safari won't launch

Question

Level 1

0 points

safari won't launch

I have a macpro tower 4.1 and every time I try to launch safari I get this window. What the heck is this and how do I get safari to work?

Safari quite unexpectedly while using the MScanMeteoPro.tmp plugin

Process: Safari [345]

Path: /Applications/Safari.app/Contents/MacOS/Safari

Identifier: com.apple.Safari

Version: 5.1.7 (6534.57.2)

Build Info: WebBrowser-75345702~2

Code Type: X86-64 (Native)

Parent Process: launchd [145]

PlugIn Path: /Users/kevinauyong/Library/Application Support/.MScanMeteoPro.tmp

PlugIn Identifier: .MScanMeteoPro.tmp

PlugIn Version: ??? (???)

Date/Time: 2013-02-16 17:51:02.471 -0800

OS Version: Mac OS X 10.6.8 (10K549)

Report Version: 6

Interval Since Last Report: 306642 sec

Crashes Since Last Report: 6

Per-App Crashes Since Last Report: 4

Anonymous UUID: 5DBBAB82-21E5-4079-A2C4-42A4A9AB7A57

Exception Type: EXC_ARITHMETIC (SIGFPE)

Exception Codes: EXC_I386_DIV (divide by zero)

Crashed Thread: 0 Dispatch queue: com.apple.main-thread

Thread 0 Crashed: Dispatch queue: com.apple.main-thread

0 .MScanMeteoPro.tmp 0x000000010007cc29 0x10007a000 + 11305

1 dyld 0x00007fff5fc0d510 ImageLoaderMachO::doModInitFunctions(ImageLoader:: LinkContext const&) + 228

2 dyld 0x00007fff5fc0bcfc ImageLoader::recursiveInitialization(ImageLoader:: LinkContext const&, unsigned int) + 236

3 dyld 0x00007fff5fc0bdb6 ImageLoader::runInitializers(ImageLoader::LinkCont ext const&) + 58

4 dyld 0x00007fff5fc08fcf dlopen + 573

5 libSystem.B.dylib 0x00007fff80b83e40 dlopen + 61

6 .libgmalloc.dylib 0x0000000100004bcc entry + 412

7 dyld 0x00007fff5fc0d510 ImageLoaderMachO::doModInitFunctions(ImageLoader:: LinkContext const&) + 228

8 dyld 0x00007fff5fc0bcfc ImageLoader::recursiveInitialization(ImageLoader:: LinkContext const&, unsigned int) + 236

9 dyld 0x00007fff5fc0bdb6 ImageLoader::runInitializers(ImageLoader::LinkCont ext const&) + 58

10 dyld 0x00007fff5fc020fb dyld::initializeMainExecutable() + 102

11 dyld 0x00007fff5fc06996 dyld::_main(macho_header const*, unsigned long, int, char const**, char const**, char const**) + 2993

12 dyld 0x00007fff5fc016de dyldbootstrap::start(macho_header const*, int, char const**, long) + 811

13 dyld 0x00007fff5fc01052 _dyld_start + 42

ther's more in the window

Mac Pro, iOS 4.1

Posted on Feb 16, 2013 6:11 PM

Reply

Answer 1

TildeBee

Level 7

31,917 points

Feb 16, 2013 7:07 PM in response to aslowdodge

This looks like the cause . . .

Your MScanMeteoPro . . .

/Users/kevinauyong/Library/Application Support/.MScanMeteoPro.tmp

If you don't need it, I'd uninstall or delete it. Check with their site.

Reply

Answer 2

aslowdodge Author

Level 1

0 points

Feb 16, 2013 7:58 PM in response to TildeBee

I saw that but can't find it anywhere. I followed the route and got to Application support but .MScanMeteoPro.tmp is not listed anywhere. I did a search with spotlight and nothing comes up.

Reply

Answer 3

TildeBee

Level 7

31,917 points

Feb 16, 2013 9:29 PM in response to aslowdodge

Ah . . . missed that. It's invisible! See the period right before the name of the file?

For right now,

Can you find any other MScan Meteo files?

Use the search method, OK.

Click on the desktop, then press the Command key along with the letter " f " key.

In the resulting pane, type in Mscan Meteo Pro.

Is that thing even Mac compatible ?

Reply

Answer 4

andyBall_uk

Level 7

20,516 points

Feb 17, 2013 3:14 AM in response to TildeBee

Hi ~Bee

invisible tmp file in ~/Library/Application Support/ sounds like Flashback

About Flashback malware

running software update should find the java update which ought to remove it & notify the user, after which change all passwords & check online accounts etc

Reply

Answer 5

aslowdodge Author

Level 1

0 points

Feb 17, 2013 3:42 AM in response to andyBall_uk

Ok I tried the desktop search-nada

I updated java and all software in the update from Apple which afterwards should notify me if it found Flashback, no notice so don't think Flashback was there.

Safari still doesn't launch and give me th esame message.

From what I can find- it might be some kind of windows thing-on my Mac though?

Reply

Answer 6

andyBall_uk

Level 7

20,516 points

Feb 17, 2013 4:21 AM in response to aslowdodge

I don't suppose it's a windows thing - you might try the manual removal detailed at http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml depending on your skill/confidence. They have a removal app there too.

take it a step at a time - begin with defaults read /Applications/Safari.app/Contents/Info LSEnvironment & see what you find out.

Reply

Answer 7

andyBall_uk

Level 7

20,516 points

Feb 17, 2013 4:31 AM in response to andyBall_uk

http://www.securelist.com/en/analysis/204792227/The_anatomy_of_Flashfake_Part_1

shows "...Another auxiliary component will be installed to the user folder $HOME/Library/Application Support/ under a random name which starts with a dot and has a .tmp extension."

so likely you'll find that defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES gives a result

Reply

Answer 8

TildeBee

Level 7

31,917 points

Feb 17, 2013 7:20 AM in response to andyBall_uk

andy --

Thanks so much. It's been too long since I last used 10.6.8.

🙂

Reply