I want to test the cycle any further.

Follow pigoo's advice above.

Hopefully you realize this is all malware and have followed some of the suggestions given above to get rid of it. I would not have "poked the bear" by clicking on anything. I am not aware of any reporting sites but Google offers this:

https://www.google.com/safebrowsing/report_badware/

Lisa

bobtomay:
Hey... fellow Texan, I'll sure give that a try if I experience any issues. So far everything looks clear. This post was the first result on a G search for the number listed, so I mainly wanted to document the experience for others and provide a resource for reporting.

Thanks for the re-assurance,


lclev:
Yes, I did realize as soon as it was described to me.

Thanks for the Safebrowsing link. I also reported it here: https://www.stopbadware.org/ since it was mentioned, after submitting on the Google page.

Thanks,
Joel K.

And for goodness sake do not part with any money or credit card details. Criminals at work here.

Ransomware

Nick, Even after disconnecting WiFi and quitting Safari on my iMac, the system alert locks up Safari when I relaunch it. How do I override that and remove this ransomware?

pigoo3 said:

This is called ransomware. Because usually if the phone number is called...some fake business offers to fix things for a fee.

What you need to do is:

- Disconnect your WiFi (turn Airport off on the computer).
- Quit the browser apps.
- Relaunch the apps.
- Close all the browser tabs.
- Turn the WiFi (Airport) back on.

HTH,

- Nick

Click to expand...

[Force] Quit Safari then hold down the Shift key when you click Safari again to launch it. This will prevent it from restoring your previous browser session and going right back to where you were.

That worked. Thank you! How do I check to ensure no damaging files are on my iMac?