Need help to get rid of data hub.serving-sys.com

Question

burdin Author

Level 1

10 points

Need help to get rid of data hub.serving-sys.com

Hi,

This is my first time in here so please excuse me if I am doing this wrong (I don'y have a clue,ha).

Lately i have been getting a pop up box asking for Authentication Required requested by

https://datahub.serving-sys.com.

So far I can simply hit cancel and it goes away however it seems to be coming up more and more.

I use Firefox most often and it seems to come up most often on my Comcast page.

Comcast is my service provider but is not my home page.

The only help i can see in the "net" wants me to download some anti virus program.

I am hoping I can get some help from some of you more www world people who can help me get rid of this pop up before it gets any nastier?

Thank You much

iBook, Mac OS X (10.4.11)

Posted on Aug 27, 2016 9:23 PM

Reply

Answer 1

K Shaffer

Level 8

36,094 points

Aug 27, 2016 9:43 PM in response to burdin

There may be something helpful in this article and explanation:

Phony "tech support" / "ransomware" popups and web pages

Do not click on anything in the popup; do not call any phone #.

The scams will invite you to participate, enough so, they can

get you to let them access your computer, and if you proceed

may actually lock up your Mac (under your helpful yield) then

want to charge your credit card in addition to taking info off

your computer.

Good luck! 🙂

Reply

Answer 2

burdin Author

Level 1

10 points

Aug 27, 2016 11:10 PM in response to K Shaffer

Hi,

Thank you for your reply.

Yeh, so the pop up is a box. Just sort of drops down out of nowhere.

The box contains the following statement:

Authentication Required

A username and password is being requested by

https://datahub.serving-sys.com

the site says: "HAProxy Statistics"

And then there are the spaces to insert your username and password followed by a continue button and a cancel button.

As I said I just ignore it for now and it cancel and it goes away so far.

It's when i have gone searching in the net to see if anyone has seen this that I find info that want me to download some clean up software that I don't trust.

At any rate I would love to know where this came from, I have no social media sites and download very limited stuff.

Thanks again for your reply.

Reply

Answer 3

Camelot

Level 9

59,271 points

Aug 27, 2016 11:20 PM in response to burdin

While undoubtedly annoying, I'm not convinced this is any of the typical malware/scamware concerns.

My guess is that this is related to a specific site (or sites) you visit, and represents a misconfigured setup on their part. This sounds to me more like an analytics system (that many sites use to measure performance, engagement, effective reach, etc.), but the site designer has misconfigured the collector such that it requires authentication to connect to the server - something you do not have.

If you're worried about it, a little detective work/process of elimination should enable you to determine which site in question is triggering the request. In any case you don't have the authentication credentials so there isn't much you can do beyond clicking Cancel anyway.

Reply

Answer 4

burdin Author

Level 1

10 points

Aug 27, 2016 11:29 PM in response to Camelot

Thank you Camelot,

What you say sounds logical and I appreciate you dropping in to let me know this.

(I'm saying it sounds logical as though I understand what your saying, Ha)

But no, I'm sure you're on to something and hopefully I may even be able to figure out what site it could be.

Thank you very much for taking the time to respond.

Reply

Answer 5

Aug 27, 2016 11:38 PM in response to burdin

See if this helps, which includes a section on authentication dialog prompts: A Browser Pop-up Scam has Taken Over Safari.

(Note that I may receive some form of compensation, financial or otherwise, from my recommendation or link, because some pages on the site contain small banner ads).

Reply

Answer 6

burdin Author

Level 1

10 points

Aug 28, 2016 12:18 AM in response to stevejobsfan0123

Thanks for taking a moment,

I am Old

I am tired

I need some sleep now.

This looks a little involved.

I will go over it tomorrow.

Thank you for your time.

Reply

Answer 7

Aug 28, 2016 7:22 AM in response to burdin

I am currently have the same problem on a PC laptop of mines. I downloaded Adblocker Plus and I haven't had any problems since then but I am concerned it is more than an ad and that the privacy and security of my information might have been compromised. Can anyone validate if this just an adware or something worse?

I can even provide you with the chain of links and articles I went through that caused this issue. Since this is a new computer this was the only thing out of the ordinary that I did since getting this laptop.

Reply

Answer 8

Aug 28, 2016 10:00 AM in response to Firefury54

I would recommend posting on Microsoft's forum for Windows: http://answers.microsoft.com/en-us?auth=1.

Reply

Answer 9

dominic23

Level 10

84,018 points

Aug 28, 2016 10:26 AM in response to burdin

Please run EtreCheck and post the report here.

http://etresoft.com/etrecheck

Download it, open Downloads folder, click on it to open, and then select ”Open”.

Click on the bouncing EtreCheck icon in the Dock.

“Choose a problem” from the popup menu box, and then “Start EtreCheck” in the dialog.

Click “Share Report” button in the toolbar, select “Copy to Clipboard” .

Paste it here when you reply.

Reply

Answer 10

burdin Author

Level 1

10 points

Aug 28, 2016 10:51 AM in response to dominic23

Hey, I think I was able to do this; I amaze myself some times.

(I'm fairly digitally challenged)

But here goes: (I hope)

HA, well I did everything but copy and paste, I can't highlite the info on the clipboard.

Is there a trick of some kind to transfer the info from my clipboard to this screen?

Thanks for your help (by the way)

Reply

Answer 11

Aug 28, 2016 10:54 AM in response to burdin

EtreCheck should have a Copy to Clipboard button after the report completes. Click on that button, and then open the reply window on this site. Either press Command + V to paste, or right click in the editor window here and choose Paste.

Reply

Answer 12

burdin Author

Level 1

10 points

Aug 28, 2016 11:04 AM in response to stevejobsfan0123

I did copy to clipboard, which is where it's at now.

I will press command+V as you suggest but will be surprised if that works because as I said for some reason I cannot highlight the info in the clipboard to do the command+C to copy it to begin with.

Oh geez it worked anyway, huh?

Didn't know that one, Ha.

EtreCheck version: 3.0.2 (306)

Report generated 2016-08-28 10:41:15

Download EtreCheck from https://etrecheck.com

Runtime 3:22

Performance: Good

Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.

Problem: Other problem

Description:

Arbitrary Authentication required

Hardware Information: ⓘ

iMac (21.5-inch, Late 2013)

[Technical Specifications] - [User Guide] - [Warranty & Service]

iMac - model: iMac14,3

1 3.1 GHz Intel Core i7 CPU: 4-core

8 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

4 GB DDR3 1600 MHz ok

BANK 1/DIMM0

4 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en1: 802.11 a/b/g/n/ac

Video Information: ⓘ

NVIDIA GeForce GT 750M - VRAM: 1024 MB

iMac 1920 x 1080

System Software: ⓘ

OS X El Capitan 10.11.6 (15G31) - Time since boot: about one day

Disk Information: ⓘ

APPLE HDD HTS541010A9E662 disk0 : (1 TB) (Rotational)

EFI (disk0s1) <not mounted> : 210 MB

Macintosh HD (disk0s2) / : 999.35 GB (963.42 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

USB Information: ⓘ

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. FaceTime HD Camera (Built-in)

Apple, Inc. Keyboard Hub

Apple Inc. Apple Keyboard

Thunderbolt Information: ⓘ

Apple Inc. thunderbolt_bus

Gatekeeper: ⓘ

Mac App Store and identified developers

Kernel Extensions: ⓘ

/Library/Application Support/Symantec/AntiVirus

[loaded] com.symantec.kext.SymAPComm (12.9.1f23 - SDK 10.6 - 2016-08-27) [Support]

/Library/Application Support/Symantec/Daemon/SymDaemon.bundle/Contents/PlugIns/FileSecurity.bundle/C ontents/Resources

[not loaded] com.symantec.kext.filesecurity (2.9.1 - SDK 10.6 - 2016-04-18) [Support]

/Library/Application Support/Symantec/Daemon/SymDaemon.bundle/Contents/PlugIns/SymFirewall.bundle/Co ntents/Resources

[loaded] com.symantec.kext.fw (5.5 - SDK 10.6 - 2016-04-18) [Support]

/Library/Extensions

[loaded] com.symantec.kext.internetSecurity (5.7 - SDK 10.8 - 2016-08-01) [Support]

[loaded] com.symantec.kext.ips (3.10.4 - SDK 10.8 - 2016-08-01) [Support]

[loaded] com.symantec.kext.pf (5.9.1 - SDK 10.8 - 2016-08-01) [Support]

System Launch Agents: ⓘ

[not loaded] 7 Apple tasks

[loaded] 164 Apple tasks

[running] 67 Apple tasks

System Launch Daemons: ⓘ

[not loaded] 47 Apple tasks

[loaded] 157 Apple tasks

[running] 87 Apple tasks

Launch Agents: ⓘ

[failed] com.symantec.errorreporter-periodicagent.plist (2014-04-20) [Support]

[loaded] com.symantec.nis.application.plist (2013-09-18) [Support]

[running] com.symantec.uiagent.application.plist (2013-01-16) [Support]

Launch Daemons: ⓘ

[loaded] com.adobe.fpsaud.plist (2016-06-28) [Support]

[running] com.symantec.deepsight-extractor.plist (2013-01-24) [Support]

[loaded] com.symantec.errorreporter-periodic.plist (2014-04-20) [Support]

[running] com.symantec.liveupdate.daemon.ondemand.plist (2014-09-23) [Support]

[loaded] com.symantec.liveupdate.daemon.plist (2014-09-23) [Support]

[not loaded] com.symantec.nav.migrateqtf.plist (2013-09-25) [Support]

[running] com.symantec.sharedsettings.plist (2015-08-13) [Support]

[running] com.symantec.symdaemon.plist (2014-09-17) [Support]

User Launch Agents: ⓘ

[loaded] com.google.keystone.agent.plist (2016-07-11) [Support]

User Login Items: ⓘ

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Internet Plug-ins: ⓘ

Silverlight: 5.1.41212.0 - SDK 10.6 (2016-03-16) [Support]

FlashPlayer-10.6: 22.0.0.209 - SDK 10.9 (2016-07-21) [Support]

QuickTime Plugin: 7.7.3 (2016-07-31)

Flash Player: 22.0.0.209 - SDK 10.9 (2016-07-21) [Support]

NortonInternetSecurityBF: 1.11.0 - SDK 10.6 (2016-04-18) [Support]

Default Browser: 601 - SDK 10.11 (2016-07-31)

Safari Extensions: ⓘ

Norton Internet Security - Symantec Corp - http://macplugin.norton.com/?ext=NIS (2016-02-10)

3rd Party Preference Panes: ⓘ

Flash Player (2016-06-28) [Support]

Norton\nQuickMenu (2014-04-20) [Support]

Time Machine: ⓘ

Time Machine not configured!

Top Processes by CPU: ⓘ

3% WindowServer

2% plugin-container(2)

1% fontd

0% kernel_task

0% ps

Top Processes by Memory: ⓘ

1.91 GB com.apple.WebKit.WebContent(3)

1.09 GB firefox

748 MB kernel_task

475 MB com.apple.WebKit.Plugin.64

459 MB plugin-container(2)

Virtual Memory Information: ⓘ

56 MB Free RAM

7.94 GB Used RAM (864 MB Cached)

62 MB Swap Used

Diagnostics Information: ⓘ

Aug 28, 2016, 09:47:45 AM ~/Library/Logs/DiagnosticReports/plugin-container_2016-08-28-094745_[redacted]. crash

org.mozilla.plugincontainer - /Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/pl ugin-container

Aug 27, 2016, 07:44:08 PM /Library/Logs/DiagnosticReports/firefox_2016-08-27-194408_[redacted].cpu_resour ce.diag [Details]

/Applications/Firefox.app/Contents/MacOS/firefox

Aug 27, 2016, 03:48:56 PM ~/Library/Logs/DiagnosticReports/plugin-container_2016-08-27-154856_[redacted]. crash

Aug 27, 2016, 12:31:11 PM Self test - passed

Aug 27, 2016, 11:43:56 AM ~/Library/Logs/DiagnosticReports/plugin-container_2016-08-27-114356_[redacted]. crash

Aug 26, 2016, 09:09:18 AM ~/Library/Logs/DiagnosticReports/plugin-container_2016-08-26-090918_[redacted]. crash

Reply