Skip navigation

How do I get rid of globalconsumersurvey pop up?

867 Views 12 Replies Latest reply: Jul 13, 2013 7:27 AM by dr mss RSS
dr mss Calculating status...
Currently Being Moderated
Jul 7, 2013 8:05 AM

This popup started yesterday after I clicked on a link for Flight Aware for info on the SFO crash.  Searching the web shows lots of info for Windows -- Chrome _ Firefox -- but nothing for Macs. The popup appears with a window "Click here for your survey" -- it has no option to close it -- and the beachball keeps spinning.

iMac, OS X Mountain Lion (10.8.3), pop up in Safari
  • Linc Davis Level 10 Level 10 (107,470 points)
    Currently Being Moderated
    Jul 7, 2013 9:11 AM (in response to dr mss)

    Step 1

     

    Quit Safari. Force quit if necessary.

      

    Relaunch Safari by holding down the shift  key and clicking its icon in the Dock. That will stop the bad page from reloading automatically. From the menu bar, select

      

    Safari Preferences... Privacy Remove All Website Data

      

    to get rid of any cookies or other data left by the server. Open your Downloads folder and delete anything you don't recognize.

     

    Step 2

     

     

    From the Safari menu bar, select

            

    Safari Preferences Extensions

         

    Turn all extensions OFF and test. If the problem is resolved, turn extensions back ON and then disable them one or a few at a time until you find the culprit.

  • Linc Davis Level 10 Level 10 (107,470 points)
    Currently Being Moderated
    Jul 8, 2013 8:22 AM (in response to dr mss)

    Please read this whole message before doing anything.
      
    This procedure is a diagnostic test. It won’t solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
       
    Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.

     

    These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.

     

    Below are instructions to enter some UNIX shell commands. The commands are harmless, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects.

     

    Some of the commands will line-wrap or scroll in your browser, but each one is really just a single line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then copy it. The headings “Step 1” and so on are not part of the commands.

     

    Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. The other steps should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.

     

    Launch the Terminal application in any of the following ways:

     

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

     

    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

     

    ☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.

     

    When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” and press return. You should then get a new line ending in a dollar sign.

     

    Step 1

     

    Triple-click the line of text below on this page to select it:
    kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}' | open -f -a TextEdit
     
    Copy the selected text to the Clipboard by pressing the key combination command-C. Then click anywhere in the Terminal window and paste (command-V). A TextEdit window will open with the output of the command. If the command produced no output, the window will be empty. Post the contents of the TextEdit window (not the Terminal window), if any — the text, please, not a screenshot. You can then close the TextEdit window. The title of the window doesn't matter, and you don't need to post that. No typing is involved in this step.
        
    Step 2

     

    Repeat with this line:
    { sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|org\.(amav|apac|cups|isc|ntp|postf|x)/{print $3}'; sudo defaults read com.apple.loginwindow LoginHook 2> /dev/null; } | open -f -a TextEdit
     
    This time you'll be prompted for your login password, which you do have to type. Nothing will be displayed when you type it. Type it carefully and then press return. You may get a one-time warning to be careful. Heed that warning, but don't post it. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

     

    Note: If you don’t have a login password, you’ll need to set one before taking this step. If that’s not possible, skip to the next step.

     

    Step 3
    launchctl list | sed 1d | awk '!/0x|com\.apple|org\.(x|openbsd)/{print $3}' | open -f -a TextEdit
     
    Step 4
    ls -1A /e*/{la,mach}* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta}* L*/Fonts .la* 2> /dev/null | open -f -a TextEdit
      
    Important: If you formerly synchronized with a MobileMe account, your me.com email address may appear in the output of the above command. If so, anonymize it before posting.

     

    Step 5
    osascript -e 'tell application "System Events" to get name of every login item' | open -f -a TextEdit
     
    Remember, steps 1-5 are all copy-and-paste — no typing, except your password. Also remember to post the output.

     

    You can then quit Terminal.

  • Linc Davis Level 10 Level 10 (107,470 points)
    Currently Being Moderated
    Jul 8, 2013 9:59 AM (in response to dr mss)

    Are you seeing the popup on all sites, on some, or only on one? If only one or some, post a link.

  • Linc Davis Level 10 Level 10 (107,470 points)
    Currently Being Moderated
    Jul 8, 2013 10:24 AM (in response to dr mss)

    Use an ad blocker, such as GlimmerBlocker, and/or a selective cookie blocker such as the Ghostery Safari extension.

  • Linc Davis Level 10 Level 10 (107,470 points)
    Currently Being Moderated
    Jul 8, 2013 11:07 AM (in response to dr mss)

    Those programs should address your issue. It's not malware, just annoying JavaScript abuse.

  • BobCens Calculating status...
    Currently Being Moderated
    Jul 11, 2013 1:47 PM (in response to Linc Davis)

    I found globalsecurityconsurvey in my cookies file and deleted it as well as several others with no know use. We'll see how that works. Thanks to all for the input.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.