Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Malware Problem

Hi,

I am using Macbook Pro 15 mid 2014 model. I am using OSX from past few weeks.


Now whenever I open safari instead of my homepage which is currently set to www.google.com, it opens ************* {Don't open this link, I read its a malware}. I have tried to remove this using Malwarebytes software {it's a free software} but all in vein. Tried few other methods like clearing history, cookies data etc., but nothing seems to work.


If anyone knows how to fix it, please let me know.


Cheers. 😀


<Link Edited by Host>

MacBook Pro with Retina display, Mac OS X (10.7), null

Posted on Jan 16, 2016 1:50 AM

Reply
5 replies

Jan 16, 2016 9:27 AM in response to Bhagat.Atul

First, never use any kind of "anti-virus" or "anti-malware" software on a Mac. That's how you cause problems, not how you solve them.

Please read this whole message before doing anything.

This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.

Step 1

The purpose of this step is to determine whether the problem is localized to your user account.

Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”

While logged in as Guest, you won’t have access to any of your documents or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this behavior; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.

Test while logged in as Guest. Same problem?

After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.

*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.

Step 2

The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.

Please take this step regardless of the results of Step 1.

Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.

Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.

The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

Test while in safe mode. Same problem?

After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of Steps 1 and 2.

Feb 5, 2016 12:41 AM in response to Linc Davis

Thanks for your time, Davis.


I have tried both the steps and safari has stopped working abnormally.
Guest user was working fine and actually 'twas working much better.
Safe mode was also working good. No sign of the malware. This lead to work safari normally, don't know how!!


I have one more question - is this a temporary fix or a permanent fix? if it is a temporary fix then how to get rid of it, permanently?


Best,

Malware Problem

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.