2

Since the last 12 hours or so, I've been facing a virus that's somewhat peculiar. When I open websites, and click any link on those websites, I get a new pop-up tab that opens a link from ad.adsmatte.com or youradexchange.com or something like that.

Currently there are no extensions in my Safari, or the other browsers, in fact. The only recent download that I've made that might be the cause is a torrent version of the film CitizenFour(which seemed trustable enough) using Transmission however, I stopped the download after a couple minutes so I don't think thats the cause. I have deleted those files using rm -rf and before that, I have not downloaded anything except Adobe Flash Updater in the last 3 days. I am quite sure that there are no local manifestations of the virus on my computer, I have used the dashboard and seen that it's not iframe's that I click that lead to this, so it's really weird for a virus.

After googling around a little bit, I landed on a reddit post in /r/linux which is here. Here's a screenshot of the pop-up using Safari:

screenshot

Any help would be appreciated.

I am using a 2012 iMac with OS X 10.10.1. This is the 1st time I've ever seen a virus on my mac, and I'm freaking out really, please help... The bug isn't reproducible on other devices including my iPhone, my friend's Ubuntu, so it's not a bug in the website as the post in /r/linux claims..

Also, the software Adwaremedic (version 2.2.3) doesn't detect ad-ware on my mac.

  • Why the heck are you still on 10.9.1… you're missing a whole slew of security updates. I could understand not wanting 10.10 for now, but to not even update the intermediate versions is just lax. Check your DNS isn't hijacked, at least - forms.fbi.gov/check-to-see-if-your-computer-is-using-rogue-DNS – Tetsujin May 27 '15 at 19:28
  • @Tetsujin I sincerely apologise, Im on 10.10.1, thats yosemite, right ? – Nib May 27 '15 at 19:29
  • Yes. Probably eliminates more than half my initial concerns :) I'd still check the DNS thing & also get 10.10.3 - I don't think it will immediately fix everything, but it's best to be up to date, in any major release – Tetsujin May 27 '15 at 19:30
  • 1
    Just to really put a nail in the DNS coffin, if you open terminal app, list the IP address of two web hosts you are having issues surfing. Also, do the ads appear when using this site? host apple.stackexchange.com should get you 104.16.13.13 and 104.16.12.13 – bmike May 27 '15 at 19:34
  • 1
    support.apple.com/en-us/HT203987 Take a look at this support guide. – tron_jones May 27 '15 at 20:05

You must log in to answer this question.

Browse other questions tagged .