blick

Q: R-ad-somware--is there a remedy?

"R-ad-somware" is my play-on-words for ransomware, due to recent events. I regularly peruse and participate in a web forum hosted by Zetaboards, and lately (past few days) the host redirects the active forum to ads that have only one active button--the "download" or "Install" button--with an inactive "cancel" or "later" button visible on screen. At first I could close the page/window/tab--there was no navigating "back" to the original page, but closing the page worked (meaning you had to reopen and log back into the forum in order to continue where you left off).

 

Today the ad that hijacked the page was for that darned MacKeeper, and as stated above, there was no choice but to download and install MacKeeper. I know all about MacKeeper and won't ever click any link to that malware distributor or basically any "ad" that appears on any webpage I visit, or in my email, etc. But, not only did MacKeeper's page prevent me from navigating back to my previous page/forum or closing that window, it disabled Chrome so I ended up having to force-quit to escape. It was like ransom-ware without a demand to call a phone number to "fix" the problem, or to download the "software fix" and pay hundreds of $$ for the privilege. The "ransom" in this case appears to be downloading MacKeeper and having your search engines hijacked as well as whatever else evil that criminal organization intends for your computer.

 

I don't have a "user account" with Zetaboards so I can't even report it to them. I also followed the steps to check and clear any malware/adware that might have been surreptitiously installed on my computer in the background...and my computer is clear of junk.

 

Is there any way to keep garbage on a web hosts' servers from hijacking your browser? (Short of outright quitting the forum that's affected and never visiting it again, that is?)

 

I am removing Chrome from my computer because it has serious problems-"flash plug-in" crashes constantly--and is no longer supported for my OS (10.6.8). I'm using Safari for the first time in two years because it has caused me headaches in past years....but Firefox and Chrome are unsuitable any more.

Mac mini, Mac OS X (10.6.8), core duo

Posted on Sep 19, 2016 1:39 PM

Close

Q: R-ad-somware--is there a remedy?

  • All replies
  • Helpful answers

first Previous Page 3 of 3
  • by blick,

    blick blick Sep 22, 2016 9:12 AM in response to etresoft
    Level 1 (12 points)
    Desktops
    Sep 22, 2016 9:12 AM in response to etresoft

    So, is it your opinion (or a fact?) that OSX 10.11.xx, with more RAM, has sufficient built-in protection that it would stop this incessant ad invasion? I'm reluctant to spend a bunch of money (even as cheap as RAM is) to replace the hard drive with an SSD and add memory if it might just be better to forgo "fixing" this 6-year old computer and instead buy a new computer entirely. (That will significantly affect my budget, as a retiree on fixed income. But then, so will spending over a hundred dollars for a new SSD....)

     

    And, if the problem is not from my hard drive (no adware), and not from my ISP's wireless router, but from the servers running ebay and Swifty's.....will doing ANYTHING on my end resolve that problem? OR will I just end up with a new, faster computer that still throws ads up in my way without any possible remedy?

  • by Csound1,

    Csound1 Csound1 Sep 22, 2016 9:16 AM in response to blick
    Level 9 (50,871 points)
    Desktops
    Sep 22, 2016 9:16 AM in response to blick

    Adding RAM will have no effect on Adware, the answer is not to download it, no matter how much RAM you have

  • by ChitlinsCC,Helpful

    ChitlinsCC ChitlinsCC Sep 22, 2016 9:56 AM in response to blick
    Level 5 (7,905 points)
    Notebooks
    Sep 22, 2016 9:56 AM in response to blick

    Remember the important distinction

    - Adware/Malware is something that you (inadvertently) "install" = you are 'allowing' the bad guys in the door.

    - Ads that annoy you are part of the browsing experience - like billboards when you drive, or commercials when you watch TV

    -- SOME ads 'Appear' to be Malware because of the way that they rpesent themselves = popUPs, popOVERs, popUNDERs & popToAnewTABoutOfFocus

    These are NOT "adware" - they are invoked from code presented at the website you visit - either the owner is "in on it" or they have been hacked

    Robust AdBlock add-on and a PopUp killer can "reduce" the number of instances - but never completely eliminate because of how the scammers "move around"

  • by blick,

    blick blick Sep 22, 2016 9:53 AM in response to Csound1
    Level 1 (12 points)
    Desktops
    Sep 22, 2016 9:53 AM in response to Csound1

    Thanks. I don't and won't download anything "offered" without my direct solicitation of that product. (I apparently made the mistake a year or so ago and did find adware installed by another attempt to download an update to something, possibly flash player or something else....and the user support community here gave me the procedure to clean up my hard drive, which I completed successfully.) (It was MacKeeper that was installed....though I have no recollection of clicking on any link in any ad anywhere for MacKeeper....but still my default search engine was changed to one of those adware-specific search sites, and I had to go through that whole procedure to remove all traces of MacKeeper and the various search engines that were installed. Mea culpa: I think the source then was I clicked a link to "update" Microsoft Office to a 'newer' version.....thinking it was a legitimate update....and I received a link to Office updates or something like that....but of course, no actual software except the MacKeeper and other adware tagalongs that were sent with the link. So, I don't do that any more.

  • by Csound1,Helpful

    Csound1 Csound1 Sep 22, 2016 11:56 AM in response to blick
    Level 9 (50,871 points)
    Desktops
    Sep 22, 2016 11:56 AM in response to blick

    I don't understand your reply to me, I was talking about adding RAM as a solution, you were talking about something else entirely.

     

    So good luck.

  • by ChitlinsCC,

    ChitlinsCC ChitlinsCC Sep 22, 2016 10:19 AM in response to Csound1
    Level 5 (7,905 points)
    Notebooks
    Sep 22, 2016 10:19 AM in response to Csound1

    Csound1 wrote:

     

    I don't understand your reply to me, I was talking about adding RAM as a solution, you were talking about something else entirely.

     

    So good luck.

    Our lovely User eXperience design, perhaps?

  • by blick,

    blick blick Sep 22, 2016 11:55 AM in response to Csound1
    Level 1 (12 points)
    Desktops
    Sep 22, 2016 11:55 AM in response to Csound1

    I have a tendency to overexplain sometimes. Yes, I was responding to your answer to my question about RAM, but you also said "the answer is to not download it", referring, I believe, to not clicking on the ads' "download" or install buttons. So I noted I don't click on those ads. With my usual verbosity (as in this reply).

     

    And, I know/knew RAM has nothing to do with it.....I guess my frustration overruled my brain when I asked that question.

     

    And to ChitlinsCC, if I catch your drift, yes, the "User eXperience design" of these forums confuses me a bit....never sure when I "reply" to a specific person/topic, how it's gonna show up to everyone else....what I see is my replies as the "newest" entry, separated from the users' content to which I replied. I remember forums and perhaps back to usenet when threads and responses were indexed immediately below the content to which they referred...so it was a visible order/organization that was immediately recognizable to whom it referred.

  • by Csound1,

    Csound1 Csound1 Sep 22, 2016 11:59 AM in response to blick
    Level 9 (50,871 points)
    Desktops
    Sep 22, 2016 11:59 AM in response to blick

    Yes, the new design can be a bit 'challenging'

  • by ChitlinsCC,

    ChitlinsCC ChitlinsCC Sep 22, 2016 1:05 PM in response to blick
    Level 5 (7,905 points)
    Notebooks
    Sep 22, 2016 1:05 PM in response to blick

    I have my preference set to = "Discussions view" > "Threaded"

    which works until there are some # of posts, when everything becomes "Flat" view

    https://discussions.apple.com/user-preferences!input.jspa

    As you can see by the following image, it can be confusing WHO's [Reply] button you are seeing because of Apple's design sensibilites

    screenshot-discussions.apple.com 2016-09-22 14-56-59.png

    If you are in Flat view, latest post is last (bottom)

    The compose panel also has a prompt at top-left

    screenshot-discussions.apple.com 2016-09-22 15-05-01.png

  • by blick,Solvedanswer

    blick blick Sep 25, 2016 12:43 PM in response to ChitlinsCC
    Level 1 (12 points)
    Desktops
    Sep 25, 2016 12:43 PM in response to ChitlinsCC

    I asked other users at Swifty's if any of them were experiencing similar 'hijacks' to what I was seeing, and several of them, including one of the admins, said they too had seen both: obnoxious ads replace Swifty's window, and the ransom pages doing the same thing. One of those affected (an admin) said he would contact Zetaboards' admin to advise them what's happening (that was Saturday or last Friday). So far, nothing has changed on my end; Swifty's has become an unfriendly site because I can't visit it without ads or ransom pages interrupting my user end experience, frequently and almost instantaneously (almost as soon as I enter a forum simply to read it....). It doesn't matter which browser I'm using; I've looked into updating the browsers, but as it turns out, neither Chrome, Safari, or Firefox support OSX 10.6.8 any longer, so there are no more "recent" versions of any browser for my box. (That's also an issue because I can no longer even access my bank online because they have stopped supporting old versions of all the browsers and I can't log in because the banks' system won't allow the use of the browsers I am stuck with.)

     

    This morning, the Flash ad that took over Swifty's literally prevented most action from my end. No "Quit" command in Safari's menu (same with Chrome); no navigating back or forward; it was difficult and took a few minutes even to close the browser window(s)/tabs that were open. The popover dialog box that appeared 'floating' above the ad and it's "install now" dialog had two 'buttons' that both highlighted under mouse-over as if they would perform some action, but did nothing. Nothing at all. Those fake buttons were under the text "Are you sure you want to leave this page?"....even though when the ad appeared I didn't have time to do a **** thing before the "leave page" dialog appeared. And, of course, as long as that dialog box remained on screen--it wouldn't go away, since the buttons did nothing--I could do nothing else in the browser except "force quit" from the Apple menu.

     

    This seems like it should be illegal; but of course, the perpetrators are probably in Russia or some authoritarian country and don't give a **** about laws or a person's right to be unassaulted by jerks and criminals.

     

    Anyway, it appears I'm left with a very few choices: buy and install more memory and upgrade my OS hoping (without evidence) the latest Mac OS will help prevent this stuff; wipe my Mac's hard drive and throw the box out and buy a new Mac, again hoping this will result in some more effective built-in suppression of scams and crapware, without any evidence it will; or simply never visit Swifty's again, and hope no other site I want to visit will use a "free" web hosting service.

     

    Thanks again, all of you, for trying to help me. I will end this thread the next opportunity to click a button that allows me to close the question. While it hasn't been "solved" or whatever the option is, I'm tired of fighting this battle against unscrupulous "advertisers". They won. I'm defeated.

  • by ChitlinsCC,

    ChitlinsCC ChitlinsCC Sep 25, 2016 12:51 PM in response to blick
    Level 5 (7,905 points)
    Notebooks
    Sep 25, 2016 12:51 PM in response to blick

    You have boiled it down to the gravy

    These threads don't get "closed" in the tradition of most Bulletin Boards, they just "fall out of use" - so no further action on your part is necessary...

    You could let us know what Zetaboard's actions are though (might be interesting to know if THEY are in on the deal?)

first Previous Page 3 of 3