Safari hijacked by mackeeper.zeobit - really, this is TOO MUCH

Question

Level 1

8 points

Safari hijacked by mackeeper.zeobit - really, this is TOO MUCH

I clicked on a news article about a pastor who died recently in Sacramento, and a malware popup for mackeeper.zeobit.com urged me to clean my computer. The malware shut all the other Safari windows. The pop-up had an OK button, but NO OTHER WAY to remove the pop-up or close Safari. The normal window controls were missing. All Safari Menu options were greyed out. I tried using the Apple Menu to Shut Down, but that failed as Safari refused to Quit.

As Safari would not Force Quit (greyed out) and would not Quit when I used the Apple menu to Shut Down, I powered off using the Power Button ...several times. No good - still had the non-closeable window and Menu options to Force Quit Safari or Reset Safari were greyed out.

I spent a long time using Chrome to read a lengthly Apple discussion, which ended May 28th. Not really up-to-date and no practical help. Finally, for no particular reason except for the passage of much time (30+ minutes?); when I next checked the Safari menu, the Reset Safari and Force Quit Safari options were no longer greyed out.

So I Reset Safari and Force Quit Safari for good measure. Now I'm afraid to reopen Safari. For now, I'm stuck using Chrome; and I don't care to use the Google product as it is basically spyware, IMO.

So, two questions:

1. Is there something I can do at the basic user level to prevent such interference that doesn't also cripple browser performance?

2. Is Apple going to do anything about getting these Mackeeper and MacDefender creeps from invading their browser? (Oh, I know you don't know... just venting... sigh... I mean, this stuff's been happening to people for many months, my software's up to date, i guess Apple isn't too worried about us little users getting freaked.)

~~~Teelbee

Mac Pro, Mac OS X (10.7.4)

Posted on Jun 24, 2012 8:30 PM

Reply

Answer 1

Klaus1

Level 9

52,749 points

Jun 25, 2012 1:59 AM in response to dwgord

Many users will see references to an application called MacKeeper on various web sites and via pop-ups on their browser. Not only is it expensive for what it purports to do (freeware applications that do the same or more are readily available), it can sometimes install itself without the user realising it, and it can be very tricky to get rid of.

MacKeeper can be regarded as highly invasive malware* that can de-stablize your operating system. It is unethically marketed by a company called Zeobit and a rip-off.

Further opinion on it and how to uninstall MacKeeper malware can be read here:

http://applehelpwriter.com/2011/09/21/how-to-uninstall-mackeeper-malware/

Do NOT download or use the ‘MacKeeper uninstaller’ from the Zeobit site, as this will cause even more damage to your operating system.

This is also worth reading:

http://www.reedcorner.net/news.php/?p=245

Equally phoney was iAntivirus:

http://www.reedcorner.net/news.php/?p=341

until it was purchased recently (May 2012) by Symantic (makers of Norton anti-virus which does not work well with Apple OS X). Even after having tinkered with it, iAntivirus still fails to do the job properly and cannot be recommended.

There are no viruses that can affect Apple OS X and there is therefore no reason to run anti-virus software on a Mac, but a Mac, like all computers, can transmit viruses and malware to other users particularly those running Windows. Note, however, that Trojans are another matter and can represent a genuine threat, an example of which was the recent 'Flashback Trojan' which you can read more about here:

https://discussions.apple.com/docs/DOC-3261

For further information you may find this User Tip on Viruses, Trojan Detection and Removal, as well as general Internet Security and Privacy, useful:

https://discussions.apple.com/docs/DOC-2435

The User Tip (which you are welcome to print out and retain for future reference) seeks to offer some guidance on the main security threats and how to avoid them.

* The expression ‘malware’ is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software.

Reply

Answer 2

dwgord Author

Level 1

8 points

Jun 25, 2012 4:59 PM in response to Klaus1

I knew from the first moment not to download it or even click the OK button on the pop-up. In the course of trying to find a way to get rid of the pop-up, I read Mr. Reed's article and many discussions in the Apple community and elsewhere. I will keep the links for future reference.

Still, I do not have an answer on how to make Safari functional again.

I did not install MacKeeper; I did not even click it's pop-up ad window.

However, it's pop-up has taken over Safari. I cannot use Safari at all. The only Safari window that will display is the MacKeeper pop-up. I could Reset and Quit Safari, but when I reopen it; again, the only window it will display is the pop-up.

Am open to any suggestions to effect a rescue of Safari from the MacKeeper.zeobit pop-up?

Reply

Answer 3

Jun 25, 2012 7:03 PM in response to dwgord

I had same issue.

Shutdown computer. Disconnect internet connections including wireless.

Restart computer.

Start Safari. Safari should open stating it is looking for network connection.

Click Empty Cache

Click Reset Safari.

Regards

Reply

Answer 4

TildeBee

Level 7

31,917 points

Jun 25, 2012 7:31 PM in response to dwgord

dwgord --

Did you follow Klaus's suggestions?

Reply

Answer 5

Linc Davis

Level 10

209,535 points

Jun 25, 2012 7:45 PM in response to dwgord

Quit Safari (by force if necessary.) Relaunch it by holding down the shift key and clicking its icon in the Dock. That will stop the page from reloading automatically. Select Safari ▹ Preferences ▹ Privacy ▹ Remove all website data to get rid of any cookies or other data left by the server. Open your Downloads folder and delete anything you don't recognize.

Reply

Answer 6

dwgord Author

Level 1

8 points

Jun 26, 2012 5:37 PM in response to Linc Davis

Thank you, Linc Davis!

After spending much time reading various discussions, which offered nice tips that were either not available to me (menu items greyed out) or not applicable (since the application was never installed), your directions worked.

Although initially (for 30+ minutes) I could not Force Quit even after powering off; once that option returned, I was yet unable to shake the pop-up when I next opened Safari. But, at least I could Quit or Force Quit when that happened.

I took your advice Remove All Website Data and to delete any unrecognized files in the Downloads folder, going back a a couple months or so. I presume that's enough.

My deepest thanks, Teelbee

Reply

Answer 7

Feb 9, 2013 11:03 AM in response to dwgord

Watch out for MacKeeper. It is scamware posing as a legitimate app.

MacKeeper hijacked my Safari browser after clicking a link to a kayak race site. Here's an anotated screen shot of what popped up:

Reply

Answer 8

Feb 16, 2013 3:27 PM in response to dwgord

I am getting the same problem but not even for any specific site: it can be my local newspaper, Huffington Post ... and doesn't happen right away. I can be in the middle of reading a story and the screen pops up and hijacks Safari. Here's a screenshot.

Reply

Answer 9

Feb 16, 2013 3:30 PM in response to Rolf Asphaug

PS: I already removed all website data in response to a suggestion earlier on this thread. Didn't help at all. Almost immediately after doing so I got the MacKeeper screen back up again, hijacking Safari.

This only happens in Safari, not Firefox, by the way. I guess I will start using Firefox permanently until Safari can get a restraining order or something against this unscrupulous, low-life company.

And no, I do NOT have that malware, crudware piece of garbage MacKeeper installed on my Mac. Never have, never will. What a bunch of sleazeballs.

Reply

Answer 10

Oct 15, 2013 6:42 AM in response to dwgord

What worked for me:

1. Hover mouse overdock area for a few seconds until dock of icons appears. Hold down mouse on Chrome icon and select "New Window" from the pop-up menu. This should open a new tab, restoring the top area of your browser.

2. If you still don't see the Chrome controls at the very top of your screen (apple icon, Chrome, File, Edit, View, etc), hover your mouse over the top of the screen for a few seconds until it appears. Click Chrome > Preferences.

3. In the Preferences page, under Settings (left hand column navigation) under Startup, click on "Open a specific page or set of pages" and then click on "Set Pages" and make google.com your opening page.

4. In Preferences under History, Click "Clear Browsing Data" and go back as far as you remember things working fine (e.g. 1 week). I checked off the following: Clear Browsing History, Delete cookies, Empty the Cache, Clear data from hosted apps, Deauthorize content licenses.

5. Quit Chrome (Chrome > Quit Google Chrome)

5. Restart Chrome

Reply