I cannot stop pop-up ads and adware in Safari. When I open a new tap it is locked until I click somewhere twice, then two new tabs with publicity and viruses detected by safari emerge

I cannot stop pop-up ads and adware in Safari. When I open a new tap it is locked until I click somewhere twice, then two new tabs with publicity and viruses detected by safari emerge

I tried following the instructions in the support page, in Apple but it didn't work.

MacBook Pro (13-inch Mid 2009), OS X 10.10.5 - Safari 9.0.3

Posted on Feb 15, 2016 4:20 AM

Reply
5 replies

Feb 18, 2016 6:14 PM in response to Juanguillermo1984

You may have installed ad-injection malware ("adware").

Don't use any kind of "anti-virus" or "anti-malware" product on a Mac. There is never a need for it, and relying on it for protection makes you more vulnerable to attack, not less.

Back up all data first.

Some of the most common types of adware can be removed by following Apple's instructions. But before you follow those instructions, you can attempt an automatic removal.

If you're not already running the latest version of OS X ("El Capitan"), updating or upgrading in the App Store may cause the adware to be removed automatically. If you're already running the latest version of El Capitan, you can nevertheless download the current updater from the Apple Support Downloads page and run it. Again, some kinds of malware will be removed—not all. There is no such thing as automatic removal of all possible malware, either by OS X or by third-party software. That's why you can't rely on software to protect you.

If the malware is removed in your case, you'll still need to make changes to the way you use the computer to protect yourself from further attacks. Ask if you need guidance.

If the malware is not removed automatically, and you can't remove it yourself by following Apple's instructions, see below.

This easy procedure will detect any kind of adware that I know of. Deactivating it is a separate, and even easier, procedure.

Some legitimate software is ad-supported and may display ads in its own windows or in a web browser while it's running. That's not malware and it may not show up. Also, some websites carry intrusive popup ads that may be mistaken for adware.

If none of your web browsers is working well enough to carry out these instructions, restart the computer in safe mode. That will disable the malware temporarily.

Step 1

Please triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/LaunchAgents

In the Finder, select

Go Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. Press return. Either a folder named "LaunchAgents" will open, or you'll get a notice that the folder can't be found. If the folder isn't found, go to the next step.

If the folder does open, press the key combination command-2 to select list view, if it's not already selected. Please don't skip this step.

There should be a column in the Finder window headed Date Modified. Click that heading twice to sort the contents by date with the newest at the top. If necessary, enlarge the window so that all of the contents are showing.

Follow the instructions in this support article under the heading "Take a screenshot of a window." An image file with a name beginning in "Screen Shot" should be saved to the Desktop. Open the screenshot and make sure it's readable. If not, capture a smaller part of the screen showing only what needs to be shown.

Start a reply to this message. Drag the image file into the editing window to upload it. You can also include text in the reply.

Leave the folder open for now.

Step 2

Do as in Step 1 with this line:

/Library/LaunchAgents

The folder that may open will have the same name, but is not the same, as the one in Step 1. As in that step, the folder may not exist.

Step 3

Repeat with this line:

/Library/LaunchDaemons

This time the folder will be named "LaunchDaemons."

Step 4

Open the Safari preferences window and select the Extensions tab. If any extensions are listed, post a screenshot. If there are no extensions, or if you can't launch Safari, skip this step.

Step 5

If you use the Firefox or Chrome browser, open its extension list and do as in Step 4.

Feb 18, 2016 6:49 PM in response to Juanguillermo1984

Thank you allfor your advices. First I tried restarting Safari with Shift but I didn't work. Then I opened Firefox because it was working normally, and I tried in this page ( www.etrecheck.com )

User uploaded file

I selected Removal Guide, then...

User uploaded file

There I downloaded MalwareByte Anti-Malware

When I started this is what i found:


User uploaded file

After that, I restarted My computer, but before they gave me this advice:

User uploaded file

Now my computer is working again...


Linc DavisI did what you said, but I did it after ckuanadvice, this is what I found in the folders that you said... I'm not sure if I have to do something else.

User uploaded fileUser uploaded fileUser uploaded fileUser uploaded file

I saw in other advice in other page of Apple Support Communities and they said to download Sophos Antivirus... It couldn't fix my problem and I removed it according to what Link Davis said.....


Thank you very much for your help... I hope this is usefull for somebody else.

Juan.

Apr 26, 2016 2:19 PM in response to Linc Davis

As a new angle in this discussion, I just downloaded Mountain Lion and immediately on opening safari was plagued with adware - after never having experienced any problem of this nature with snow leopard. I would happily have continued using snow leopard but for the need to update my OS to access services such as the latest iTunes, iPod touch etc. I had to force quit a couple of times as the - what I assume was - adware took over and froze the browser before I could do anything. It eludes me how this could happen on downloading a new OS and scarcely having time to browse on Safari. I was simply checking whether updates to other apps were needed. I also found a lot of suspicious-looking icons on my desktop which I promptly trashed without opening. I was afraid of complications like this which is why I put off updating as long as possible. However, any insights on how this could happen with a pristine installation would be appreciated.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

I cannot stop pop-up ads and adware in Safari. When I open a new tap it is locked until I click somewhere twice, then two new tabs with publicity and viruses detected by safari emerge

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.