Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

PowerFullMac

macrumors 601
Original poster
Oct 16, 2006
4,000
2
I just went to I Can Has Cheezeburger to check some good ol' lolcats and suddenly my Safari window shrunk and I got a message saying I might have malware... I clicked cancel and my Safari window comes back to normal and I get redirected to some "Antivirus 2009" site with a fake virus scan that said I had a bunch of malware... What was really annoying is it cut my tabs bar in half to it became unresponsive!

Bloody annoying ads, this really takes it over the top.
 
I just checked it out. This has got to be the worst I've seen.
 
Weird, it works fine for me. Have you got the pop-up blocker turned on in Safari?

I guess the ads rotate so different ones come up every time.

The Safari pop-up blocker sucks, things are always getting past it.
 
I've seen it before, but not on the LOLCats site. It would be worse if it we were on windows machines, as it would automaticly download a fake antivirus program, which would then start giving bogus alerts, demanding that we download their paid version. I would say that the LOLCats website has been hacked. I hope they catch whoever did this and force them to use their own software...
 
*phew* it is not just me, what a relief. Yes today while visiting LOLCatz my safari window closed and I got the annoying add. Only way I could get rid was to 'force quit' safari and start again ... gave up after the third time.

For windows users this particular virus is hyper nasty. Bud of mine got it on all four of the families computers, laptops and work laptop they had to wipe the whole hard drives [and still they won't change to Mac's :rolleyes:]

Guess it will give up in time?
 
Oh, phew. I thought I had a virus. It's really annoying for me. But I was on Yahoo when a second one happened to me. A third on google. What is going on?
 
Oh, phew. I thought I had a virus. It's really annoying for me. But I was on Yahoo when a second one happened to me. A third on google. What is going on?

It must be a real ad, probably going through AdWords, shouldnt be long before its taken out of rotation, though.
 
Oh, phew. I thought I had a virus. It's really annoying for me. But I was on Yahoo when a second one happened to me. A third on google. What is going on?

What other tabs did you have open when you saw this? It COULD be that the redirection is being inserted into multiple websites through security holes. Then again, your ISP may need to be patched.

Hopefully, these bozos will wind up in prison...
 
What other tabs did you have open when you saw this? It COULD be that the redirection is being inserted into multiple websites through security holes. Then again, your ISP may need to be patched.

Hopefully, these bozos will wind up in prison...

Actually, I didn't have any other tabs open.
 
Well, it looks like LOLCats is back up. A bit more research turned up an accusation that "Scan Antivirus 2009" has been distributed by the Motigo webstat counter. I'm guessing webmasters should beware...
 
Nasty pop-up

My wife ran across this a couple of days ago. And I got it this morning.

It is particularly nasty in that it renders Safari controls useless. The only way to get back to normal is to force-quit Safari.

I am surprised that there is nothing at Apple support about it. It looks like a security flaw in Safari.

I had Pop-Up Blocking on; that is no help.
 
so i guess safari isn't as secure as they claim it to be huh?

Umm, no, that's not really a logical conclusion. This isn't a security issue. It's a web ad.

Of course, it may be a security issue for icanhascheezburger.com, if it was indeed a hack that planted the ad, and it would be an issue for Windows computers, but not for a Mac and certainly not related to Safari in any way.

jW
 
This horrible software has been around for quite some time. I have it pop-up on Firefox as well. :mad:

Currently, I block all these domain names at my router (all the same software/malware) - add dot com to the end of these (except the dot net one):

malware-scan
antivirusforall
drivecleaner
advancedcleaner
main-scanner
0scan
microantivirus2009
clearantispyware
onlineprivatescan
freeantivirus-online
yourantispywareplus
online-antivirus dot net
quick-scanner

Over time all of these domains have hosted the same malware. On Windoze, it installs and then falsely advises that you have a heap of viruses and asks you to "purchase" the full version to remove them - as somebody already pointed out.

It's difficult because I rarely see the same domain name twice.
 
Last edited by a moderator:
It is particularly nasty in that it renders Safari controls useless. The only way to get back to normal is to force-quit Safari.i

I believe it's a Java script that's run in the Safari window when it's opened. It's very similar to being "RickRolled" in that it removes ALL controls to the application window.

The only way to get out of this is to force quit the application.
 
I believe it's a Java script that's run in the Safari window when it's opened. It's very similar to being "RickRolled" in that it removes ALL controls to the application window.

The only way to get out of this is to force quit the application.

Being Rick Rolled dosent do that, but there is something called Last Mesure which shows goatese on replicating Safari windows while shouting "hey everybody I'm looking at goatese porno!" though your speakers and you cant get rid of without forcing a shut down by holding your power button... Now that is bad!
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.