966      iPhone_iPad_Mac_apple

How to track an event to debug a popup?

I keep getting this popup of this website https://ssp.fwrdy.com/
I want to check what caused this, where do I look for events to track down this adware installed on my MAC?

and no i dont want to install malwarebytes to remove it.

I have trying to figure out using chrome in enabled logging mode but I logs doesn't seems to help much

log excerpt is

[41311:35843:0926/052647.401725:VERBOSE1:web_request_time_tracker.cc(181)] WR percent 1391: https://discussions.apple.com/gcrm-products-discussion.jspa?userId=19041179&prod uctCount=10&currentPage=1: 1/894 = 0.00187821

[41311:35843:0926/052647.410186:VERBOSE1:web_request_time_tracker.cc(181)] WR percent 1400: https://discussions.apple.com/6.0.3.02b975a02b975a0/themes/apple/css/tiny_mce_ov erride.css: 3/484 = 0.00706567

[42688:775:0926/052647.563302:INFO:cpu_info.cc(50)] Available number of cores: 4

[41311:35843:0926/052647.595852:VERBOSE1:web_request_time_tracker.cc(181)] WR percent 1405: https://api.v1s.badgeville.com/sdk/js/v1/badgeville.loader.js?_=1506385607065: 9/529 = 0.0177102

[41316:775:0926/052647.621754:VERBOSE1:gles2_cmd_decoder.cc(3396)] GL_EXT_packed_depth_stencil supported.

[41316:775:0926/052647.623771:VERBOSE1:gles2_cmd_decoder.cc(3396)] GL_EXT_packed_depth_stencil supported.

[41311:35843:0926/052647.694694:VERBOSE1:web_request_time_tracker.cc(181)] WR percent 1401: https://discussions.apple.com/plugins/communities-plugin/resources/styles/macro. css: 3/768 = 0.00450265

[41311:35843:0926/052647.711838:VERBOSE1:web_request_time_tracker.cc(181)] WR percent 1392: https://discussions.apple.com/__services/v2/rest/rteImages/settings?objectId=-1& objectType=2&containerId=18624219&containerType=2020: 1/1188 = 0.00118391

[42688:775:0926/052647.724026:VERBOSE1:script_context.cc(111)] Created context:

  extension id:           (none)

  frame:                  0x22d6a3681d30

  URL:                   

  context_type:           WEB_PAGE

  effective extension id: (none)

  effective context type: WEB_PAGE

[42688:775:0926/052647.724622:VERBOSE1:script_context.cc(111)] Created context:

  extension id:           (none)

  frame:                  0x0

  URL:                   

  context_type:           UNSPECIFIED

  effective extension id: (none)

  effective context type: UNSPECIFIED

[42688:775:0926/052647.725106:VERBOSE1:dispatcher.cc(424)] Num tracked contexts: 1

[42688:775:0926/052647.729511:VERBOSE1:script_context.cc(111)] Created context:

  extension id:           (none)

  frame:                  0x22d6a3681d30

  URL:                   

  context_type:           WEB_PAGE

  effective extension id: (none)

  effective context type: WEB_PAGE

[42688:775:0926/052647.729579:VERBOSE1:script_context.cc(111)] Created context:

  extension id:           (none)

  frame:                  0x0

  URL:                   

  context_type:           UNSPECIFIED

  effective extension id: (none)

  effective context type: UNSPECIFIED

[42688:775:0926/052647.729966:VERBOSE1:dispatcher.cc(424)] Num tracked contexts: 2

[41311:35843:0926/052647.994857:VERBOSE1:web_request_time_tracker.cc(181)] WR percent 1408: https://ssp.fwrdy.com/collect-client-data?impression_url=//ssp.fwrdy.com/impression%3Fbid_id%3D5f9a8e86-a251-11e7-bc17-aa896f82d3e7: 0/389 = 0.00118779

[41311:35843:0926/052647.995583:VERBOSE1:web_request_time_tracker.cc(181)] WR percent 1409: https://loadingpaqes.info/jo/is?id=16508786-9303-56F2-9E5F-38E20A677412&d=bf05da3 9-8513-4ffa-9460-b7545e6d0b5b&cl=upd: 0/262 = 0.00252158

[42688:775:0926/052647.996114:VERBOSE1:dispatcher.cc(554)] Num tracked contexts: 1

[42688:775:0926/052647.996401:VERBOSE1:dispatcher.cc(554)] Num tracked contexts: 0

[42688:775:0926/052647.999781:VERBOSE1:script_context.cc(111)] Created context:

  extension id:           (none)

  frame:                  0x22d6a3681d30

  URL:                   

  context_type:           WEB_PAGE

  effective extension id: (none)

  effective context type: WEB_PAGE

[42688:775:0926/052647.999968:VERBOSE1:script_context.cc(111)] Created context:

  extension id:           (none)

  frame:                  0x0

  URL:                   

  context_type:           UNSPECIFIED

  effective extension id: (none)

  effective context type: UNSPECIFIED

最后更新：2017-09-26 13:45:26

  上一篇： Strange square around my cursor pointer

  下一篇： Turning on Messaging