Fake / Hacked "Safari Web Content quit unexpectedly" message

I do not have this reporting option turned on in my preferences. Yet for the last week it suddenly started popping up and since I clicked on it, it appears that something was downloaded onto my computer and now my computer is running loud and hot like someone is hacking it. User uploaded file

MacBook Pro, iOS 10.1.1, 10.11.6

Posted on Feb 5, 2017 10:50 AM

Reply
16 replies

Feb 6, 2017 6:59 AM in response to SocialSweet

Try a SMC reset. The article covers when this is required, but doing this will not affect anything.


Reset SMC

Try running this program in your normal account , then copy and paste the output in a reply. The program was created by etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy Report” and then paste into a reply. This will show what is running on your computer. No personal information is shown.

Etrecheck – System Information

Feb 7, 2017 9:53 AM in response to Eric Root

Hi - Thanks for your quick assistance. I did a reset SMC - and when I turned the computer back on - it was quiet for a couple minutes and then started right back into the revving up - when I went to Etrecheck - the revving stopped. When i left it started again. When I went back and downloaded - the revving stopped again. I just ran the report and will copy and paste it here. My computer is totally silent as I type this. I plan to try and run a report again when the revving starts again. I hope to catch something and will copy and paste the second report here as well. Again, thanks. [ok, again, just as I pasted this - the computer started revving again]


EtreCheck version: 3.1.5 (343)

Report generated 2017-02-07 12:37:00

Download EtreCheck from https://etrecheck.com

Runtime 3:22

Performance: Good


Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.


Problem: No problem - just checking

Description:

Running hot and loud at certain times


Hardware Information:

MacBook Pro (13-inch, Mid 2009)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro5,5

1 2.26 GHz Intel Core 2 Duo (Duo) CPU: 2-core

8 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

4 GB DDR3 1067 MHz ok

BANK 1/DIMM0

4 GB DDR3 1067 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: en1: 802.11 a/b/g/n

Battery: Health = Check Battery - Cycle count = 570


Video Information:

NVIDIA GeForce 9400M - VRAM: 256 MB

Color LCD 1280 x 800


System Software:

OS X El Capitan 10.11.6 (15G31) - Time since boot: about one hour


Disk Information:

Hitachi HTS545016B9SA02 disk0 : (160.04 GB) (Rotational)

[Show SMART report]

EFI (disk0s1) <not mounted> : 210 MB

Macintosh HD (disk0s2) / [Startup]: 159.18 GB (78.68 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB


HL-DT-ST DVDRW GS23N ()


USB Information:

Apple Inc. Built-in iSight

Apple Card Reader

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Computer, Inc. IR Receiver

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller


Gatekeeper:

Mac App Store and identified developers


Kernel Extensions:

/Library/Extensions

[loaded] com.movavi.driver.SoundGrabber (1.6.5 - SDK 10.9 - 2017-01-25) [Support]


System Launch Agents:

[not loaded] 8 Apple tasks

[loaded] 164 Apple tasks

[running] 66 Apple tasks


System Launch Daemons:

[not loaded] 47 Apple tasks

[loaded] 160 Apple tasks

[running] 83 Apple tasks


Launch Agents:

[running] com.epson.Epson_Low_Ink_Reminder.launcher.plist (2017-01-25) [Support]

[loaded] com.epson.esua.launcher.plist (2017-01-25) [Support]

[running] com.epson.eventmanager.agent.plist (2017-01-25) [Support]

[running] com.epson.scannermonitor.plist (2017-01-25) [Support]

[running] com.mcafee.menulet.plist (2017-01-24) [Support]

[running] com.mcafee.reporter.plist (2017-01-24) [Support]

[loaded] org.macosforge.xquartz.startx.plist (2015-10-16) [Support]


Launch Daemons:

[loaded] com.adobe.fpsaud.plist (2016-12-16) [Support]

[running] com.mcafee.cspd.plist (2016-03-15) [Support]

[not loaded] com.mcafee.ssm.ScanFactory.plist (2016-07-26) [Support]

[not loaded] com.mcafee.ssm.ScanManager.plist (2016-07-26) [Support]

[running] com.mcafee.virusscan.fmpd.plist (2016-03-29) [Support]

[loaded] org.macosforge.xquartz.privileged_startx.plist (2015-10-16) [Support]


User Launch Agents:

[loaded] com.google.keystone.agent.plist (2017-01-13) [Support]


User Login Items:

Dropbox Application

(/Applications/Dropbox.app)

My Day Application

(/Applications/Microsoft Office 2008/Office/My Day.app)


Internet Plug-ins:

FlashPlayer-10.6: 22.0.0.209 - SDK 10.9 (2016-08-20) [Support]

QuickTime Plugin: 7.7.3 (2016-09-13)

Flash Player: 22.0.0.209 - SDK 10.9 (2016-08-20) Outdated! Update

Default Browser: 601 - SDK 10.11 (2016-09-13)

OfficeLiveBrowserPlugin: 12.3.6 (2015-12-31) [Support]

PepperFlashPlayer: 24.0.0.194 - SDK 10.9 (2017-01-25) [Support]

SqueakBrowserPlugin: 3.8.15b13 - SDK 10.6 (2015-10-25) [Support]

SiteAdvisor: 2.0 - SDK 10.1 (2015-03-30) [Support]


User internet Plug-ins:

StartMeetingPlugin: StartMeetingPlugin_x86_64 1.2.8 - SDK 10.11 (2016-12-22) [Support]

WebEx64: 1.0 - SDK 10.10 (2016-01-23) [Support]


Safari Extensions:

SiteAdvisor - McAfee - http://www.siteadvisor.com (2017-01-24)


3rd Party Preference Panes:

Flash Player (2016-12-16) [Support]


Time Machine:

Time Machine not configured!


Top Processes by CPU:

35% VTDecoderXPCService

10% Google Chrome Helper(7)

7% VShieldScanManager

6% WindowServer

5% coreaudiod


Top Processes by Memory:

1.07 GB com.apple.WebKit.WebContent(13)

926 MB Google Chrome Helper(7)

703 MB kernel_task

188 MB Dropbox

172 MB mdworker(8)


Virtual Memory Information:

3.72 GB Available RAM

1.33 GB Free RAM

4.28 GB Used RAM

2.38 GB Cached files

0 B Swap Used


Diagnostics Information:

Feb 7, 2017, 12:35:57 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123557_[redacted] .crash

/usr/local/McAfee/AntiMalware/VShieldScanManager

Feb 7, 2017, 12:35:47 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123547_[redacted] .crash

Feb 7, 2017, 12:35:36 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123536_[redacted] .crash

Feb 7, 2017, 12:35:25 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123525_[redacted] .crash

Feb 7, 2017, 12:35:15 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123515_[redacted] .crash

Feb 7, 2017, 12:35:04 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123504_[redacted] .crash

Feb 7, 2017, 12:34:53 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123453_[redacted] .crash

Feb 7, 2017, 12:34:43 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123443_[redacted] .crash

Feb 7, 2017, 12:34:33 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123433_[redacted] .crash

Feb 7, 2017, 12:34:22 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123422_[redacted] .crash

Feb 7, 2017, 12:34:12 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123412_[redacted] .crash

Feb 7, 2017, 12:34:01 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123401_[redacted] .crash

Feb 7, 2017, 12:33:50 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123350_[redacted] .crash

Feb 7, 2017, 12:33:39 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123339_[redacted] .crash

Feb 7, 2017, 12:33:29 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123329_[redacted] .crash

Feb 7, 2017, 12:33:18 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123318_[redacted] .crash

Feb 7, 2017, 12:33:08 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123308_[redacted] .crash

Feb 7, 2017, 12:32:57 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123257_[redacted] .crash

Feb 7, 2017, 12:32:46 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123246_[redacted] .crash

Feb 7, 2017, 12:32:36 PM /Library/Logs/DiagnosticReports/VShieldScanManager_2017-02-07-123236_[redacted] .crash

Feb 7, 2017, 12:16:38 PM /Library/Logs/DiagnosticReports/AntiMalwareUpdate_2017-02-07-121638_[redacted]. crash

/usr/local/McAfee/AntiMalware/AntiMalwareUpdate

Feb 7, 2017, 11:33:43 AM Self test - passed

Feb 6, 2017, 12:56:49 PM /Library/Logs/DiagnosticReports/AntiMalwareUpdate_2017-02-06-125649_[redacted]. crash

Feb 6, 2017, 12:33:10 PM ~/Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2017-02-06-123310_ [redacted].crash

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.We bKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

Feb 5, 2017, 01:32:41 PM ~/Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2017-02-05-133241_ [redacted].crash

Feb 5, 2017, 12:41:03 PM /Library/Logs/DiagnosticReports/AntiMalwareUpdate_2017-02-05-124103_[redacted]. crash

Feb 7, 2017 12:55 PM in response to SocialSweet

Your dialog looks like a tab has crashed in Safari - not any sign of a 'hack', just a sign that a single webpage crashed. This is quite normal as sites use javascript & occasionally fail, crashing the tab.


Disable your Safari Extensions & retest if it happens again - Safari extensions can cause the conflicts occasionally. Hopefully you removed the McAfee extension too.


As for your 'security' questions you have to realise that iOS is encrypted out of the box but the encryption is only as good as the password used for the lock screen. The iOS filesystem has been encrypted for many many years.

Apple detail it all within…

https://www.apple.com/business/docs/iOS_Security_Guide.pdf


McAfee can actually make your Mac MORE insecure - as can most third party antivirus/ anti-malware/ firewall apps. Avoid them if you want a Mac to run smoothly. That type of software tries to control everything on the system, sometimes it creates more holes than it fixes.


The 'most secure' device is one that is never turned on & kept in a safe.

Feb 7, 2017 1:33 PM in response to SocialSweet

Nobody knows what the iPhone 8 will be & it is not allowed to discuss upcoming Apple products here (read the terms). iOS is already encrypted & has been that way for years - I really can't make it any clearer than that.


I don't know how you got 'hacked' however it is not normal to have multiple services attacked on multiple occasions - it leads me to believe you are doing something wrong, are unable to secure your accounts or are a valuable target. Your data may also be in various data breaches (you could check your email https://haveibeenpwned.com/)


Poor passwords or reusing passwords are a common way that people get compromised on multiple services. You have to avoid that if you reuse passwords on multiple sites. 2 factor and 2 step authentication can help if you have a device to use for that, check the options for each site.

Two-factor authentication for Apple ID - Apple Support

https://www.google.com/landing/2step/

https://www.eff.org/deeplinks/2016/12/how-enable-two-factor-authentication-faceb ook

Other services have these features too (the EFF has more links for Amazon, Twitter etc) - it makes it more difficult to manage accounts but more secure.

I don't know how well you handle security on your devices but those could help to an extent.


Your iOS device is already encrypted so please stop assuming that the iPhone 8 will be a miracle cure - it probably isn't. The data has to be decrypted when you use any encrypted device, so 'hackers' can still read it if you use weak passwords. Encryption can't fix bad habits.

Feb 7, 2017 1:07 PM in response to Drew Reece

Thank you - I'll try that with Safari extensions as well (I did disable McAfee) - The 'most secure' device is one that is never turned on & kept in a safe - LOL - but I have read so much that says Apple is no more secure than anything else any more. I have heard that iPhone 8 is going to be encrypted (maybe different than before?) I don't know but I'm desperate - I just want to feel safe again. Im obsessed. My Gmail got hacked in this recent deal a week ago and my Facebook seems perpetually hacked. It is exhausting. And honestly, I don't see how all these multi-billion dollar companies can keep throwing blame on the end user for not having a more, better, best password. It is no different than a bank blaming the owner of a bank account for not having done something to secure their money in the bank account they have in the bank from a bank robber. If the multi-bliion dollar tech companies are not able to STOP Hackers - why in the world do they think some "lady at home just trying to live her life" will be able to.

Feb 7, 2017 3:40 PM in response to Drew Reece

Thank you for your feedback. I have written about security for IOT for many years now. I use 13 character or longer passwords with various characters (every password is different for every account I have - which are many - since I market on digital for clients). But you were right about one thing - my ex-husband has targeted me and my devices and social for hacking for over 16 years - hence my obsession with hacking. He is a hacker that has been working for a prominent tech company and on the Dark Web for all those 16 years. My iPad is currently hacked. Sadly, It is not any more difficult to hack an Apple device than it is any other if you are a "targeted individual" by an obsessed hacker. But seriously, I needed this help and I truly appreciate your advice. Peace brother.


This posted by CNET 7/2016:

https://www.cnet.com/news/your-iphone-or-mac-could-be-hacked-with-one-imessage/

"If you don't have the latest versions of iOS or OS X on your Apple devices, you might want to go ahead and get on that.

Security vulnerabilities that can allow hackers to access your device by sending you an iMessage are found in almost every version of iOS and OS X, except the latest ones, report Forbes and Quartz.

Discovered by a researcher from Cisco, a hacker could send you a .TIF file (which is a photo file, like .jpg) that, when received, can execute a code that gives the hacker access to your device's internal storage and stored passwords.

Feb 7, 2017 4:36 PM in response to SocialSweet

SocialSweet wrote:


Thank you for your feedback. I have written about security for IOT for many years now.

IOT, I hear the 'S' in IOT stands for 'security'.


Those things are better off the internet as far as I can see, weak security, few updates, software made by amateurs, too much access to the entire network… best avoided IMO.


Read the rest of the CNET article & you will see that the flaw was patched in 9.3.3, weeks later. It is always the way with flaws, iOS has one benefit over Android/ Windows. Devices are supported for years. Other devices get less than a year or so for updates.


You should take-up legal advice if you feel you have a case of persistent hacking - it is probably unlawful & not something we can solve here.

Feb 7, 2017 5:01 PM in response to Drew Reece

Yes, he has been reported repeatedly to the FBI - not a priority for them - like not a priority for Apple - granted, he's not easy to "catch"- etc. It should be a priority for Apple (I could list a million more articles about Apple devices being hacked) and every other multi-billion dollar tech company. Especially when people start to catch on that it is not their fault they are being hacked - it is Apple's, Google's, Facebook's et al... not individuals....You know how people are figuring out how to get rid of cable companies because they felt "ripped-off" - same thing. Good night - thanks again.

Feb 7, 2017 5:10 PM in response to SocialSweet

SocialSweet wrote:


Yes, he has been reported repeatedly to the FBI - not a priority for them - like not a priority for Apple - granted, he's not easy to "catch"- etc. It should be a priority for Apple (I could list a million more articles about Apple devices being hacked) and every other multi-billion dollar tech company.

A million more articles?

You need to stop using these devices & services, they are clearly not meeting your needs.


Good luck.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Fake / Hacked "Safari Web Content quit unexpectedly" message

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.