malware redirecting websites

I live in Europe and own a MacBookAir running OSX El Capitan v. 10.11.6, with Safari v. 11.1.2. I apparently have no software updates available. However, I have encountered something (malware/virus) that is suddenly redirecting websites (from very well-known sites, such as news/weather sources) through multiple addresses to unknown sites claiming virus infection. It is randomly occurring, and I have had to clear cache, log off and shut down, and change my password each time this has happened. I am admittedly not computer savvy. What can I do to fix the problem and secure my Mac? Please help!


MacBook Air

Posted on Sep 29, 2019 7:31 AM

Reply
Question marked as Top-ranking reply

Posted on Sep 29, 2019 9:48 AM

You’re on a very old OS X version with El Capitan (10.11).


If your Mac supports it, upgrade to Mojave (10.14). Back up, back up again, check your key apps, check that your printers and scanners have drivers available from the device vendors, and upgrade.


Proxy settings are a way to centralize web network traffic to a specific server. That’s a legitimate part of some networks, and can be a way for malware to collect unencrypted (HTTP) web network traffic in other networks.


FTP is not something you want to be using. It’s been removed from newer macOS, as it’s insecure.


Here’s some reading on Mac malware: Effective defenses against malware and other threats


Pretty much all of the Mac malware around is self-installed. We install it, and we authorize it for system access. Advertising and pop-ups and panic and fear and the rest of social engineering—conning us—is how this malware dreck typically gets installed. We install it. We’re not skeptical around “free” and “coupons” and “you’re infected with 3 viruses!” pop-ups.


Malware Bytes has probably the best reputation around the forum for add-on anti-malware apps, and many of us—myself included—use only the built-in anti-malware, and the built-in security.


Even the apparently-legitimate anti-malware packages have a habit of causing crashes, corruptions, and performance problems, and some well-known packages have themselves introduced security vulnerabilities on various systems. Mcafee tends to be fairly resource-intensive on Mac, based on performance problem reports around the forums.


Some of the “anti-malware” and “cleaners” and “malware removal tools” around are themselves straight up malware.


The Google and DDG search results for malware removal are an utter cesspool of sketchy removal apps and malware, too.


Far more important than anti-malware and other security software “talismans” is staying current, and Mojave (10.14) and next month Catalina (10.15) are current. Keeping your apps current too, as versions of Microsoft Office versions prior to 2016 have known exploits, for instance. Keeping backups with Time Machine or similar scheduled backup is important, too. Backups are your path to recovery from crashes, corruptions, loss, theft, and yes, from sufficiently-pernicious malware. Good passwords are important. Enabling whole-disk encryption. Not loading apps you didn’t go looking for.


Keeping your computer working and backed up is... well... work. Add-on anti-malware, not so much.


As for what’s (probably) installed here, download and run EtreCheck, and then open a new reply here and then press the button that looks like a printed page among the new-reply buttons, and that’ll open up a text input box that is big enough for to paste the hardware and software configuration report here. Among other details, that’ll indicate which model of Mac, and from that we can tell you exactly which macOS versions are supported. EtreCheck was written by a long-time forum member, and goes out of its way to avoid requiring admin privileges to run, and also tries to avoid including personally-identifying data in its report.

Similar questions

7 replies
Question marked as Top-ranking reply

Sep 29, 2019 9:48 AM in response to AZERTY18

You’re on a very old OS X version with El Capitan (10.11).


If your Mac supports it, upgrade to Mojave (10.14). Back up, back up again, check your key apps, check that your printers and scanners have drivers available from the device vendors, and upgrade.


Proxy settings are a way to centralize web network traffic to a specific server. That’s a legitimate part of some networks, and can be a way for malware to collect unencrypted (HTTP) web network traffic in other networks.


FTP is not something you want to be using. It’s been removed from newer macOS, as it’s insecure.


Here’s some reading on Mac malware: Effective defenses against malware and other threats


Pretty much all of the Mac malware around is self-installed. We install it, and we authorize it for system access. Advertising and pop-ups and panic and fear and the rest of social engineering—conning us—is how this malware dreck typically gets installed. We install it. We’re not skeptical around “free” and “coupons” and “you’re infected with 3 viruses!” pop-ups.


Malware Bytes has probably the best reputation around the forum for add-on anti-malware apps, and many of us—myself included—use only the built-in anti-malware, and the built-in security.


Even the apparently-legitimate anti-malware packages have a habit of causing crashes, corruptions, and performance problems, and some well-known packages have themselves introduced security vulnerabilities on various systems. Mcafee tends to be fairly resource-intensive on Mac, based on performance problem reports around the forums.


Some of the “anti-malware” and “cleaners” and “malware removal tools” around are themselves straight up malware.


The Google and DDG search results for malware removal are an utter cesspool of sketchy removal apps and malware, too.


Far more important than anti-malware and other security software “talismans” is staying current, and Mojave (10.14) and next month Catalina (10.15) are current. Keeping your apps current too, as versions of Microsoft Office versions prior to 2016 have known exploits, for instance. Keeping backups with Time Machine or similar scheduled backup is important, too. Backups are your path to recovery from crashes, corruptions, loss, theft, and yes, from sufficiently-pernicious malware. Good passwords are important. Enabling whole-disk encryption. Not loading apps you didn’t go looking for.


Keeping your computer working and backed up is... well... work. Add-on anti-malware, not so much.


As for what’s (probably) installed here, download and run EtreCheck, and then open a new reply here and then press the button that looks like a printed page among the new-reply buttons, and that’ll open up a text input box that is big enough for to paste the hardware and software configuration report here. Among other details, that’ll indicate which model of Mac, and from that we can tell you exactly which macOS versions are supported. EtreCheck was written by a long-time forum member, and goes out of its way to avoid requiring admin privileges to run, and also tries to avoid including personally-identifying data in its report.

Sep 29, 2019 7:37 AM in response to AZERTY18

I should add that I just checked the Advanced Network settings, and under the heading "Bypass proxy settings for these Hosts & Domains:" there was an entry beginning with a star period local and then I think there was a period and a string of numbers. I deleted this. Use Passive FTP Mode was checked, and I unchecked it. Was this the problem, or did I undo something that I should have left alone?

Sep 29, 2019 7:54 AM in response to macjack

I wonder if you can tell me about the "Bypass proxy settings for these Hosts & Domains" part of my inquiry... did I do the right thing to delete that thing and to uncheck Passive FTP Mode? I really don't know what these are... but I have the vague feeling that they allow another device/user to access to my screen/network connection. I am really out of my depth, here!

Sep 29, 2019 8:19 AM in response to macjack

Thank you for your reply! Can you confirm to me that this is a malware-specific issue? While I used the term myself, I am not at all fluent in the language of computer problems, and I don't know if I used the correct term. My husband has used MacGaffe (sp) in the past, and he thought I should download that... this is all quite confusing to me.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

malware redirecting websites

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.