Malware removal from Safari & Chrome Browsers

Can anyone share with me how to remove this annoying malware from my Safari browser? It frequently blasts me with security breach pop ups that i can't close without shutting down my browser. It doesn't affect Mozilla Firefox, fortunately. I did have to remove Google Chrome, as it got infected as well.

iMac (27-inch, Late 2012), OS X Yosemite (10.10.3)

Posted on May 21, 2015 8:24 PM

Reply
2 replies

May 21, 2015 9:10 PM in response to Jaypple

You may have installed one or more of the common types of ad-injection malware. Follow the instructions on this Apple Support page to remove it. It's been reported that some variants of the "VSearch" malware block access to the page. If that happens, start in safe mode by holding down the shift key at the startup chime, then try again.

Back up all data before making any changes.

One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.

If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, ask for further instructions.

Make sure you don't repeat the mistake that led you to install the malware. It may have come from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.

Malware is also found on websites that traffic in pirated content such as video. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.

In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.

Still in System Preferences, open the App Store or Software Update pane and check the box marked

Install system data files and security updates (OS X 10.10 or later)

or

Download updates automatically (OS X 10.9 or earlier)

if it's not already checked.

May 21, 2015 8:29 PM in response to Jaypple

First, I would try installing ScamZapper. Its Safari extension is specifically designed to prevent those fake "security" pop-ups from loading. For any remaining pop-ups, you can run the ScamZapper application again, and choose "Troubleshoot Pop-up." If the problem persists after that, there could be adware that is triggering the pop-ups, but that doesn't seem likely if only Safari is affected.


(Note that I am affiliated with that site, and some pages contain ads).

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Malware removal from Safari & Chrome Browsers

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.