Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

7009

macrumors newbie
Original poster
Mar 22, 2012
1
0
Hi there

I am looking for help identifying a possible form of adware on my Macbook Pro. I'm not sure if this is something that everyone has, but seeing as it's only appeared recently it makes me think that I've downloaded something I shouldn't have. I've been told time and again that Mac's cannot get viruses and the like, but I believe mine has contracted some form of adware or other advertising encryption.

Below are a few screenshots of the ads on Facebook using Safari (with AdBlocker) and Wikipedia on both on Safari (with AdBlocker) and Firefox (without any ad remover extension). Sorry for the size, couldn't work out how to resize:

Screenshot2012-03-22at52737PM.png


Screenshot2012-03-22at52804PM.png


Screenshot2012-03-22at52907PM.png


Screenshot2012-03-22at52720PM.png


It appears to only affect Facebook, Wikipedia and some search bars on websites. I have had Safari AdBlocker installed for quite a while and has done the trick for hiding all ads, however in the past few days these ads have come back again. It's only this type of advertising, the ones that say "ads not by this site" or "ads not by Facebook", not proper advertisments. I have checked Facebook's advertising methods and they claim that the places in which they are appearing (bottom of the page, on the sidebar ect.) are not them and are most likely some form of adware or malvertising.

I have run a few scanning programs such as Clamxav and Sophos Anti-Virus but have not found anything.

I'm running OS X v10.6.8 on a mid-2009 MacBook Pro model.

First of all - what, if anything, have I got?
Is there a file directory most likely to contain an adware or 'of the like' file that I can delete without the need for a full scan?
Is there a better scanner to use for Mac's?
Can this sort of problem be taken into an apple store to be assessed and for them to fix if I can't find a solution?
 
Last edited by a moderator:
I've been told time and again that Mac's cannot get viruses and the like, but I believe mine has contracted some form of adware or other advertising encryption.
There are zero Mac OS X viruses in the wild, and zero adware.
Sorry for the size, couldn't work out how to resize:
To make images smaller, change the beginning and ending IMG tags to TIMG, as maflynn has done for you.
It appears to only affect Facebook, Wikipedia and some search bars on websites. I have had Safari AdBlocker installed for quite a while and has done the trick for hiding all ads, however in the past few days these ads have come back again.
Have you verified that your adblockers are turned on? Also, make sure there isn't a filter active that allows such ads.
I have run a few scanning programs such as Clamxav and Sophos Anti-Virus but have not found anything.
That's because this has nothing to do with malware. Sophos should be avoided, as it could actually increase your Mac's vulnerability, as described here and here. You should uninstall it.

The most effective method for complete app removal is manual deletion:
First of all - what, if anything, have I got?
You've got some advertising, nothing more. No malware or adware of any kind.
Is there a file directory most likely to contain an adware or 'of the like' file that I can delete without the need for a full scan?
No, there isn't.
Is there a better scanner to use for Mac's?
ClamXav is probably the best choice, but again, this isn't malware, so scanning is useless.
Can this sort of problem be taken into an apple store to be assessed and for them to fix if I can't find a solution?
It's simply advertising. Make sure your ad blocking software is up to date, activated, and there are no exceptions that could be allowing ads to get through. If your adblocker isn't catching everything, install others, such as GlimmerBlocker. I run several adblocker apps all the time, and I rarely see an ad.
 
Not a virus

Hey,
I don't if you still need this but I was having the same problem for a few months now but today I got tired of these ads so I decided to look for a solution on google. After reading several articles and several forums I came to conclusion that it must be an add that I downloaded and enabled to post adds and that I would find it in my Firefox Extensions. It might be called Codec or something along the way SO TRY THIS:

Tools-->Add-ons-->Extensions-->Disable one by one (only the adds you added recently or don't recognize the name, Mine was "Coupon Savings") and check after each to see which one was causing it.

P.S. Do NOT download any antivirus or any program that claims it can remove it for you, they R just trying to rip you off!!!

Good Luck
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.