ib.adnxs.com popup on Safari

I don't have any extensions in safari. I've been through all the steps in your other link and found nothing. I haven't downloaded any new applications and all the ones I have, have been on my mac for a long time. This issue only started today when I went on Amazon.co.uk after I had a popup window telling me I had a virus, which only brought up the printer window when I tried to shut it down. I checked on apple's website and it states that these are just scams and can't install a virus on the mac, but could this have installed whatever's causing the issue? I have also been having a stags.bluekai certificate problem, but I believe that's a safari/mavericks issue and not adware/malware.

This problem doesn't happen in Firefox. Strangely, the John Lewis website that gives me the stags problem has a different certificate in Firefox.

Hi Eric

Is there another adware removal tool that will work on mavericks. I can't find anything in the various folders in library manually, but the pop up still happens. So far, it's only on amazon. I've heard of something called Disconnect, but I'm loathe to install software that may make things worse.

Is this adware or is it like the certificate for stags.bluekai.com, which is harmless?

Thanks

Hi Eric (again)

In the absence of any malware removal tools and without being able to find anything manually, I ran etrecheck on my system to see if that showed any possible adware/malware. The report is below. I don't know if you can decipher from it if I have an issue, or is it a safari/mavericks problem?

Problem description:

Had virus alert page pop up earlier today on safari, whilst browsing. Tried to shut it down, but every time I clicked on the x, my printer box popped up. I force quit safari and restarted, but since then mac running hot and security certificate pop up for ib.adnxs.com, which having googled is adware, on sites that were previously fine.

EtreCheck version: 2.1.8 (121)

Report generated 24 April 2018 01:00:34 BST

Download EtreCheck from http://etresoft.com/etrecheck

Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

Hardware Information: ℹ

iMac (21.5-inch, Mid 2010) (Technical Specifications)

iMac - model: iMac11,2

1 3.2 GHz Intel Core i3 CPU: 2-core

4 GB RAM Upgradeable

BANK 0/DIMM0

Empty

BANK 1/DIMM0

Empty

BANK 0/DIMM1

2 GB DDR3 1333 MHz ok

BANK 1/DIMM1

2 GB DDR3 1333 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: en1: 802.11 a/b/g/n

Video Information: ℹ

ATI Radeon HD 5670 - VRAM: 512 MB

iMac 1920 x 1080

System Software: ℹ

OS X 10.9.5 (13F1134) - Time since boot: 6:31:56

Disk Information: ℹ

ST31000528AS disk0 : (1 TB)

EFI (disk0s1) <not mounted> : 210 MB

Mac HD (disk0s2) / : 999.35 GB (648.64 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

OPTIARC DVD RW AD-5670SC

USB Information: ℹ

HGST G-Drive Slim 500.11 GB

EFI (disk1s1) <not mounted> : 210 MB

G-DRIVE slim (disk1s2) /Volumes/G-DRIVE slim : 499.76 GB (20.01 GB free)

Apple Internal Memory Card Reader

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. Built-in iSight

Apple Computer, Inc. IR Receiver

Configuration files: ℹ

/etc/hosts - Count: 15

Gatekeeper: ℹ

Mac App Store and identified developers

Kernel Extensions: ℹ

/Applications/Toast 10 Titanium/Toast Titanium.app

[not loaded] com.roxio.BluRaySupport (1.1.6) [Click for support]

/System/Library/Extensions

[not loaded] com.devguru.driver.SamsungComposite (1.2.13) [Click for support]

[not loaded] com.leapfrog.driver.LfConnectDriver (1.8.1 - SDK 10.7) [Click for support]

/System/Library/Extensions/ssuddrv.kext/Contents/PlugIns

[not loaded] com.devguru.driver.SamsungACMControl (1.2.13) [Click for support]

[not loaded] com.devguru.driver.SamsungACMData (1.2.13) [Click for support]

[not loaded] com.devguru.driver.SamsungMTP (1.2.13) [Click for support]

/Users/[redacted]/Library/Services/ToastIt.service/Contents/MacOS

[not loaded] com.roxio.TDIXController (2.0) [Click for support]

Startup Items: ℹ

AdobeVersionCueCS2: Path: /Library/StartupItems/AdobeVersionCueCS2

Startup items are obsolete in OS X Yosemite

Launch Agents: ℹ

[not loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]

[loaded] com.adobe.CS5ServiceManager.plist [Click for support]

Launch Daemons: ℹ

[loaded] com.adobe.fpsaud.plist [Click for support]

[loaded] com.adobe.SwitchBoard.plist [Click for support]

[loaded] com.leapfrog.connect.shell.plist [Click for support]

[loaded] com.microsoft.office.licensing.helper.plist [Click for support]

User Launch Agents: ℹ

[loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]

[loaded] com.adobe.ARM.[...].plist [Click for support]

[failed] com.apple.CSConfigDotMacCert-[...]@me.com-SharedServices.Agent.plist

[running] com.hp.devicemonitor.plist [Click for support]

User Login Items: ℹ

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Monitor Application (/Applications/LeapFrogConnect.app/Contents/Monitor.app)

FontAgent Activator Application (/Library/Application Support/FontAgent Pro/FontAgent Activator.app)

Internet Plug-ins: ℹ

JavaAppletPlugin: Version: 14.9.0 - SDK 10.7 Check version

FlashPlayer-10.6: Version: 29.0.0.140 - SDK 10.12 [Click for support]

Default Browser: Version: 537 - SDK 10.9

AdobePDFViewerNPAPI: Version: 10.1.16 [Click for support]

AdobePDFViewer: Version: 10.1.16 [Click for support]

Flash Player: Version: 29.0.0.140 - SDK 10.12 [Click for support]

QuickTime Plugin: Version: 7.7.3

OfficeLiveBrowserPlugin: Version: 12.2.6 [Click for support]

SharePointBrowserPlugin: Version: 14.2.3 - SDK 10.6 [Click for support]

Silverlight: Version: 5.1.20913.0 - SDK 10.6 [Click for support]

iPhotoPhotocast: Version: 7.0

3rd Party Preference Panes: ℹ

Adobe Version Cue CS2 [Click for support]

AppTrap [Click for support]

Flash Player [Click for support]

Growl [Click for support]

Perian [Click for support]

Quark Update Preferences [Click for support]

Time Machine: ℹ

Skip System Files: NO

Mobile backups: OFF

Auto backup: YES

Volumes being backed up:

Mac HD: Disk size: 999.35 GB Disk used: 350.70 GB

Destinations:

G-DRIVE slim [Local]

Total size: 499.76 GB

Total number of backups: 60

Oldest backup: 2017-12-14 00:52:14 +0000

Last backup: 2018-04-23 23:46:50 +0000

Size of backup disk: Too small

Backup size 499.76 GB < (Disk used 350.70 GB X 3)

Top Processes by CPU: ℹ

7% com.apple.WebKit.Networking

4% Safari

4% WindowServer

2% cookied

2% HP Device Monitor

Top Processes by Memory: ℹ

172 MB Safari

125 MB com.apple.WebKit.WebContent

60 MB mds_stores

47 MB Finder

34 MB com.apple.WebKit.Networking

Virtual Memory Information: ℹ

102 MB Free RAM

1.44 GB Active RAM

1.53 GB Inactive RAM

640 MB Wired RAM

1.98 GB Page-ins

27 MB Page-outs

Diagnostics Information: ℹ

Apr 23, 2018, 09:47:32 PM /Users/[redacted]/Library/Logs/DiagnosticReports/cookied_2018-04-23-214732_[red acted].crash

Apr 23, 2018, 08:42:16 PM /Library/Logs/DiagnosticReports/Safari_2018-04-23-204216_[redacted].hang

Apr 23, 2018, 06:25:11 PM Self test - passed

Apr 23, 2018, 05:23:44 PM /Library/Logs/DiagnosticReports/Safari_2018-04-23-172344_[redacted].hang

Thanks for any help

Thanks for that.

I’ve seen on another forum that it’s down to an issue in Mavericks 10.9 and safari (like the stags.bluekai). It just seemed a bit more than coincidence that it started after I had a problem with a popup Apple virus scam website informing me that my Mac had been infected by a virus and to call a toll-free number and I was unable to close the webpage.

I deleted it and it hasn’t come back, however I’ve had similar popup pages, but never ones that have a voice telling me that my Mac is now infected with a virus and cause the print window to appear when trying to close it. I’ve got the block pop ups checked in preferences, yet I still get these windows appearing.

Is there an adware/malware remover (other than Malwarebytes, which won’t work on Mavericks) that I can use to check my system, or do you not think it necessary, bearing in mind I can’t seem to find any unusual files in the library? I have got some applications that were downloaded from the web, but I’ve had them for so long that I can’t imagine them being an issue.

Thanks

Hi Eric

Sorry to bother you again, but I had that same pop up adware page telling me my mac was infected and asking me to phone a number. I managed to quit safari and reopen it, however I then went on a legitimate website that I've been on many times and suddenly a mackeeper page auto loaded, where the other website had been, asking me to install mackeeper. I've subsequently been into preferences, deleted website data and the site from the history. I've also emptied the cache from the develop menu (I've got no extensions installed), checked various folders and ran etrecheck and all seems OK. I'm not sure why this page suddenly loaded, but I've checked using Firefox and it didn't happen there. Could it be something in cookies or cache in Safari? Also should I delete the Cache.db file from com.apple.Safari in the user library?

Thanks again for your help

I was always told that macs can't get malware. I saw on another post that it's something to do with safari 9 in mavericks and it's a certificate issue. Is this not the case?

I just tried to download and install, but it won't work on mavericks. Any other suggestions would be gratefully received. Thanks

I've been clicking cancel whenever the certificate pops up. Not sure if that's OK, but I figure that it's better than clicking continue.