Virus on 'safari', can't get rid of it

No you don't, there are no viruses for Macs.

Download this (etrecheck) and run it, post the report here so we can see what is on your Mac

You may have installed ad-injection malware ("adware").

Don't use any kind of "anti-virus" or "anti-malware" product on a Mac. There is never a need for it, and relying on it for protection makes you more vulnerable to attack, not less.

Some of the most common types of adware can be removed by following Apple's instructions.

If you're not already running the latest version of OS X ("El Capitan"), updating or upgrading in the App Store may cause the adware to be removed automatically. Back up all data before taking that step. If you're already running the latest version of El Capitan, you can nevertheless download the current updater from the Apple Support Downloads page and run it. Again, some kinds of malware will be removed. That may be all you need to do as far as removal is concerned, but you'll still need to make changes to the way you use the computer to protect yourself from further attacks.

If the above steps don't work for you, see below.

This easy procedure will detect any kind of adware that I know of. Deactivating it is a separate, and even easier, procedure.

Some legitimate software is ad-supported and may display ads in its own windows or in a web browser while it's running. That's not malware and it may not show up. Also, some websites carry intrusive popup ads that may be mistaken for adware.

If none of your web browsers is working well enough to carry out these instructions, restart the computer in safe mode. That will disable the malware temporarily.

Step 1

Please triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/LaunchAgents

In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. Press return. Either a folder named "LaunchAgents" will open, or you'll get a notice that the folder can't be found. If the folder isn't found, go to the next step.

If the folder does open, press the key combination command-2 to select list view, if it's not already selected. Please don't skip this step.

There should be a column in the Finder window headed Date Modified. Click that heading twice to sort the contents by date with the newest at the top. If necessary, enlarge the window so that all of the contents are showing.

Follow the instructions in this support article under the heading "Take a screenshot of a window." An image file with a name beginning in "Screen Shot" should be saved to the Desktop. Open the screenshot and make sure it's readable. If not, capture a smaller part of the screen showing only what needs to be shown.

Start a reply to this message. Drag the image file into the editing window to upload it. You can also include text in the reply.

Leave the folder open for now.

Step 2

Do as in Step 1 with this line:

/Library/LaunchAgents

The folder that may open will have the same name, but is not the same, as the one in Step 1. As in that step, the folder may not exist.

Step 3

Repeat with this line:

/Library/LaunchDaemons

This time the folder will be named "LaunchDaemons."

Step 4

Open the Safari preferences window and select the Extensions tab. If any extensions are listed, post a screenshot. If there are no extensions, or if you can't launch Safari, skip this step.

Step 5

If you use the Firefox or Chrome browser, open its extension list and do as in Step 4.

Uninstall MacKeeper. In all likelihood it is causing the problems that you think are being caused by a virus.

You have a bunch of adware on your Mac. To remove it download at https://www.malwarebytes.org/mac-download/

My Macbook Aire 13 inch 2012 has suddenly developped a problem with Safari. When I open Safari a small pge appears which says

"due to a third party application your operating system is crached.

Contact support for immediate help and then a 1-888 number

If I click the blue OK panel there is a loud noise and the message repeats.

That is a spam message.

Try force quitting Safari and then restarting Safari with the Shift key depressed.

Simply force quit Safari, then restart Safari while holding the shift key.

Rebecca,

You have a LOT of adware installed on your computer. Malwarebytes Anti-Malware for Mac can help you get rid of that, as Allan has indicated.

However, there's one component of one piece of adware you have that I have yet to get my hands on, and I'd like to see a copy for analysis, if you don't mind. If you're willing to provide a copy of that sample, please e-mail me at treed at malwarebytes dot org. (Sorry to obfuscate the address like that, just don't want the spam bots finding it.)

If you're not willing, no worries, I'm sure I'll find a copy soon.

Thomas Reed

Director of Mac Offerings, Malwarebytes

@Hi everyone! I am new to this but I encountered the same problem and it seems like the malware or adware is something called EasyShopper... I don't know how to remove it I followed Linc Davis's instructions and found the name. Below I have attached what the name is and if any of you could help me get rid of it I will greatly appreciate it.

Did you try using Malwarebytes?

Malwarebytes Anti-Malware for Mac 10.8 and later

What should I do if Malwarebytes Anti-Malware for Mac didn't solve my problem?

Thanks! That actually took care of the problem!

You are welcome.

Hi, my problem is "ABOUT BLANK" in safari. Thank you for your help.

A

You may have installed a Safari extension called "AdBlock Plus." If so, please disable it in the Extensions pane of the Safari preferences window and test. If the problem is resolved, uninstall the extension, or refer to its developer for support or an update.

If you're using the Chrome or Firefox browser, do the equivalent in its settings.

B

"CleanMyMac" is a scam and a common cause of instability and poor performance. Depending on what version you have, the developer's instructions may not completely remove it. Please follow those instructions, then do as below.

Back up all data before proceeding.

Triple-click anywhere in the line below on this page to select it:

/Library/LaunchDaemons/com.macpaw.CleanMyMac3.Agent.plist

Right-click or control-click the highlighted line and select

Services ▹ Reveal in Finder (or just Reveal)

from the contextual menu.* A folder may open with an item selected. If it does, move the selected item to the Trash. You may be prompted for your administrator login password.

Repeat with this line:

/Library/PrivilegedHelperTools/com.macpaw.CleanMyMac3.Agent

Restart the computer and empty the Trash.

You may also have to remove one or more of these items in the same way:

~/Library/LaunchAgents/com.macpaw.CleanMyMac.helperTool.plist

~/Library/LaunchAgents/com.macpaw.CleanMyMac.volumeWatcher.plist

~/Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist

Never again install "CleanMyMac" or anything like it.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return.

hi this fixed my problem on my macbook pro with loadoages problem on safari and google chrome which bothers me so much thank you may God bless you 😀