ThirdEye

Q: Pop up Virus Alert won't go away in Safari

I keep getting these pop-up windows (I have pop-ups disabled) for some sort of virus removal scam.  I've run Cocktail and Permissions Repair and deleted all History ... nothing helps.  Not only are these windows disrupting my usage of Safari, they have also changed my default browser from Google to Yahoo even though the box is checked for Google.  Screen Shot 2016-06-06 at 9.43.14 AM.png

I am totally lost on this one ... anybody else dealing with this?

 

Tommy Holt

Mac Pro, OS X Mavericks (10.9.5), 2009, 2.66 GHz Quad-Core, 32GB Mem

Posted on Jun 6, 2016 7:57 AM

Close

Q: Pop up Virus Alert won't go away in Safari

  • All replies
  • Helpful answers

Previous Page 2
  • by JoelThomasDesign,

    JoelThomasDesign JoelThomasDesign Jun 6, 2016 1:03 PM in response to Linc Davis
    Level 1 (4 points)
    Jun 6, 2016 1:03 PM in response to Linc Davis

    I have the same problem, constantly being redirected with xb11766.com.  On my root directory hard drive a file named "file" keeps appearing.  I delete this, it requires me to type my password to put it into trash.  I run Malware bytes and delete files that keep appearing.  I've gone through all your other steps many times, but no such files exist.

     

    My DNS Servers:

    209.18.47.62

    209.18.47.61

     

    Search Domains:

    socal.rr.com

  • by JoelThomasDesign,

    JoelThomasDesign JoelThomasDesign Jun 6, 2016 1:15 PM in response to JoelThomasDesign
    Level 1 (4 points)
    Jun 6, 2016 1:15 PM in response to JoelThomasDesign

    My LaunchDaemons file from root directory library.

    LaunchDaemon.jpg

  • by Linc Davis,

    Linc Davis Linc Davis Jun 6, 2016 1:38 PM in response to ThirdEye
    Level 10 (208,037 points)
    Applications
    Jun 6, 2016 1:38 PM in response to ThirdEye

    It's not clear that you still have a problem. If you do, what is it?

  • by JoelThomasDesign,

    JoelThomasDesign JoelThomasDesign Jun 6, 2016 1:52 PM in response to Linc Davis
    Level 1 (4 points)
    Jun 6, 2016 1:52 PM in response to Linc Davis

    most times I click a link on a web page a new tab opens directed to the following address:  xb11766.com

     

    Often times pop-up adds appear on the original page from which I clicked the link.  This happens when I'm searching for tools on say, www.rockler.com, a very common/safe webpage for woodworking supplies.  The problem is making it almost impossible for me to search anything without constantly closing tabs that automatically open as the active tab.  Very frustrating and time consuming.

  • by ThirdEye,

    ThirdEye ThirdEye Jun 6, 2016 3:57 PM in response to Linc Davis
    Level 1 (4 points)
    Safari
    Jun 6, 2016 3:57 PM in response to Linc Davis

    I'm not sure if that message was directed to me or not ... but I can say that the problem seems to have disappeared.  I don't know which of the things I tried worked because I was quitting Safari and restarting the computer every few minutes while trying different things.  I believe that the rogue extension file I found in my Safari extensions folder was the culprit. It had a logo that looked similar to the pop-up page logo. 

     

    So, it seems to be fixed and I do really appreciate the help I received. 

     

    Tommy Holt

Previous Page 2