Virus on my MBA?

Discussion in 'MacBook Air' started by Aneres11, Oct 23, 2012.

  1. macrumors regular

    Joined:
    Oct 2, 2011
    #1
    Hey guys.

    Having some trouble with my MBA and have no idea what's going on!

    Basically in the last few days I have been browsing the net as normal and every site I come across (including this one), there are numerous words within text that are hyperlinked to some stupid 'You have won an iPad' or other competition thing.

    Also, I just logged into facebook and there are advert banners everywhere. I went to comment on a picture and an advert for Neurofen pain killers popped up over my text box? Underneath it just said 'ads not by facebook'.

    I don't get it. Is this some sort of virus or something? I tried a google search and it's not bringing anything up at all. At a bit of a loss. I use Chrome so opened Safari to see if it was a browser issue, but there are random hyperlinked words on virtually every site I browse using that too.

    Any help on what to do to get rid of this would be great. I have no clue!
    Cheers.
     
  2. simsaladimbamba

    Joined:
    Nov 28, 2010
    Location:
    located
    #2
    Can you make a or several screenshot/s and attach it/them to your next post?

    And what Mac OS X version and Chrome version and Safari version do you use? Did you try Firefox or Opera yet? Does it also happen in another, even temporarily created, user account?

    As for the virus theory:
    Currently there are zero viruses affecting Mac OS X in public circulation, but there are other kinds of malware existing, that can infect your Mac.
    To learn more about malware in Mac OS X and what steps can be taken to protect yourself, read the following F.A.Q.:
     
  3. Aneres11, Oct 23, 2012
    Last edited by a moderator: Oct 23, 2012

    thread starter macrumors regular

    Joined:
    Oct 2, 2011
    #3
    Ok here are some screen shots.
    Yes I tried Firefox too. All the browsers are up to date I believe.

    [​IMG]

    [​IMG]

    [​IMG]

    [​IMG]

    [​IMG]

    [​IMG]

    That's a few examples - Facebook with the banners and also the hyperlink off a forum I am a member of. They are on every site. I have no idea where it's come from or how to get rid of it. Any help?
     
  4. macrumors 601

    Joined:
    Aug 27, 2012
    #4
    Pop-up disabled? It's by default I believe.

    pixs: Holly crap, that's LOTS of spam. :(
     
  5. thread starter macrumors regular

    Joined:
    Oct 2, 2011
    #5
    I know right. It has suddenly just boomed as well since I made this thread. On twitter it's everywhere. But these aren't pop ups. They're not opening in new windows they look like part of the site like they've been put there to advertise.

    The hyperlink one is the most annoying.

    Does anyone have any advice? :confused:
     
  6. macrumors 601

    Joined:
    Aug 27, 2012
    #6
    Just for grins, go to safari's Preferences -> Security. BLOCK POPUP and DISABLE JAVA. Reboot.

    If still happens, I gotta go u got a malware.
     
  7. macrumors newbie

    .Pook.

    Joined:
    Oct 21, 2012
    #7
    This is why I installed avast! on my MBA
     
  8. macrumors newbie

    Joined:
    Jan 18, 2007
    Location:
    Chillicothe, OH
    #8
    I deal with this sort of thing on Windows machines every day. It's "adware".

    Under Safari => Preferences -> Extensions, is there anything installed? If so, disable/remove it. Failing that, try resetting Safari (Safari -> reset Safari).
     
  9. macrumors 6502a

    whoknows87

    Joined:
    Aug 8, 2012
    Location:
    S.Florida
    #9
    Download Ad Block
    will take care of all those unwanted ads, download it as an extension via safari
     
  10. macrumors 68020

    munkery

    Joined:
    Dec 18, 2006
    #10
    Flashback is a click fraud malware that generates revenue by pushing ads to infected users.

    Are you fully patched?
     
  11. thread starter macrumors regular

    Joined:
    Oct 2, 2011
    #11
    Just done this - it has appeared to have done the trick.

    Thank you thank you thank you! :)

    Will keep an eye on this though from now on.
     

Share This Page