internet pop up/virus concern

No, you did the right thing by not downloading that Windows malware trojan thingy!

Obviously not a site worth visiting.

Did you close Safari and reopen it after the visit?

I've encountered the exact same thing on a local newspaper site, but only late at night. Their tech people are looking into it. I don't think it's malware, because I haven't downloaded anything, so my guess is it's a redirect hack on their server or perhaps in one of their ads (they have different ads each time you load the page and the redirect only happens sporadically, so it could be code in one of the ads). I'll post here if they get back to me about it.

youre ok.
That software is probably some kind of windows malware.

Hi,

I would just like to let you know that the pop up was probably a scam to get you to buy some product. Even if it says that you have virus's, do NOT trust them. Your computer is probably fine and virus free, unless you have a trusted anti-virus program that says you have a virus. Trust me, it has happend to me before.

Your Welcome,
E.L.

I've been getting this recently also. The issue I have is that the pop-up has an OK button and the rest of Safari's controls are greyed out. In other words, the pop-up has no window close control and I can't exit Safari. I've had to force quit Safari to continue surfing. Is there some way to close this window without having to force quit? (And I just thought about command-W. Haven't tried that but I will next time.)

thanks
michael

I've had the same issue since yesterday Nov 10th. It initially occurred when I was on the Boston Herald website. Then, it started occurring on some other websites. It popped up even when I didn't click on anything. I erased most of my cookies, and it still appeared.

It is disconcerting that this pop up "hijacks" the browser.

Does the newer Safari beta 3 do better at blocking pop ups?
Thanks,
John

Safari 3 is about the same.

If you click on the web page outside the pop-up window, it should 'disappear' behind the main window.

Does that work?

I had the same thing happen when looking at a newspaper article that had pop up ads. Usually I can just close the pop-up window, but the most recent one had all menu items disabled... could not even force quit safari from the dock. Used the Activity monitor to force quit safari.

Next I used another app I wrote to download the source which I have if anyone is interested,

Next I did a lookup/whois and found this:
ip: 77.91.229.104

inetnum: 77.91.224.0 - 77.91.231.255
netname: RU-WEBALTA-20070523
descr: WEBALTA
country: RU
org: ORG-WA87-RIPE
admin-c: DL2474-RIPE
tech-c: DL2474-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: RU-WEBALTA-MNT
mnt-routes: RU-WEBALTA-MNT
mnt-domains: RU-WEBALTA-MNT
source: RIPE # Filtered

organisation: ORG-WA87-RIPE
org-name: Webalta
org-type: LIR
address: ANDROPOVA 22
address: 115533
address: MOSCOW
address: Russian Federation
phone: +74952340000
fax-no: +74952340000
e-mail: noc@webalta-team.com
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: RU-WEBALTA-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

person: Dmitry Lazarev
address: WEBALTA / Internet Search Company
address: Andropova pr. 22
address: Moscow, Russia
address: 115533
phone: +7 495 234 0000
e-mail: dlazarev@webalta.ru
nic-hdl: DL2474-RIPE
mnt-by: RU-WEBALTA-MNT
source: RIPE # Filtered

% Information related to '77.91.224.0/21AS41947'

route: 77.91.224.0/21
descr: WEBALTA / Internet Search Company
descr: Moscow, Russia
origin: AS41947
mnt-by: RU-WEBALTA-MNT
mnt-routes: RU-WEBALTA-MNT
source: RIPE # Filtered

That look suspiciously like malware from Russia!

Don't take just my word for it but I think this is more nuisanceware than malware. I played around with the page I got and it told me:
1. My ip address (correct... that is easy)
2. My browser was Explorer 5.5 (incorrect... it's safari)
3. My operating system was Windows 2000 (incorrect... I don't even have an intel processor)
4. That I have MgSpyNe running on my computer (I can't even find a mention of MgSpyNe anywhere on the net.. I think they made up the name)

So my first guess would be you're ok not clicking download and would probably be ok even if you had clicked it.

Opera is very good at blocking pop-ups and such. Give it a try.

I've been experiencing the same thing when I visit allmusic.com. No harm done, just a nuisance. I mostly don't like my Mac to behave like a Windows machine.

The frightening thing about it though was the response here that allmusic is "Obviously not a site worth visiting."

I just noticed the same problem. I recently upgraded to Leopard, and was having trouble downloading Norton anti-virus defs. After I downloaded to the new Liveupdate installer from their website and rebooted, my machine was directed to this site. I didn't even have a browser open - it opened the page on its own. I'm going to contact Symantec and let them know.