safari or ebay compromised/infected? (see screen shot)

[elf69]

This came up when replying to a message from a seller on ebay.

I'm not stupid to click scan now but clicking back or swiping touchpad does not get off this screen.
Had to close tab and start over.

Malwarebytes finds nothing on my Mac.

Browser is safari.
so is safari or ebay compromised?

This is not first time seen this or very similar full screen page.

I do find the red time warning at bottom funny.
it damaged or it not they do not wait for you (if was real)

 

[daflake]

Don't click anything, just close the page, it is a scam. If you look at the link, it isn't even pointing towards Apple.

 

[T'hain Esh Kelch]

If it not the first time you've seen it, try and take note of when exactly it happens (Website, what you did).
It is highly unlikely that eBay is affected, and since you say Malwarebytes reports nothing negative, I would assume that you've installed some extension in Safari that is making it happen.

 

[elf69]

I seen it a few times every time while browsing ebay.

I have not KNOWINGLY installed any extension to safari.

and I do not see it all the time it is random and not very often.
from memory 3 or 4 times in two weeks and I use ebay almost daily.

I will look up how to check extensions.

EDIT:

checked and zero extensions installed.
safari > preferences > extensions.

 

[Bruno09]

If you see this often, you might have a malware on board.

Use Malwarebytes.

If it does not find anything, use Etrecheck and post the output here.

 

[elf69]

Malwarebytes comes up clean.

will look at etrecheck
[doublepost=1513182768][/doublepost]here is the output:

EtreCheck version: 3.4.6 (460)

Report generated 2017-12-13 16:30:11

Download EtreCheck from https://etrecheck.com

Runtime: 3:39

Performance: Good



Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Click the [Clean up] link to delete unused files.



Problem: No problem - just checking



Hardware Information: ⓘ

MacBook Air (11-inch, Mid 2012)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Air - model: MacBookAir5,1

1 1.7 GHz Intel Core i5 (i5-3317U) CPU: 2-core

4 GB RAM Not upgradeable

BANK 0/DIMM0

2 GB DDR3 1600 MHz ok

BANK 1/DIMM0

2 GB DDR3 1600 MHz ok

Handoff/Airdrop2: supported

Wireless: en0: 802.11 a/b/g/n

Battery: Health = Normal - Cycle count = 57

iCloud Quota: 5.00 GB available


Video Information: ⓘ

Intel HD Graphics 4000 - VRAM: 1536 MB

Color LCD 1366 x 768


Disk Information: ⓘ

APPLE SSD TS064E disk0: (60.67 GB) (Solid State - TRIM: Yes)

[Show SMART report]

EFI (disk0s1 - MS-DOS FAT32) <not mounted> [EFI]: 210 MB

(disk0s2) <not mounted> [APFS Container]: 60.46 GB


USB Information: ⓘ

USB20Bus

hub_device

Apple Inc. FaceTime HD Camera (Built-in)

USB20Bus

hub_device

hub_device

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

USB30Bus


Thunderbolt Information: ⓘ

Apple Inc. thunderbolt_bus


Virtual disks: ⓘ

Macintosh HD (disk1s1 - APFS) / [Startup]: 60.46 GB (28.45 GB free)

Physical disk: disk0s2 60.46 GB (28.45 GB free)

(disk1s2) <not mounted> [Preboot]: 60.46 GB

Physical disk: disk0s2 60.46 GB

(disk1s3) <not mounted> [Recovery]: 60.46 GB

Physical disk: disk0s2 60.46 GB

(disk1s4) /private/var/vm [VM]: 60.46 GB

Physical disk: disk0s2 60.46 GB



System Software: ⓘ

macOS High Sierra 10.13.2 (17C88) - Time since boot: about 7 hours


Gatekeeper: ⓘ

Mac App Store and identified developers


Clean up: ⓘ

~/Library/LaunchAgents/com.skype.skype.shareagent.plist

/Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent

Executable not found!

One orphan file found. [Clean up]


System Launch Agents: ⓘ

[not loaded] 9 Apple tasks

[loaded] 161 Apple tasks

[running] 70 Apple tasks

[killed] 50 Apple tasks

50 processes killed due to insufficient RAM


System Launch Daemons: ⓘ

[not loaded] 37 Apple tasks

[loaded] 184 Apple tasks

[running] 78 Apple tasks

[killed] 31 Apple tasks

31 processes killed due to insufficient RAM


Launch Agents: ⓘ

[not loaded] com.teamviewer.teamviewer.plist (TeamViewer GmbH - installed 2017-11-07) [Lookup]

[not loaded] com.teamviewer.teamviewer_desktop.plist (TeamViewer GmbH - installed 2017-03-14) [Lookup]


Launch Daemons: ⓘ

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 bda8713f - installed 2016-06-13) [Lookup]

[running] com.malwarebytes.HelperTool.plist (Malwarebytes Corporation - installed 2017-11-20) [Lookup]

[loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-11-08) [Lookup]

[loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2015-09-11) [Lookup]

[loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2017-03-14) [Lookup]

[not loaded] com.teamviewer.teamviewer_service.plist (TeamViewer GmbH - installed 2017-11-07) [Lookup]


User Launch Agents: ⓘ

[loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2017-11-08) [Lookup]

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-11-07) [Lookup]

[loaded] com.skype.skype.shareagent.plist (? 9e64636f 0 - installed 2017-12-07) [Lookup] - /Applications/Skype.app/Contents/Library/LaunchServices/com.skype.skype.shareagent.bundle/Contents/MacOS/com.skype.skype.shareagent: Executable not found!


User Login Items: ⓘ

Messages Application - Hidden

(/Applications/Messages.app)

FreeChat for Facebook Messenger Application - Hidden

(/Applications/FreeChat for Facebook Messenger.app)

Dropbox Application - Hidden

(/Applications/Dropbox.app)

Skype Application - Hidden

(/Applications/Skype.app)

Thunderbird Application - Hidden

(/Applications/Thunderbird.app)

LoginHelper SMLoginItem - Hidden (Apple, Inc. - installed 2017-11-07)

(/Applications/Battery Health 2.app/Contents/Library/LoginItems/LoginHelper.app)


Internet Plug-ins: ⓘ

FlashPlayer-10.6: 22.0.0.192 (installed 2017-11-07) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2017-12-11)

Flash Player: 22.0.0.192 (installed 2017-11-07) Outdated! Update



3rd Party Preference Panes: ⓘ

Flash Player (installed 2016-06-13) [Lookup]


Time Machine: ⓘ

Time Machine not configured!



Top Processes by CPU: ⓘ

39% com.apple.WebKit.WebContent

28% parsecd

17% kernel_task

14% mediaremoted

12% mdworker


Top Processes by Memory: ⓘ

656 MB kernel_task

512 MB com.apple.WebKit.WebContent

145 MB Safari

100 MB Google Chrome

63 MB thunderbird


Top Processes by Network Use: ⓘ

Input Output Process name

750 KB 199 KB com.apple.WebKit.Networking

744 KB 45 KB mDNSResponder

385 KB 381 KB Dropbox

680 KB 43 KB netbiosd

465 KB 21 KB thunderbird


Top Processes by Energy Use: ⓘ

10.94 WindowServer

1.64 Google Chrome Helper

1.18 Google Chrome Helper

0.88 com.apple.WebKit.WebContent


Virtual Memory Information: ⓘ

393 MB Available RAM

29 MB Free RAM

3.62 GB Used RAM

364 MB Cached files

556 MB Swap Used


Software installs (last 30 days): ⓘ

Microsoft OneNote for Mac: (installed 2017-11-20)

Microsoft Word for Mac: (installed 2017-11-20)

Microsoft Excel for Mac: (installed 2017-11-20)

Microsoft PowerPoint for Mac: (installed 2017-11-20)

Microsoft Outlook for Mac: (installed 2017-11-20)

Disk Speed Test: 3.1 (installed 2017-12-01)



Install information may not be complete.


Diagnostics Events (last 3 days for minor events): ⓘ

2017-12-11 12:15:37 findmydeviced Crash [Open]

 

[Bruno09]

Nothing bad, but :

50 processes killed due to insufficient RAM
31 processes killed due to insufficient RAM

You should remove some login items (System Preferences / Users and groups / Login items) to free some RAM.

As for your scam alert, install Ublock.
It should prevent this from showing up again.

 

[elf69]

the item on login are ones I use.

skype, dropbox, iMessage, thunderbird.

this machine is an air so 4gb soldered ram.
but when open the monitor says only 1.89GB ram used for apps (at time of running the above app)