Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

getting pop up web pages out of nowhere...never have before

My Imac opens web sites I didn't ask for now.

some are just black some are ads for IMAC cleaning. Imac never used to do this.

I am not sure why

Imac, Mac OS X (10.6.6)

Posted on Apr 19, 2014 7:15 AM

Reply
6 replies

Apr 19, 2014 8:03 AM in response to airgrandpo

https://discussions.apple.com/docs/DOC-3036


You should remove MacKeeper using the above link if needed.


Are you using Safari, and if so, what version?


If not, what is your web browser? Is there some reason you have not installed 10.6.8? That's a free update from here:


http://support.apple.com/kb/dl1399


Which I would install after backing up your data:


https://discussions.apple.com/docs/DOC-1992

Apr 19, 2014 12:42 PM in response to airgrandpo

You probably visited an advertiser that plugged a cookie into your system to let them know you were interested in their advertisers. Go into your preferences here under Safari menu -> Preferences > Privacy and select Details:

User uploaded file

Delete any cookie or file from a website that looks like it is from an advertiser. Cookies should only be kept for websites you have passwords. Everything else is just spam.

Apr 19, 2014 6:08 PM in response to airgrandpo

The update alerts are fake, and are intended to mislead you into installing malware and/or to steal your identity.

You might get the alerts when visiting a website that has been hacked. Don't visit the site again. If applicable, notify the site administrator of the problem, but don't send email to an unknown party.

If you get the alerts when visiting well-known websites such as Google, YouTube, or Facebook, then they're the result of an attack on your router that has caused you to get false results from looking up the addresses of Internet servers. Requests sent to those sites are redirected to a server controlled by the attacker.

The router's documentation should tell you how to reset it to the factory default state. Usually there's a pinhole switch somewhere in the back. It may be labeled "RESET." Insert a paper clip and press the button inside for perhaps 15 seconds, or as long as the instructions specify.

Then go through the initial setup procedure. I can't be specific, because it's different for every model. The key points are these:

1. Don't allow the router to be administered from the WAN (Internet) port, if it has that option.

2. Set a strong password to protect the router's settings: at least ten random upper- and lower-case letters and digits. Don't use the default password or any other that could be guessed.

3. If the router is wireless, or if you have a wireless access point on the network, use "WPA 2 Personal" security and set another strong password to protect the network. If the router or access point doesn't support WPA 2, it's obsolete and must be replaced.

During the time the router was compromised, you were redirected to bogus websites. If you ever connected to a secure site and got a warning from your browser that the identity of the server could not be verified, and you dismissed that warning in order to log in, assume that your credentials for the site have been stolen and that the attacker has control of the account. This warning also applies to all websites on which you saw the fake update alerts.

If you downloaded and installed what you thought was a software update, ask for instructions.

getting pop up web pages out of nowhere...never have before

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.