Safari Invasion

[Miss Emma]

Hi Guys,

Advice required please...

I have managed to get invaded by pop-ups. It's never happened to me before. I am getting pop-up ads on most sites I go to. I downloaded 'Switch' file converter and 'MPlayer X' today and since then it's been happening (prior to this no problem). I am using Safari. I also have Firefox and that is unaffected. In settings my pop-ups are switched off.

I think I've downloaded something nasty...

I can't see how to rectify this - any suggestions very much appreciated.

Thank in advance,

Miss E

 

[Cory Cooper]

Hello and welcome.

-Where did you download Switch and MPlayerX from?
-What version of Mac OS X?
-Do you mean you have the checkbox ticked next to Block pop-up windows in Safari > Preferences > Security?

C

 

[Miss Emma]

Hello C and thanks for replying...

Well, I am running OS X 10.9.3

I don't recall where I downloaded from. I always delete my history and reset (a habit) and I've been doing lots on here today?? Is it vital to the issue as I could try and retrace my steps?

Yes, I had the block pop-up windows in Safari > Preferences > Security checked.

Miss E

 

[Cory Cooper]

OK...thanks for the info.

No need to retrace your steps. I only asked because you should always download software from either the Mac App Store or the vendor's website directly, not via links from other sites.

So, Firefox isn't affected, but Safari is. That leads me to believe that your Mac is safe, it's something with Safari only. Check Safari > Preferences > Extensions to see if they are enabled or not, and if there are any listed there. If there are, let us know which ones and we'll go from there.

C

 

[Miss Emma]

OK...thanks for the info.

No need to retrace your steps. I only asked because you should always download software from either the Mac App Store or the vendor's website directly, not via links from other sites.

So, Firefox isn't affected, but Safari is. That leads me to believe that your Mac is safe, it's something with Safari only. Check Safari > Preferences > Extensions to see if they are enabled or not, and if there are any listed there. If there are, let us know which ones and we'll go from there.

C

Hi C,

Sure, here we go this is what's showing...

I'll avoid 3rd party sites for sure - I didn't go directly as you suggest. Lesson learned!!

 

[Cory Cooper]

You could try disabling Ominbar, then turning Extensions OFF and see if the issue persists. I would guess that may be part of the issue.

Try it and let us know.

C

 

[Miss Emma]

I did as you suggested.

Unfortunately it's still happening...

 

[Cory Cooper]

OK...

Have you tried resetting Safari?

Safari > Reset Safari... > check all boxes > click Reset

This will also delete all your stored Safari passwords, so make sure you know them so you can re-enter them on the websites you use.

If that doesn't work, then we can try either creating a test use to see if the issue persists, or doing a manual reset of Safari by deleting all of the preferences, cookies, and caches.

Also, do you have Java installed?

C

 

[Miss Emma]

I have gone through Safari > Reset Safari... > check all boxes > click Reset - no joy.

I do have Java installed.

I'm for resetting or whatever you think will work - really grateful for your help.

 

[oldscribe]

Hi,

Just to add to what CC has said which I fully agree with, would suggest if things persist after you have done all that you download Adblock Plus from here, its under security.
https://extensions.apple.com/?category=security

Also, do have Java installed.

May I ask why?
As this option is not in Safari now, as my screen shot.

 

[Cory Cooper]

oldscribe - it's not in Safari Preferences any longer, but you can download Java and install it. It then shows up in System Preferences as a preference pane.

Miss Emma - You could try AdBlock as oldscribe suggested before we go for a full manual reset.

C

 

[Miss Emma]

Thanks both,

I have just been to Safari > Preferences > Security and in Web content I unchecked enable Java script and it appears to have stopped.

I this is a fluke or a real solution?

Noticing in Bing search engine I no longer get the images etc.

 

[Cory Cooper]

I have to run out for a little while...be back to see where we are later in the day.

C

 

[oldscribe]

Hi CC,

Yes I know about the Java download was just wondering why Miss E was using it, as the usage of Java now seems to be forever waning. Other development tools, notably HTML5, are overtaking it in popularity.

Hi Miss E,

I have just been to Safari > Preferences > Security and in Web content I unchecked enable Java script and it appears to have stopped.

Strange that this has affected your browser in this way, as I defiantly have always enabled Java script.

But you are in good hands with CC.

 

[Miss Emma]

Thanks for the input oldscribe.

As the issue occurred today I deleted some weird looking files modified today - the pop-up ads appear to have stopped but now iTunes is repeatedly asking for my password.

It was mostly 'plist' files that I got rid of. I was comparing my mac with a friends as a means to identify what may be dodgy.

I really hope I haven't made it worse!

 

[oldscribe]

Hi,

It was mostly 'plist' files that I got rid of.

They can safely be deleted as they are recreated the next time the relevant application or system part is opened.

I really hope I haven't made it worse!

But you used the word "mostly" what else did you delete?

 

[Miss Emma]

Hi sorry, I'm not sure : / deleted and emptied trash.

Read something about the keychain and the iTunes password problem, that it's repeatedly asking me for it - is that worth me pursuing do you think?

 

[oldscribe]

Hi,

now iTunes is repeatedly asking for my password.

May sound silly but open iTunes go to the store menu and see if you can log out, if you can do so.
Then close iTunes and reopen.

 

[Cory Cooper]

Sorry...I ran out of time today to help. So, I will leave you with a few suggestions to try for now:

1. Disable Java for browsers using the Java preference pane: How do I disable Java in my web browser?
2. Re-enable JavaScript in Safari. Java and JavaScript are different things. Java should not be installed or enabled unless you have a specific reason to do so, as it has been the cause of many issues and can be an open channel for hacking. JavaScript is safe to use for the most part, and many larger company websites use/require it. On my Macs, I do not have Java installed, but I do have JavaScript enabled.
3. Follow oldscribe's advice regarding iTunes.

DO NOT delete any more files. It is only recommended to delete items in your User Library if you are instructed to do so or know what you are doing. You can cause more harm than good.

If these steps fix things great. If not, use Firefox until we can further diagnose the issue with you. I will be back to help more tomorrow.

Good luck,

C

 

[Spawn_Dooley]

Hi Miss Emm, Oldscribe suggested in post #10 that you download/install Adblock Plus (freebie), I would like to add my recommendation for this for both Firefox & Safari!

Regarding iTunes repeatedly asking for your password, have you by any chance set Safari to block cookies in Safari ~> Preferences ~> Security?