Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Forced redirecting to scanner2.malware-scan.com happening all the time

I can't believe this is happening on safari.. maybe I need to switch to firefox. Apple shouldn't even allow this browser behavior. Apparently it's triggered from mere ads on some pages, for instance when I was checking my old hotmail account. What happens is the window resizes extremely small in the corner, and then a message comes up asking if I want to download software. I am forced to choose OK or cancel, and either option brings me to the same result, so I don't really have a choice.

MacBook Pro, Mac OS X (10.5)

Posted on Nov 30, 2007 4:41 AM

Reply
9 replies

Dec 24, 2007 6:18 AM in response to lenehan57

Ad servers with these fake ads, login or "survey" forms.

Malware, trojan horses are able to infect Google and Doubleclick, and it can live on in Google's cache servers even after the 'real' site and content is cleaned.

And malware can know it is you and use tracking cookies. In some ways at least with Windows Avast, AVG and Norton can alert you to tracking cookies.

Use advanced settings for firewall, block services and ports through your router, and consider using a network intrusion detection package regardless of platform.

On Mac, use stealth mode, block your browser, platform and OS, even if it does mean some site may claim it won't work, 99.9% even banks are fine.

The GUID of your boot drive unfortunately is also unique and can be ascertained.

Use Firefox 3.x with NoScript for one thing. Disable javascript as much as possible, and then just close the tab window and don't do anything. Go back later if you need to.

Dec 30, 2007 11:59 PM in response to jamesdstark

Well, I've just had the scare of my life as well. I visited 123 Greetings (using Safari) when suddenly my browser resized to maximum and some screen told me it was scanning my machine for malware. At the same time, I noticed stuff being downloaded into my downloads stack.
I quit Safari, trashed the two files that were downloaded and emptied the trash immediately. While trashing the files, I noticed they were .exe, probably Windows executables and probably not even executable on my Mac, but still, why take the risk.

The scary part is that I am in stealth mode and this still happened, with my wireless network password protected.

But all in all, I got away with a scare. I immediately had Norton Antivirus scan for infections, and my Mac got a clean bill of health 🙂
But it does go to show that even on a Mac, we mustn't take security too lightly and the question is how long before hackers turn to Mac and force us to implement the same draconian security measures that made me decide to switch from PC to Mac.

Dec 31, 2007 12:10 AM in response to Amenhotep III

After the virusscan that told me I did not get any infection installed on my Mac, I actually returned to that scanner2.malware site and it behaved in exactly the same way except for the forced download which I prevented by quitting Safari before it was done.
Then I switched off my external hard disk and returned to that same site again and guess what: it was still claiming to scan two hard disks. I guess the only thing it got right was the identification of the OS I am running.

So, all in all, not something to fret about, I think. But better be safe than sorry, so when you see this happen:
- Quit your browser
- remove any files that were downloaded
- scan for viruses and let your scanner deal with it

Jan 6, 2008 9:50 AM in response to jamesdstark

The Flash ad responsible for the redirection to malware-scan.com is that of DotTunes.net. This orange Flash ad is displayed at 728 x 90 pixels at many websites. Their ad is traded at AdECN, whose members include most major ad companies.

When you are redirected to malware-scan.com, your terminal will also attempt to access newbieadguide.com and blessedads.com. The situation has changed a little in the past 24 hours. 2 friends including bucksbill.com and statsgod.com have joined the party. One of them is possibly responsible for a computer virus, which you will likely contract when redirected to malware-scan.com. Norton AntiVirus X will detect and kill this virus.

In case you wanted to know, Firefox is more resistant to this particular Flash ad than others while Camino seems to accept it at any website I found. For now, the best prevention is to leave the website as soon as you see that orange Flash ad. And observe the status bar. If the status bar shows "www.newbieadguide.com...," that means you can be redirected to malware-scan.com once every 24 hours. Trashing caches or cookies is not going to change a thing.

By the way, I'm not affiliated with youhide.com or dottunes.net in any way. For more information on this subject, you may probably want to ask a guy named Google about "malware-scan.com."

Message was edited by: Horror in Oklahoma

Forced redirecting to scanner2.malware-scan.com happening all the time

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.