How to stop Safari from opening spam pages!

Question

Level 1

11 points

How to stop Safari from opening spam pages!

Recently, when using Safari, every time I click on a link on a web page, an unwanted page will open as a separate tab and it's always spam content telling me I need to upgrade Flash or do something else with software. I'm on a Mac and sometimes it comes up with information telling me I need to run virus control on Windows! This is really getting annoying. I'm not having this issue with either Firefox or Chrome.

I am on a Mac desktop, with OS X 10.9.5. My version of Safari is 9.1.3.

Is anyone else experiencing this or has experienced this and if so, how can I stop it?

Many thanks,

kt

OS X Mavericks (10.9.1)

Posted on Jun 30, 2017 5:22 PM

Reply

Answer 1

ktshastsa Author

Level 1

11 points

Jul 1, 2017 6:04 PM in response to Allan Jones

As suggested below is my EtreCheck report. I hope someone can make sense of it. 😉

kt

EtreCheck version: 3.4 (420)

Report generated 2017-07-01 18:57:58

Download EtreCheck from https://etrecheck.com

Runtime: 4:20

Performance: Good

Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Click the [Remove/Report] links to remove adware or update the whitelist of legitimate software.

Click the [Clean up] link to delete unused files.

Problem: Other problem

Description:

My Safari web browser keeps opening unwanted spam pages.

Hardware Information:ⓘ

Mac Pro (Early 2009)

[Technical Specifications] - [User Guide] - [Warranty & Service]

Mac Pro - model: MacPro4,1

1 2.66 GHz Quad-Core Intel Xeon (Xeon(R)) CPU: 4-core

24 GB RAM Upgradeable - [Instructions]

DIMM 1

8 GB DDR3 ECC 1066 MHz ok

DIMM 2

8 GB DDR3 ECC 1066 MHz ok

DIMM 3

8 GB DDR3 ECC 1066 MHz ok

DIMM 4

Empty

Bluetooth: Old - Handoff/Airdrop2 not supported

Video Information:ⓘ

ATI Radeon HD 4870 - VRAM: 512 MB

Cinema HD 1920 x 1200

DELL S2415H 1920 x 1080

Disk Information:ⓘ

HL-DT-ST DVD-RW GH41N ()

WDC WD6400AAKS-41H2B0 disk0: (640.14 GB) (Rotational)

[Show SMART report]

(disk0s1) <not mounted> [EFI]: 210 MB

Macintosh HD (disk0s2 - Journaled HFS+) / [Startup]: 639.28 GB (86.53 GB free)

(disk0s3) <not mounted> [Recovery]: 650 MB

ST31500341AS disk2: (1.5 TB) (Rotational)

[Show SMART report]

(disk2s1) <not mounted> [EFI]: 210 MB

Stony1 (disk2s2 - Journaled HFS+) /Volumes/Stony1 : 1.50 TB (109.16 GB free)

(disk2s3) <not mounted> [Boot]: 134 MB

ST31500341AS disk3: (1.5 TB) (Rotational)

[Show SMART report]

(disk3s1) <not mounted> [EFI]: 210 MB

Stony2_** (disk3s2 - Journaled HFS+) /Volumes/Stony2_** : 1.50 TB (30.62 GB free)

Maxtor 6B300S0 disk1: (300.09 GB) (Rotational)

[Show SMART report]

(disk1s1) <not mounted> [EFI]: 210 MB

300GigDrive (disk1s2 - Journaled HFS+) /Volumes/300GigDrive : 299.75 GB (212.06 GB free)

USB Information:ⓘ

XHCI Root Hub SS Simulation

Seagate Backup+ Desk

EHCI Root Hub Simulation

hub_device

Generic USB Storage 4.08 GB

hub_device

HP Officejet Pro 8600

hub_device

Apple, Inc. Keyboard Hub

Kensington Kensington Expert Mouse

Apple Inc. Apple Keyboard

Apple Computer, Inc. Apple Cinema HD Display

XHCI Root Hub USB 2.0 Simulation

UHCI Root Hub Simulation

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

UHCI Root Hub Simulation

harman/kardon SoundSticks

UHCI Root Hub Simulation

Virtual disks:ⓘ

NIKON D90 (disk5s1 - MS-DOS FAT32) /Volumes/NIKON D90 : 4.07 GB (3.60 GB free)

Physical disk: (null) 4.07 GB (3.60 GB free)

System Software:ⓘ

OS X Mavericks 10.9.5 (13F1911) - Time since boot: about 12 hours

Gatekeeper:ⓘ

Anywhere [Fix Gatekeeper security]

Possible adware:ⓘ

Adware: /Library/LaunchDaemons/com.apple.ertur.plist

Adware: /Library/LaunchDaemons/com.apple.nalen.plist

Unknown file: /Library/LaunchDaemons/com.eskjbygwzxsj.plist

Unknown file: /Library/LaunchDaemons/com.sqimvlbxyibh.plist

Unknown file: /Library/LaunchDaemons/com.uOZuGVau.plist

Unknown file: ~/Library/LaunchAgents/com.agyria.plist

/Library/dermopteran/dermopteran

Unknown file: ~/Library/LaunchAgents/com.dermopteran.plist

/Library/dermopteran/dermopteran

Adware: ~/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

Adware: ~/Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist

9 possible adware files found. [Remove/Report]

Clean up:ⓘ

/Library/LaunchAgents/com.adobe.AdobeCreativeCloud.plist

/Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud --showwindow=false --onOSstartup=true

Executable not found!

~/Library/LaunchAgents/com.akamai.single-user-client.plist

~/Applications/Akamai/netsession_mac

Executable not found!

~/Library/LaunchAgents/com.gravure.plist

/var/root/Library/paralogism/paralogism

Executable not found!

~/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

open /Applications/ZipCloud.app/Contents/Resources/Utility.app -n --args 9 -l

Executable not found!

~/Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist

open /Applications/ZipCloud.app/Contents/Resources/Utility.app --args 7 1

Executable not found!

~/Library/LaunchAgents/com.paralogism.plist

/var/root/Library/paralogism/paralogism

Executable not found!

6 orphan files found. [Clean up]

Kernel Extensions:ⓘ

/Library/Application Support/Roxio

[not loaded] com.roxio.TDIXController (1.6) [Lookup]

/Library/Extensions

[loaded] com.3dconnexion.driver (10.2.2 - SDK 10.8) [Lookup]

/Library/Extensions/3Dconnexion.kext/Contents/PlugIns

[not loaded] com.3dconnexion.virtual.driver (10.2.2) [Lookup]

/System/Library/Extensions

[loaded] com.kensington.trackballworks.driver (1.1.1 - SDK 10.6) [Lookup]

System Launch Agents:ⓘ

[not loaded] 6 Apple tasks

[loaded] 140 Apple tasks

[running] 38 Apple tasks

System Launch Daemons:ⓘ

[not loaded] 51 Apple tasks

[loaded] 139 Apple tasks

[running] 60 Apple tasks

Launch Agents:ⓘ

[not loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2015-08-19) [Lookup]

[failed] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2017-01-11) [Lookup]

[failed] com.adobe.AdobeCreativeCloud.plist (? faec172d 0 - installed 2014-06-26) [Lookup] - /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud: Executable not found!

[loaded] com.adobe.CS4ServiceManager.plist (? 70f708f7 8f8a5aa2 - installed 2009-09-11) [Lookup]

[loaded] com.adobe.CS5ServiceManager.plist (? 40cdc1ff 21868ea0 - installed 2014-03-28) [Lookup]

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-03-28) [Lookup]

[running] com.micromat.TechToolProAgent.plist (Micromat, Inc. - installed 2017-05-31) [Lookup]

[loaded] com.parallels.DesktopControlAgent.plist (Parallels, Inc. - installed 2013-03-07) [Lookup]

[failed] com.parallels.desktop.launch.plist (? d74c2143 7f484854 - installed 2013-03-07) [Lookup]

[running] com.parallels.vm.prl_pcproxy.plist (Parallels, Inc. - installed 2013-03-07) [Lookup]

Launch Daemons:ⓘ

[loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2017-01-11) [Lookup]

[loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2017-01-11) [Lookup]

[loaded] com.adobe.SwitchBoard.plist (? 68cad67 0 - installed 2014-03-18) [Lookup]

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 a0305b84 - installed 2017-06-14) [Lookup]

[running] com.apple.ertur.plist (? 4d5578d6 38879ecb - installed 2017-01-02) Adware! [Remove/Report]

/Library/ertur

[running] com.apple.nalen.plist (? 2a880c57 4020a718 - installed 2017-01-03) Adware! [Remove/Report]

/Library/nalen

[loaded] com.bombich.ccc.plist (? 41245744 2bf40b6f - installed 2013-12-01) [Lookup]

[running] com.bombich.ccc.scheduledtask.2055AB76-9E1D-4F6B-8099-CD1C9C7EF493.plist (Bombich Software, Inc. - installed 2017-06-25) [Lookup]

[running] com.bombich.ccc.scheduledtask.B2FA0278-0186-4C43-B113-369B22F892C1.plist (Bombich Software, Inc. - installed 2017-07-01) [Lookup]

[running] com.bombich.ccchelper.plist (Bombich Software, Inc. - installed 2015-02-23) [Lookup]

[not loaded] com.eskjbygwzxsj.plist (? 0 ? - installed 2017-01-02) [Lookup]

[loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2017-04-17) [Lookup]

[loaded] com.klieme.TimeMachineScheduler.plist (Apple, Inc. - installed 2014-09-20)

[loaded] com.macpaw.CleanMyMac2.Agent.plist (MacPaw Inc. - installed 2014-08-07) [Lookup]

[running] com.micromat.TechToolProDaemon.plist (Micromat, Inc. - installed 2017-05-31) [Lookup]

[loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e 8b29c3ef - installed 2012-04-02) [Lookup]

[loaded] com.oracle.java.JavaUpdateHelper.plist (Oracle America, Inc. - installed 2014-09-04) [Lookup]

[running] com.parallels.desktop.launchdaemon.plist (Parallels, Inc. - installed 2012-09-03) [Lookup]

[not loaded] com.sqimvlbxyibh.plist (? 0 ? - installed 2017-01-03) [Lookup]

[not loaded] com.uOZuGVau.plist (? 0 ? - installed 2017-01-02) [Lookup]

User Launch Agents:ⓘ

[loaded] com.adobe.ARM.[...].plist (? 53574687 e8d5d579 - installed 2015-05-31) [Lookup]

[running] com.agyria.plist (? a49b889f b342a111 - installed 2017-06-18) [Lookup]

[failed] com.akamai.single-user-client.plist (? 8e6a59e 0 - installed 2015-09-23) [Lookup] - ~/Applications/Akamai/netsession_mac: Executable not found!

[running] com.bombich.ccc-user-agent.plist (Bombich Software, Inc. - installed 2014-09-03) [Lookup]

[running] com.c-command.SpamSieve.LaunchAgent.plist (C-Command Software, LLC - installed 2017-02-27) [Lookup]

[loaded] com.citrixonline.GoToMeeting.G2MUpdate.plist (Citrix Online LLC - installed 2016-10-06) [Lookup]

[running] com.dermopteran.plist (? a49b889f b342a111 - installed 2017-06-18) [Lookup]

[failed] com.gravure.plist (? bd8a0023 0 - installed 2017-05-24) [Lookup] - /var/root/Library/paralogism/paralogism: Executable not found!

[failed] com.jdibackup.ZipCloud.autostart.plist (? dd208422 0 - installed 2017-01-03) Adware! [Remove/Report]

[failed] com.jdibackup.ZipCloud.notify.plist (? b7f3fb8a 0 - installed 2017-01-03) Adware! [Remove/Report]

[loaded] com.macpaw.CleanMyMac2Helper.diskSpaceWatcher.plist (MacPaw Inc. - installed 2015-10-22) [Lookup]

[loaded] com.macpaw.CleanMyMac2Helper.scheduledScan.plist (MacPaw Inc. - installed 2015-10-22) [Lookup]

[loaded] com.macpaw.CleanMyMac2Helper.trashWatcher.plist (MacPaw Inc. - installed 2015-10-22) [Lookup]

[failed] com.paralogism.plist (? bd8a0023 0 - installed 2017-05-24) [Lookup] - /var/root/Library/paralogism/paralogism: Executable not found!

User Login Items:ⓘ

iTunesHelper Application (Apple, Inc. - installed 2017-05-24)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

TrackballWorksHelper Application

(/Library/PreferencePanes/TrackballWorks.prefPane/Contents/Resources/TrackballW orksHelper.app)

Google Drive Application

(/Applications/Google Drive.app)

Internet Plug-ins:ⓘ

Google Earth Web Plug-in: 7.1 (installed 2016-08-19) [Lookup]

Default Browser: 537 (installed 2014-09-20)

AdobeAAMDetect: AdobeAAMDetect 2.0.0.0 (installed 2014-06-26) [Lookup]

FlashPlayer-10.6: 26.0.0.131 (installed 2017-06-30) [Lookup]

AdobePDFViewerNPAPI: 17.009.20044 (installed 2017-04-11) [Lookup]

Silverlight: 5.1.41212.0 (installed 2016-05-30) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2016-07-20)

Flash Player: 26.0.0.131 (installed 2017-06-30) [Lookup]

iPhotoPhotocast: 7.0 (installed 2012-04-05)

SharePointBrowserPlugin: 14.6.2 (installed 2016-03-30) [Lookup]

AdobePDFViewer: 17.009.20044 (installed 2017-04-11) [Lookup]

JavaAppletPlugin: Java 8 Update 45 (installed 2015-04-19) Check version

User internet Plug-ins:ⓘ

CitrixOnlineWebDeploymentPlugin: 1.0.105 (installed 2013-04-25) [Lookup]

Safari Extensions:ⓘ

[not loaded] Evernote Web Clipper - Evernote Corp. - http://evernote.com (installed 2017-05-24)

[not loaded] iGive Button - iGive.com Holdings LLC - http://www.igive.com/ (installed 2017-02-09)

[not loaded] Aristo Search - Aristo.mode (installed 2016-12-14)

3rd Party Preference Panes:ⓘ

3Dconnexion (installed 2015-05-31) [Lookup]

Akamai NetSession Preferences (installed 2015-09-23) [Lookup]

Déjà Vu (installed 2008-01-17) [Lookup]

Flash Player (installed 2017-06-14) [Lookup]

TrackballWorks (installed 2014-02-01) [Lookup]

MacFUSE (installed 2010-12-01) [Lookup]

TechTool Protection (installed 2017-05-31) [Lookup]

Time Machine:ⓘ

Skip System Files: NO

Mobile backups: OFF

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 639.28 GB Disk used: 552.75 GB

300GigDrive: Disk size: 299.75 GB Disk used: 87.68 GB

Destinations:

TimeMachineBU_8_15 [Local]

Total size: 2.50 TB

Total number of backups: 28

Oldest backup: 6/2/17, 7:57 AM

Last backup: 7/1/17, 7:37 AM

Size of backup disk: Adequate

Backup size 2.50 TB > (Disk used 640.43 GB X 3)

Top Processes by CPU:ⓘ

58% mdworker

57% mdworker

41% Mail

15% taskgated

6% WindowServer

Top Processes by Memory:ⓘ

1.25 GB kernel_task

764 MB com.apple.WebKit.WebContent

326 MB Safari

253 MB SpamSieve

244 MB iTunes

Top Processes by Energy Use:ⓘ

16.28 Mail

14.82 taskgated

3.90 WindowServer

3.64 cfprefsd

Virtual Memory Information:ⓘ

18.46 GB Available RAM

472 MB Free RAM

5.54 GB Used RAM

18.00 GB Cached files

0 B Swap Used

Software installs:ⓘ

Adobe Flash Player: (installed 2017-06-14)

Adobe Flash Player: (installed 2017-06-16)

Adobe Flash Player: (installed 2017-06-30)

Install information may not be complete.

Diagnostics Information:ⓘ

2017-07-01 18:56:00 uOZuGVau.app Crash [Open]

Cause: *** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: '-[__NSCFConstantString containsString:]: unrecognized selector sent to instance 0x7fff75d7c440'

terminating with uncaught exception of type NSException

abort() called

2017-06-29 06:53:52 HP Scanner 3.app Crash [Open]

Reply

Answer 2

ktshastsa Author

Level 1

11 points

Jul 1, 2017 11:06 PM in response to Eric Root

Here is the second report. There are still some unknown files that the report thinks may be OK.

EtreCheck version: 3.4 (420)

Report generated 2017-07-02 00:02:31

Download EtreCheck from https://etrecheck.com

Runtime: 3:37

Performance: Good

Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Click the [Remove/Report] links to remove adware or update the whitelist of legitimate software.

Problem: Other problem

Description:

Adware found.

Hardware Information:ⓘ

Mac Pro (Early 2009)

[Technical Specifications] - [User Guide] - [Warranty & Service]

Mac Pro - model: MacPro4,1

1 2.66 GHz Quad-Core Intel Xeon (Xeon(R)) CPU: 4-core

24 GB RAM Upgradeable - [Instructions]

DIMM 1

8 GB DDR3 ECC 1066 MHz ok

DIMM 2

8 GB DDR3 ECC 1066 MHz ok

DIMM 3

8 GB DDR3 ECC 1066 MHz ok

DIMM 4

Empty

Bluetooth: Old - Handoff/Airdrop2 not supported

Video Information:ⓘ

ATI Radeon HD 4870 - VRAM: 512 MB

Cinema HD 1920 x 1200

DELL S2415H 1920 x 1080

Disk Information:ⓘ

HL-DT-ST DVD-RW GH41N ()

WDC WD6400AAKS-41H2B0 disk0: (640.14 GB) (Rotational)

[Show SMART report]

(disk0s1) <not mounted> [EFI]: 210 MB

Macintosh HD (disk0s2 - Journaled HFS+) / [Startup]: 639.28 GB (86.38 GB free)

(disk0s3) <not mounted> [Recovery]: 650 MB

ST31500341AS disk2: (1.5 TB) (Rotational)

[Show SMART report]

(disk2s1) <not mounted> [EFI]: 210 MB

Stony1 (disk2s2 - Journaled HFS+) /Volumes/Stony1 : 1.50 TB (109.15 GB free)

(disk2s3) <not mounted> [Boot]: 134 MB

ST31500341AS disk3: (1.5 TB) (Rotational)

[Show SMART report]

(disk3s1) <not mounted> [EFI]: 210 MB

Stony2_** (disk3s2 - Journaled HFS+) /Volumes/Stony2_** : 1.50 TB (30.62 GB free)

Maxtor 6B300S0 disk1: (300.09 GB) (Rotational)

[Show SMART report]

(disk1s1) <not mounted> [EFI]: 210 MB

300GigDrive (disk1s2 - Journaled HFS+) /Volumes/300GigDrive : 299.75 GB (212.06 GB free)

USB Information:ⓘ

XHCI Root Hub SS Simulation

Seagate Backup+ Desk 5 TB

EHCI Root Hub Simulation

hub_device

Generic USB Storage 4.08 GB

hub_device

HP Officejet Pro 8600

hub_device

Apple Inc. iPhone

Apple, Inc. Keyboard Hub

Kensington Kensington Expert Mouse

Apple Inc. Apple Keyboard

Apple Computer, Inc. Apple Cinema HD Display

XHCI Root Hub USB 2.0 Simulation

UHCI Root Hub Simulation

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

UHCI Root Hub Simulation

harman/kardon SoundSticks

UHCI Root Hub Simulation

Virtual disks:ⓘ

TimeMachineBU_8_15 (disk4s2 - Journaled HFS+) /Volumes/TimeMachineBU_8_15 : 2.50 TB (86.74 GB free)

Physical disk: (null) 2.50 TB (86.74 GB free)

2.5 Terabyte (disk4s3 - Journaled HFS+) /Volumes/2.5 Terabyte : 2.50 TB (2.50 TB free)

Physical disk: (null) 2.50 TB (2.50 TB free)

NIKON D90 (disk5s1 - MS-DOS FAT32) /Volumes/NIKON D90 : 4.07 GB (3.60 GB free)

Physical disk: (null) 4.07 GB (3.60 GB free)

System Software:ⓘ

OS X Mavericks 10.9.5 (13F1911) - Time since boot: about 17 hours

Gatekeeper:ⓘ

Anywhere [Fix Gatekeeper security]

Possible adware:ⓘ

Unknown file: /Library/LaunchDaemons/com.eskjbygwzxsj.plist

Unknown file: /Library/LaunchDaemons/com.sqimvlbxyibh.plist

Unknown file: /Library/LaunchDaemons/com.uOZuGVau.plist

Unknown file: ~/Library/LaunchAgents/com.agyria.plist

/Library/dermopteran/dermopteran

Unknown file: ~/Library/LaunchAgents/com.dermopteran.plist

/Library/dermopteran/dermopteran

5 possible adware files found. [Remove/Report]

Kernel Extensions:ⓘ

/Applications/TechTool Pro 7.app

[not loaded] com.micromat.driver.spdKernel (1.0 - SDK 10.8) [Lookup]

[not loaded] com.micromat.driver.spdKernel-10-8 (1.0 - SDK 10.8) [Lookup]

/Applications/Toast 7 Titanium/Toast Titanium.app

[not loaded] com.roxio.BluRaySupport (1.1.3) [Lookup]

[not loaded] com.roxio.TDIXController (1.6) [Lookup]

/Library/Extensions

[loaded] com.3dconnexion.driver (10.2.2 - SDK 10.8) [Lookup]

/Library/Extensions/3Dconnexion.kext/Contents/PlugIns

[not loaded] com.3dconnexion.virtual.driver (10.2.2) [Lookup]

/Library/Parallels/Parallels Service.app

[not loaded] com.parallels.kext.prl_hid_hook (7.0 15107.796624) [Lookup]

[not loaded] com.parallels.kext.prl_hypervisor (7.0 15107.796624) [Lookup]

[not loaded] com.parallels.kext.prl_netbridge (7.0 15107.796624) [Lookup]

[not loaded] com.parallels.kext.prl_usb_connect (7.0 15107.796624) [Lookup]

[not loaded] com.parallels.kext.prl_vnic (7.0 15107.796624) [Lookup]

/System/Library/Extensions

[loaded] com.kensington.trackballworks.driver (1.1.1 - SDK 10.6) [Lookup]

System Launch Agents:ⓘ

[not loaded] 6 Apple tasks

[loaded] 139 Apple tasks

[running] 39 Apple tasks

System Launch Daemons:ⓘ

[not loaded] 51 Apple tasks

[loaded] 138 Apple tasks

[running] 61 Apple tasks