Member Avatar for 2coolmama

when I googled a supermarket website, I was then prompted to a "warning" which was trying to take me to Antivurus.2009. livescan (I'm not putting in exact address as I don't want anyone else to click on it) I can give you te specifics if you need it. Can I block this address? Can a mac get this virus? Is theer anywhere I can go to remove this from happening again?

Is there a way I can just restore my system back a couple of days before this happened without using a disc? If I do need a disc, can you just tell me the details either way. Everything is running fine, but this has me worried. I thought you could net get a virus on a MAc.

Thanks in advance for any advice/directions.

  • 5 Contributors
  • 6 Replies
  • 902 Views
  • 2 Months Discussion Span
  • Latest Post Latest Post by litsa5

Dani AI

Generated

Short update and practical next steps tied to the thread: what saw is the classic scareware/tech‑support pop‑up that lures people to a fake “Antivirus” page. and were right to treat it as a browser scam rather than an automatic OS compromise; these pages try to trick you into downloading software or calling fake support. Treat the page as social engineering, not a silent infection. (isc.sans.edu)

Concrete cleanup checklist (do these in order):

  • Force‑quit the browser and restart it without restoring the previous session (hold Shift when reopening Safari or start a fresh window).
  • Clear browser history, website data/cookies and remove any unfamiliar extensions or permitted site notifications.
  • Look in System Settings → Login Items and ~/Library/LaunchAgents, /Library/LaunchAgents, /Library/LaunchDaemons for recent or strange entries and trash anything you did not install.
  • Run a macOS‑focused adware/anti‑malware scan (vendor examples include reputable Mac tools); these scans find PUPs and adware that cause redirects. (support.intego.com)

How to stop the redirects and block the site:

  • Easiest network‑wide fix: set your router or devices to a family/malware‑blocking DNS (Cloudflare Family or OpenDNS) so known scam domains are blocked for every device on your network.
  • Local option: map the offending hostname to 127.0.0.1 in /etc/hosts (requires admin). Both approaches are common ways to block repeat redirects. (adguard-dns.io)

If any payment info, credentials or remote‑access was given, assume compromise: change passwords (start with email and banking), alert your bank, and get a deeper sweep from a Mac specialist if you see unfamiliar accounts or processes. Do not call numbers shown on the pop‑up or give remote access to anyone who contacts you via those pages. (myantispyware.com)

(Thanks to , and — their observations line up with these practical follow‑ups.)

Recommended Answers

All 6 Replies

Member Avatar for Stylish

It sounds like you experienced a web browser (Safari, Opera or FireFox) pop-up window crafted to look like a virus alert.

If you clicked on the crafted window and were taken to a scary website, then it is possible you were infected.

No operating system is immune to viruses, rootkits or spyware.

Your first step is to determine whether or not you are infected. Hopefully someone can post a link or two to real anti-virus vendors. (there have been a wave of fake anti-virus companies and programs)

Member Avatar for Stylish

I spent an hour or two with ClamXAV today after your post.

You can find it here: http://www.clamxav.com/index.php?page=dl

It scanned my system. It uses ClamAV and updates the virus definitions.

Seems a typical anti-virus tool. It has some neat settings and a Finder plug-in.

Member Avatar for John A

Chances are, if you didn't download/install anything from those sites you should be fine. However, it wouldn't hurt to run a virus checker through your system just to be sure (use ClamXav like Stylish recommended).

Member Avatar for 2coolmama

IMPORTANT UPDATE!!!

Today I went to the Apple Store and brought my Mac. They checked it and I showed them what I googled and how I was redirected. When we went straight to the site it was fine.
They said that sight is made to look like a Windows Security site, but that MAC's are encrypted and it can't access anything, so basically there is no virus or spyware from it in this case. (As John A stated below--thanks!)

Just wanted to give an update so others with Mac's can rest easy too.
Thanks!

Member Avatar for Member #443652

It's not really that MAC's are encrypted it is that inorder for it to work you would have had to download it and then put in your password to install it, because anything that is going to install strange files into the file system needs your permission to do so. Also if i remember correctly that antivirus2009 virus only affects windows as it is a (.exe) executable. The only possible way for it to affect your mac is if you went to it in a boot camp install of windows or you were went to the site in a windows VM.

Member Avatar for litsa5

thanks for the the antivirus

thanks

thanks

when I googled a supermarket website, I was then prompted to a "warning" which was trying to take me to Antivurus.2009. livescan (I'm not putting in exact address as I don't want anyone else to click on it) I can give you te specifics if you need it. Can I block this address? Can a mac get this virus? Is theer anywhere I can go to remove this from happening again?

Is there a way I can just restore my system back a couple of days before this happened without using a disc? If I do need a disc, can you just tell me the details either way. Everything is running fine, but this has me worried. I thought you could net get a virus on a MAc.

Thanks in advance for any advice/directions.

thanks

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.