You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Suspicious Activity Detected - Pop Up Window

I got a pop-up window in Safari about "Suspicious Activity Detected" and that my browser might have been hijacked. It then says I should contact the number listed. Every time I clicked okay, the window keeps returning. I ended up doing a force quit on Safari. I am assuming this is one of those annoying spam deals, no? I am just wondering based on this attached screen shot if that is the case and if anyone else has seen the same window before.


User uploaded file

iMac, OS X Mountain Lion (10.8.5)

Posted on Sep 2, 2014 7:18 PM

Reply
Question marked as Top-ranking reply

Posted on Sep 2, 2014 8:26 PM

It's not malware. It's a JavaScript scam that only affects your web browser, and only temporarily.

1. Some of those scam pages can be dismissed very easily. Press command-W to close the tab or window. A huge box will pop up. Press the return key and both the box and the page will close. If that doesn't happen, continue.

2. From the Safari menu bar, select

Safari ▹ Preferences... ▹ Security

and uncheck the box marked Enable JavaScript. Leave the preferences dialog open.

Close the malicious window or tab.

Re-enable JavaScript and close the preferences dialog.

3. If the Preferences menu item is grayed out, quit Safari. Force quit if necessary. Relaunch it by holding down the shift key and clicking its icon in the Dock. From the menu bar, select

Safari Preferences... Privacy Remove All Website Data

to get rid of any cookies or other data left by the server. Open your Downloads folder and delete anything you don't recognize.

41 replies

May 25, 2015 1:30 PM in response to sdpark10

sdpark10 wrote:


I called AppleCare and they had me download the Adware medic software, run it and it identified 4 entries in my system library as ads causing the problem.

Yes, that is a recent development and my previous explanation from last year is no longer true. It can be caused by either javascript on the web site or scam adware.


That's a good example of why one should never rely on old postings for the latest word. Rather use something current or start a new discussion.

Jun 22, 2015 10:50 AM in response to Carlton Chin

Carlton

I found your response in a chain about killing a rogue safari window and found it very helpful. I tried it on my macbook and it worked great! But the reason I was trying to solve this problem was for the same problem on my husbands ipad. I am not very familiar with the ipad, but is there a way to do the same thing on an ipad? I hate to delete his whole browser history.

Thank you,

Toni

Jun 25, 2015 9:01 AM in response to MadMacs0

So I'm pretty sure whatever is on my iMac is still there even after everything I have read in the threads. I have deleted the plist file and the com.apple file. I have to force quit almost everyday on safari and I cannot create a new thread. For some reason my computer is not letting me submit one on apple.com. If I actually have a virus on my iMac, is it a good sign to delete everything and restore to factory default settings?

Aug 6, 2015 1:12 AM in response to heezagood1

This is exactly what happened tonight when I was using my friend's MacBook. Same exact message, and I called the guy & went through steps to "fix the problem" including giving them my friend's name, email & cell number! (she was sitting right next to me). I stopped everything when the guy said there would be a charge of $299 to fix this. What happened with your incident? Did you fix it? Did they do anything with your daughter's info or access into her computer? HELP! 😟

Aug 6, 2015 1:19 AM in response to MadMacs0

please see my response here to heezagood1's post. Can you tell me the latest possible fix for this thing? I don't have a lot of money at all to fix my friend's MacBook. I'm really hoping there's a solution. She only has Safari as a browser and it wouldn't let us do anything on it cause the "Warning" with the phone number kept popping up even after clicking "OK" thus forcing me to call their number because I didn't know any better. My friend is traveling to New York on vacation tomorrow, but when she returns in 2 weeks, I will have deal with this. Thank you.

Aug 6, 2015 2:11 AM in response to michelle castro

Best advise for fixing Safari is still A Browser Pop-up has Taken Over Safari.


If that doesn't completely fix it then get rid of any Adware using the successor to AdwareMedic called MalwareBytes Anti-Malware for Mac should take care of that.


If you allowed the scam tech support person to access her computer, then they could have done almost anything they wanted to it.

Sep 15, 2015 2:28 AM in response to heezagood1

I got tricked yesterday too, these guys are very professional - scary! Virus warning pop ups (adware), claiming immediate action to prevent data loss and system damage. Call toll free on 0800 number. They used YODA CARE (yodacare.com) as the agent to handle the matter after taking payment and get me to e-sign a document. Yoda care claim to be an official company, my investigation is still pending....


***They convince you to give them remote access to your computer then justify the virus by opening system operations and fooling you into believing 'sleeping' programmes are due to virus "...it should be running" he said "...see all your programmes are down". Also they were able to show me via remote control that my Apple Mac Care plan had expired and would need immediate payment of new Apple Care Plan before work could be down to 'remove' the viruses.


NOTE - All of which is rubbish. 1 - Official Apple care cost for 1, 2, 3 year plans are cheaper. 2 Apple Care tech will NEVER remotely control your computer, only control the pointer so you can click the right buttons! 3 - Apple doesn't get viruses, just adware which is popup's which trick you and then guide you to take action and allow them in.

Sep 15, 2015 2:34 AM in response to Carlton Chin

I got tricked yesterday too, these guys are very professional - scary! Virus warning pop ups (adware), claiming immediate action to prevent data loss and system damage. Call toll free on 0800 number. They used YODA CARE (yodacare.com) as the agent to handle the matter after taking payment and get me to e-sign a document. Yoda care claim to be an official company, my investigation is still pending....


***They convince you to give them remote access to your computer then justify the virus by opening system operations and fooling you into believing 'sleeping' programmes are due to virus "...it should be running" he said "...see all your programmes are down". Also they were able to show me via remote control that my Apple Mac Care plan had expired and would need immediate payment of new Apple Care Plan before work could be down to 'remove' the viruses.


NOTE - All of which is rubbish. 1 - Official Apple care cost for 1, 2, 3 year plans are cheaper. 2 Apple Care tech will NEVER remotely control your computer, only control the pointer so you can click the right buttons! 3 - Apple doesn't get viruses, just adware which is popup's which trick you and then guide you to take action and allow them in.


ACTION - Contact Bank to report fraud, keep any screens shots, search History and better still an official Apple Tech's report following there remote assistance (controls pointer, NOT able to click and move freely through your computer!)

Sep 15, 2015 8:15 PM in response to Neil SA

Just so you know....AppleCare has only one contract, which for everything except a Mac or Apple display extends your warranty period for one year past the original 1 year warranty (so, provides you with a 2-year warranty on an iPhone, iPad, Apple Watch, iPod, and Apple TV). For a Mac or Apple display, it extends that warranty period to 3 years.


The 1 year warranty on your Apple products is not AppleCare, it is the one year warranty that comes with every Apple Product.


Cheers,


GB

Suspicious Activity Detected - Pop Up Window

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.