Author Topic: Safari 10.0.3 (Read 4313 times)

daryl66 · « **on:** February 14, 2017, 12:58:59 PM »

How would I go about re-installing Safari 10.0.3? I have gotten it infected with something, somehow. When I attempt to connect to a link I do not get the underline but when I click on the subject a tab appears (does not open until i click on it) saying "flash player is outdated" I did click on the update button the first time it happened then all sorts of crazy things happened. It installed 2 applications I did not want, which I have trashed and one I cannot find called "BLUR" that is some kind of password masking application. Is it possible to just re-install only Safari or do I hv to reinstall the OS in its entirety??

jchuzi · « **Reply #1 on:** February 14, 2017, 01:44:02 PM »

Your mistake was to click on that link. If unsure that Flash is up to date, go directly to Adobe's site to download it. Better yet, go to System Preferences > Flash Player > Updates and check from there. I would guess that reinstalling Safari by itself (even if that's possible) won't fix it because you have malware installed elsewhere. Unfortunately, I can't tell you where to look. Reinstalling the OS may not rid you of this problem unless you erase the drive and start from scratch. Do you have a Time Machine backup that you can use to revert to the previous state?

daryl66 · « **Reply #2 on:** February 14, 2017, 01:53:10 PM »

QUOTE(jchuzi @ Feb 14 2017, 02:44 PM) <{POST_SNAPBACK}>

Your mistake was to click on that link. Do you have a Time Machine backup that you can use to revert to the previous state?

YUP Asleep at the wheel. Total agreement. I so not use time machine, however I have a SuperDuper back up that is only a few days old so if all else fails.

jchuzi · « **Reply #3 on:** February 14, 2017, 03:10:28 PM »

If I were you, I would boot from the SD backup and run the computer from there. That way, if you have to clone back, you'll be as up to date as possible. Consider adding a TM backup as well.

Xairbusdriver · « **Reply #4 on:** February 14, 2017, 04:20:51 PM »

I doubt anything but Flash is 'infected' but that's bad enough.

Don't forget to check your Safari prefs->Security where you can click the "Plug-in Settings button and disable Flash in the list of items on the left-hand side of the window that pops up.

You might also want to completely <un-install Flash> until you get things sorted out. Couple of Safari extensions, Click2Flash and Ghostery do a pretty good job of blocking/allowing Flash, also. If you have to view Flash you might want to try Chrome, where it runs in a 'sandbox' and provides a bit more protection from bad (as if there was 'good') Flash software.

jchuzi · « **Reply #5 on:** February 14, 2017, 04:30:52 PM »

I don't think that Flash is involved in this. The "update" button that daryl cites was probably a ruse to get him to download malware that had nothing to do with Flash. I have seen that sort of popup myself and, when checking for a Flash update via either Adobe or the Flash pref pane, I have seen that my version of Flash did not need updating.

daryl66 · « **Reply #6 on:** February 14, 2017, 06:32:15 PM »

QUOTE(jchuzi @ Feb 14 2017, 05:30 PM) <{POST_SNAPBACK}>

I don't think that Flash is involved in this. The "update" button that daryl cites was probably a ruse to get him to download malware that had nothing to do with Flash. I have seen that sort of popup myself and, when checking for a Flash update via either Adobe or the Flash pref pane, I have seen that my version of Flash did not need updating.

Both replies applicable I think. More than safari involved. Screwy things going on in Mail & Firefox also. I found a couple of solutions to remove the malware but they all involved "Terminal" which literally scares me to death. SOOOO, I am currently in the process of erasing the drive and copying the super duper back up to it. It's about a week old so lost data will be minimal ( hopefully)

Different subject: This malware seemed to have also installed an application "BLUR" which seems to some kind of password manager. I couldnot find it. Not in the application folder, does not show up anywhere with search light or using the finder search. I did find a web page but the info is minimal. Curious

Daryl

Xairbusdriver · « **Reply #7 on:** February 14, 2017, 07:38:54 PM »

Found a couple of old apps at the iOS app store that affect images. Also a couple that run on the Mac. It could be the Blur password manager from a software company claiming to be in Boston called Ab[ i ]ne. Haven't researched them, but I'm never impressed with any software company that doesn't keep their Copyright year up-to-date; theirs still says "2015"!

The concept is OK (hides your insecurely transmitted password/financial/personal data). But it may be encrypting your data, sending it to their server, and decrypting it and forwarding it from there. In that case, it's still sending your data unencrypted at least part way. OTOH, it could be a VPN, but then it is processing any data you are sending, so you'll have to blindly trust them not to abuse it and it is still is being sent, unencrypted to the insecure site. Instead of trusting them, just don't send that kind of info unless the site is using httpS.

I'm a bit confused about your losing data. I assume you know when you clicked the sneaky button. Any Time Machine backup prior to that date/time should be safe. OTOH, why is your SD backup so far out of date? Aren't you running it at the end of the day when you know there is nothing screwed up?

daryl66 · « **Reply #8 on:** February 14, 2017, 09:24:34 PM »

QUOTE(Xairbusdriver @ Feb 14 2017, 08:38 PM) <{POST_SNAPBACK}>

Found a couple of old apps at the iOS app store that affect images. Also a couple that run on the Mac. It could be the Blur password manager from a software company claiming to be in Boston called Ab[ i ]ne. Haven't researched them, but I'm never impressed with any software company that doesn't keep their Copyright year up-to-date; theirs still says "2015"! :wallbash

I'm a bit confused about your losing data. I assume you know when you clicked the sneaky button. Any Time Machine backup prior to that date/time should be safe. OTOH, why is your SD backup so far out of date? Aren't you running it at the end of the day when you know there is nothing screwed up?

OK. SuperDuper did it's thing every thing appears to be good

Yea that is them Abne it is now gone

Re SD: As the years go by, my computer use declines, additionally no desktop machines, Therefore no permanent
external hd so back-up happens periodically instead of continuously. Read haphazardly, usually about once a week

Daryl

daryl66 · « **Reply #9 on:** March 23, 2017, 11:18:21 PM »

QUOTE(jchuzi @ Feb 14 2017, 05:30 PM) <{POST_SNAPBACK}>

I don't think that Flash is involved in this. The "update" button that daryl cites was probably a ruse to get him to download malware that had nothing to do with Flash. I have seen that sort of popup myself and, when checking for a Flash update via either Adobe or the Flash pref pane, I have seen that my version of Flash did not need updating.

The saga continues (kinda): After completely erasing the hd and reinstalling from a back-up everything was just lovely for a while. About a week ago The "update" notification appeared again, and now I am getting it about twice a day. (fool me once shame on you, fool me twice shame on me). I know now to ignore it but I cannot seem to find out what is triggering it. Happens when browsing with either Safari (10.0.3) or Firefox. (52.0.1). The support forums I have visited appear to be somewhat dated on this subject and nothing on OSX 10.3 about how to kill it.

HELP !!!!!!!!

Daryl

jchuzi · « **Reply #10 on:** March 24, 2017, 06:40:02 AM »

Does this happen when you are in a particular website? If so, please post a link so that we can confirm it. Also: Do you have ad-blocking and/or popup-blocking extensions installed and working?

daryl66 · « **Reply #11 on:** March 24, 2017, 12:09:43 PM »

QUOTE(jchuzi @ Mar 24 2017, 06:40 AM) <{POST_SNAPBACK}>

Does this happen when you are in a particular website? If so, please post a link so that we can confirm it. Also: Do you have ad-blocking and/or popup-blocking extensions installed and working?

No it seems to be very random and Yes I have Add Blocking Plus and Ghostery installed.

[attachment=3380:Untitled.jpeg]

Xairbusdriver · « **Reply #12 on:** March 24, 2017, 03:47:54 PM »

Looks like the standard Flash Player dialog to me. Anytime you visit a site that uses Flash, Adobe probably gets notified that you are using an out-of-date version, even if he site's use doesn't actually require the latest one. Most of the updates are actually security patching exercises. As far as I know Adobe has ceased development of the badly abused "technology".

You can always go the Adobe's site and download the update. Each time it is updated, you have the option to allow it to update automatically or ask. I don't allow much of anything to update itself automatically, certainly never Flash.

What does your Safari->Prefs->Security->Internet plug-ins: look like when you click the "Plug-in Settings..." button? I'm thinking you have told Safari (ay least) to "ask" in the Adobe Flash Player item. A screen shot would be handy.

So far, I don't think there has been any Mac OS actually "infected" by anything other than malware that required the user to enable it.

daryl66 · « **Reply #13 on:** March 24, 2017, 05:02:36 PM »

QUOTE(Xairbusdriver @ Mar 24 2017, 03:47 PM) <{POST_SNAPBACK}>

Looks like the standard Flash Player dialog to me.

So far, I don't think there has been any Mac OS actually "infected" by anything other than malware that required the user to enable it.

WELLLLLLL unfortunately this is the dialog box that I DUMBLY in fact double DIMBLY fell for a couple of months back which installed a whole bunch of garbage and lots of crud. I finally scrubbed the hd and I reinstalled it from a SD back-up. My guess is the malware was hidden on the back-up someplace as the pop-up went away for a while. Then last week it magically appeared once again, and for the last couple of days it has made its presence known several times a day on both Safari and FF.

Today I ran the "un-installer" following the step by step instructions which included removing a couple preferences SOOOOOOOOO we shall see what happens now.

Daryl

Xairbusdriver · « **Reply #14 on:** March 24, 2017, 05:39:09 PM »

QUOTE

WELLLLLLL unfortunately this is the dialog box that I DUMBLY in fact double DIMBLY fell for a couple of months back

Sorry if I answered unhelpfully. I know some gave said the problem didn't appear to have anything to do with Flash. And then there appears the Flash Player dialog.

I'm totally confused. Are you saying that the image you included in your post (#12) is not the one causing problems?

The use of non-specific words like "this", "that", and "it" can often be confusing when both parties don't know what the other means by the word. Thus, "...unfortunately this is the dialog box..." seems to imply that the image included in post #12 was not the dialog you think caused problems. Apparently, you don't have an image of the "problem causing" dialog. I am simply confused about including an image of somethings that now appears to be totally irrelevant to the thread. In that case, no need to display he settings of your "Plug-in Settings...", those settings would appear to be irrelevant, also, since they involve Flash.

News:

Author Topic: Safari 10.0.3 (Read 4313 times)