Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

24Upgradecheck

I have no idea how I picked this up. It only pops up on archived threads on TheFourChannel, no where else.


Where might I have gotten this and how do I remove it? Of course I don't download "Flash", I just close the page. It's popped up three times the last week.


Safari 9.0.2

OS X.11.2


Extensions:

AdBlock Plus

Ghostery

Click2Flash (downloaded outside of the extensions page, it used to be on there, but not anymore. There's no flash extension on the extensions page now.)

Pin It Button



User uploaded file

Posted on Feb 9, 2016 10:24 AM

Reply
9 replies

Feb 9, 2016 10:32 AM in response to pirhan

1. Force Quit Safari.

Force Quit .


Press command + option + esc keys together at the same time. Wait.

When Force Quit window appears, select Safari if not already.

Press Force Quit button at the bottom of the window. Wait.

Safari will quit.


2. Relaunch Safari holding the shift key down.


This will launch Safari in Safe Mode.

The scam page that crashed Safari will not return.

Feb 9, 2016 10:39 AM in response to dominic23

I've gone a head and done that, thank you.


The scam page didn't actually crash Safari. I clicked to close the page and then yes that I wanted to leave the page.


Would I have gotten this from downloading Click2Flash from their site, and not the Apple Extensions page? I don't know of any other way of stopping flash from playing automatically.

Feb 19, 2016 10:10 AM in response to pirhan

4chan is the toilet of the Internet, and in my honest opinion, the site should be avoided at all costs. This merely gives you another reason to do so. I'm not sure why it's only popping up on that particular site, but if you'd like to, go ahead and go to http://www.etresoft.com/etrecheck — download and run EtreCheck, copying the status report to paste here.

Feb 19, 2016 10:22 AM in response to pinkstones

It says I have more extensions than I actually do. I only have Ad Block, Ghostery, ClickToFlash and Pin It.


EtreCheck version: 2.9.4 (254)

Report generated 2016-02-19 10:18:37

Download EtreCheck from http://etrecheck.com

Runtime 2:22

Performance: Excellent


Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.


Problem: Other problem


Hardware Information:

MacBook Pro (13-inch, Mid 2012)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro9,2

1 2.5 GHz Intel Core i5 CPU: 2-core

4 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

2 GB DDR3 1600 MHz ok

BANK 1/DIMM0

2 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en1: 802.11 a/b/g/n

Battery: Health = Normal - Cycle count = 335


Video Information:

Intel HD Graphics 4000

Color LCD 1280 x 800


System Software:

OS X El Capitan 10.11.3 (15D21) - Time since boot: about 4 days


Disk Information:

APPLE HDD HTS545050A7E362 disk0 : (500.11 GB) (Rotational)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

puter (disk1) / : 498.88 GB (429.53 GB free)

Core Storage: disk0s2 499.25 GB Online


HL-DT-ST DVDRW GS31N ()


USB Information:

Apple Inc. FaceTime HD Camera (Built-in)

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Computer, Inc. IR Receiver

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Logitech USB Optical Mouse


Thunderbolt Information:

Apple Inc. thunderbolt_bus


Gatekeeper:

Mac App Store and identified developers


Kernel Extensions:

/Library/Extensions

[loaded] at.obdev.nke.LittleSnitch (4356 - SDK 10.8 - 2016-02-10) [Support]


System Launch Agents:

[killed] com.apple.CallHistoryPluginHelper.plist

[killed] com.apple.CallHistorySyncHelper.plist

[killed] com.apple.nsurlsessiond.plist

[killed] com.apple.rcd.plist

[loaded] 157 Apple tasks

[running] 75 Apple tasks

4 processes killed due to insufficient RAM


System Launch Daemons:

[killed] com.apple.periodic-weekly.plist

[killed] com.apple.wdhelper.plist

[loaded] 199 Apple tasks

[running] 86 Apple tasks

2 processes killed due to insufficient RAM


Launch Agents:

[running] at.obdev.LittleSnitchUIAgent.plist (2016-01-11) [Support]


Launch Daemons:

[running] at.obdev.littlesnitchd.plist (2016-01-11) [Support]

[loaded] com.adobe.fpsaud.plist (2016-01-11) [Support]


User Login Items:

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app) (2016-01-11)

Mail Application (/Applications/Mail.app) (2016-02-10)


Other Apps:

[running] com.apple.xpc.launchd.oneshot.0x10000002.Little Snitch Network Monitor (2015-11-18)

[running] com.apple.xpc.launchd.oneshot.0x1000000b.EtreCheck (2016-02-14)

[running] com.skype.skype.47712 (2014-08-18)


Internet Plug-ins:

FlashPlayer-10.6: 20.0.0.286 - SDK 10.6 (2016-01-21) [Support]

QuickTime Plugin: 7.7.3 (2016-02-10)

Flash Player: 20.0.0.286 - SDK 10.6 (2016-01-21) Outdated! Update

Default Browser: 601 - SDK 10.11 (2016-02-10)


Safari Extensions:

ClickToFlash (2016-01-09)

Ghostery (2016-01-10)

Ghostery (2016-01-11)

Pin It Button (2016-01-27)

ClickToFlash (2016-01-15)

Facebook Disconnect (2016-01-09)

AdBlock (2016-01-07)

Adblock Plus (2016-01-22)


3rd Party Preference Panes:

Flash Player (2016-01-11) [Support]


Time Machine:

Time Machine not configured!


Top Processes by CPU:

22% mdworker(10)

6% WindowServer

6% com.apple.WebKit.WebContent(6)

2% kernel_task

2% Safari


Top Processes by Memory:

713 MB com.apple.WebKit.WebContent(6)

553 MB kernel_task

291 MB Safari

152 MB mdworker(10)

90 MB mds_stores


Virtual Memory Information:

80 MB Free RAM

3.92 GB Used RAM (870 MB Cached)

134 MB Swap Used

Feb 19, 2016 10:28 AM in response to pirhan

In my experience with EtreCheck, it would not say you have something installed that you don't. So, it says you have two ad-blocking extensions for Safari, which you only need one of. It also shows you have Ghostery installed twice, which I'm not even sure how you managed that. Other than that, I don't see any problematic or troubling about your system. Everything looks fine.


If what you say is true, and you don't have all those extensions installed, just avoid 4chan, because you don't have any malware or adware on your system causing the pop-ups to spawn.

Feb 19, 2016 10:40 AM in response to pinkstones

This is what I see in the preferences for my extensions. If I did have extras, where would I find them and how would I delete?


I prefer not to avoid 4Chan as I find a lot of the boards really helpful (/fit/, /diy/, /p/, /o/, /out/, /r9k/ for collecting rare pepes, etc.) I just find it really odd that I get these pop ups only when I look at an archived thread on the site. Since EtreCheck says all is okay, if I continue seeing those pages, I can just close them like I've been doing?


User uploaded file

24Upgradecheck

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.