2017 iMac has annoying virus pop up scare.

Discussion in 'iMac' started by mattg3, Aug 14, 2019 at 4:46 AM.

  1. mattg3 macrumors 6502

    Joined:
    Dec 8, 2010
    Location:
    ma.
    #1
    So I know my 27 inch 2017 iMac is not infected but every so often when I go on my Audio video forum the screen gets taken over by a sign saying my iMac has three viruses and sometimes a voice will come on saying same thing. I shut down safari and it's gone.Checked my download folder and nothing suspicious there. Before this started I would get an announcement my flash player outdated which is not true and I just ignored that.Now that's gone but this virus announcement has taken its place Any way to get rid of this or just ignore it?
     
  2. MacDawg macrumors Core

    MacDawg

    Joined:
    Mar 20, 2004
    Location:
    "Between the Hedges"
    #2
    Probably just a garden variety browser malware

    Run the free Malwarebytes application and see what you get
    Also, might want to clean out your cookies and such on your browser
     
  3. mattg3 thread starter macrumors 6502

    Joined:
    Dec 8, 2010
    Location:
    ma.
    #3
    Could you recommend a safe free malwarebytes app. thanks
     
  4. niteflyr macrumors 6502a

    Joined:
    Nov 29, 2011
    Location:
    Southern Cal
  5. Fishrrman macrumors P6

    Fishrrman

    Joined:
    Feb 20, 2009
    #5
    Download MalwareBytes and run it:
    https://www.malwarebytes.com

    IMPORTANT:
    Select the "home" option.
    It's a FREE download

    IMPORTANT:
    You DO NOT NEED TO BUY A SUBSCRIPTION to run MalwareBytes.
    It will run FOREVER IN FREE MODE.
    When you open it, IGNORE the button to "Upgrade Now".
    Just click "Scan Now".
    Again, you DO NOT have to buy the pay-for version!
     
  6. jerwin macrumors 68020

    Joined:
    Jun 13, 2015
    #6
    Do you have a version of Flash installed?

    (I half suspect that you would still get redirected to a site that encourages you to download flash-- and not the official distribution, either)
     
  7. mikehalloran macrumors 68000

    Joined:
    Oct 14, 2018
    Location:
    The Sillie Con Valley
    #7
    Yep, one of the bad actors is attempting to take over — or has already done so.

    I use the free version of Avira. It's pretty good at finding this crap and kicking it to the curb also.

    If you need to run Flash (unfortunately, thanks to SalesForce, I must), the only place to check for and download updates is from the Flash control panel in System Preferences. Never ever ever ever check from or go to a link in a pop-up, no matter how official it looks—it ain't.
     
  8. komatsu macrumors 6502

    Joined:
    Sep 19, 2010
    #8
    Etrecheck is good at malware removal also when Malwarebytes for Mac fails.
     
  9. jtara macrumors 68000

    Joined:
    Mar 23, 2009
    #9
    Yes. Don't use the site(s) where you got this popup. THEY are infected. NOT your computer.

    It is just some crafty, annoying Javascript/HTML/CSS that is designed to make it difficult for you to close the popup. It is just trying to scare you into purchasing some "solution".

    It might have been included in an ad if the site is using a sketchy ad network.

    It might have actually been added to the website by a hacker/virus/etc.

    It is common for the latter to happen with poorly-maintained/unattended sites that have poor admin passwords.

    And I tend to agree. Nothing that scans for problems on your computer is going to fix a problem on the website!
     
  10. mattg3 thread starter macrumors 6502

    Joined:
    Dec 8, 2010
    Location:
    ma.
    #10
    Thanks to all.Interesting that today I checked my flash player in system preferences and it said an update was available. I got it and its official update and so far no more pop up scares. I also let the site of the forum where I kept getting the pop up know about this issue.They are the AVS Forum which are huge and if they let this stuff get into their site its going to annoy thousands.
     
  11. mikehalloran macrumors 68000

    Joined:
    Oct 14, 2018
    Location:
    The Sillie Con Valley
    #11
    Go ahead and give them the heads-up but you cannot assume that they are the source of this.
     
  12. niteflyr macrumors 6502a

    Joined:
    Nov 29, 2011
    Location:
    Southern Cal
    #12
    I'm on the AVS forums everyday. I've never seen anything like that there.
     
  13. mattg3 thread starter macrumors 6502

    Joined:
    Dec 8, 2010
    Location:
    ma.
    #13
    Its linked up to someone answering a statement you make on some topic. Your email tells you someone has answered you and when you click on the link to reply up comes the statement you are infected with three virus and a voice starts talking. close the browser and its gone.
     
  14. niteflyr macrumors 6502a

    Joined:
    Nov 29, 2011
    Location:
    Southern Cal
    #14
    Weird. I'm running Ad Guard ad blocker extension in Safari. Maybe that's why I don't see those pop ups.
     
  15. jtara macrumors 68000

    Joined:
    Mar 23, 2009
    #15
    I can't think of any good reason for having Flash Player installed. Unless you are dependant on some site that requires it, I would strongly recommend removing it.

    So, you got a phishing email. It probably did not actually come from AVS Forum. And I'm sure the URL that you click leads to somewhere other than AVS Forum.

    I'll bet somebody got ahold of the AVS Forum member roster (I seem to recall that in fact that happened - I am a member - I think we were asked to reset passwords...) Either that or member email addresses are publicly listed on the site, or perhaps that is an option that some users don't know how to disable.
     
  16. mikehalloran macrumors 68000

    Joined:
    Oct 14, 2018
    Location:
    The Sillie Con Valley
    #16
    Not possible for many of us. I can't do my job without it.

    Flash was supposed to be gone from the internet January 2017. Clearly, that didn't happen.
     
  17. whosthis macrumors member

    Joined:
    Aug 21, 2008
    #17
    I agree it seems to be a spam email trying to sell you something. Or a fishing email - did it ask you to login?

    In any case, changing your password there wouldn't hurt.
     
  18. Fishrrman, Aug 15, 2019 at 7:59 AM
    Last edited: Aug 15, 2019 at 11:39 AM

    Fishrrman macrumors P6

    Fishrrman

    Joined:
    Feb 20, 2009
    #18
    To get the latest bona-fide copy of the Flash updater/installer, use this URL:
    https://fpdownload.macromedia.com/pub/flashplayer/latest/help/install_flash_player_osx.dmg

    WARNING!
    Clicking this link will ALWAYS initiate an immediate direct download of the flash installer to your drive.

    Then... just open the installer and run it.

    During the install, I ALWAYS check the option:
    "Never check for updates".
    That way it can't "update" or install "behind my back".

    I disable "automatic updates" for ALL my software, INCLUDING Apple software.
     

Share This Page

17 August 14, 2019