14 Replies Latest reply: Jan 28, 2013 10:12 AM by Linc Davis
jcusic Level 1 Level 1 (0 points)

When I attempt to go to www.google.com (my home page) Facebook site pops up instead.   Even if I type www.google.com in the address facebook come up.

I have checked my Preferences and it is set to google.  Any ideas.  

I suspect some how the security certificates for google and facebook some how got swapped or pointed to the wrong site.  Anyone know how to remove the security certificates for the web broswers.   This happens on Safari, Firefox and Google Chrome.


MacBook Pro, Mac OS X (10.7.5), Safari, Firefox, Google Chome
  • 1. Re: when go to google.com the Facebook web page shows up
    Linc Davis Level 10 Level 10 (118,285 points)

    Select the text below (not including the blank space at the end of the line), then copy it to the Clipboard (command-C):

     

    www.google.com

     

    Launch the Network Utility application in any of the following ways:

     

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

     

    ☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

     

    ☞ Open LaunchPad. Click Utilities, then Network Utility in the icon grid.

     

    Step 1

     

    Select the Lookup tab and paste (command-V) into the address field. Press return. Post the output that appears below – the text, please, not a screenshot.

     

    Step 2

     

    Select the Ping tab and do the same.

  • 2. Re: when go to google.com the Facebook web page shows up
    jcusic Level 1 Level 1 (0 points)

    Lookup has started…

     

    Lookup  output...

    Trying "www.google.com"

    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43463

    ;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 0

     

    ;; QUESTION SECTION:

    ;www.google.com.                              IN          ANY

     

    ;; ANSWER SECTION:

    www.google.com.                    53          IN          A          74.125.227.81

    www.google.com.                    53          IN          A          74.125.227.84

    www.google.com.                    53          IN          A          74.125.227.80

    www.google.com.                    53          IN          A          74.125.227.83

    www.google.com.                    53          IN          A          74.125.227.82

    www.google.com.                    124          IN          AAAA          2001:4860:4002:802::1010

     

    Received 140 bytes from 192.168.1.1#53 in 24 ms

     

    Ping oputput....

     

    Ping has started…

     

    PING www.google.com (74.125.227.116): 56 data bytes

    64 bytes from 74.125.227.116: icmp_seq=0 ttl=251 time=11.246 ms

    64 bytes from 74.125.227.116: icmp_seq=1 ttl=251 time=10.318 ms

    64 bytes from 74.125.227.116: icmp_seq=2 ttl=251 time=11.409 ms

    64 bytes from 74.125.227.116: icmp_seq=3 ttl=251 time=10.432 ms

  • 3. Re: when go to google.com the Facebook web page shows up
    Linc Davis Level 10 Level 10 (118,285 points)

    This link should take you to Google:

     

    Google

     

    Does it?

  • 4. Re: when go to google.com the Facebook web page shows up
    jcusic Level 1 Level 1 (0 points)

    Yes it does for Safari, Firefox,   Google Chome post a site asking you to select

    Chrome Web store,  Google Drive, Gmail, Google search, Youtube.

     

    When I select "Google Search" it goes to facebook, If it then paste in the IP address in the addr bar it does go to google..

     

    This is really odd.

  • 5. Re: when go to google.com the Facebook web page shows up
    Linc Davis Level 10 Level 10 (118,285 points)

    Please read this whole message before doing anything.

    This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.

    The purpose of the test is to determine whether your problem is caused by third-party system modifications that load automatically at startup or login.

     

    Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode* and log in to the account with the problem. The instructions provided by Apple are as follows:
    • Shut down your computer, wait 30 seconds, and then hold down the shift key while pressing the power button.
    • When you see the gray Apple logo, release the shift key.
    • If you are prompted to log in, type your password, and then hold down the shift key again as you click  Log in.
    *Note: If FileVault is enabled under OS X 10.7 or later, or if a firmware password is set, or if the boot volume is a software RAID, you can’t boot in safe mode.

     

    Safe mode is much slower to boot and run than normal, and some things won’t work at all, including wireless networking on certain Macs.  The next normal boot may also be somewhat slow.

    The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

     

    Test while in safe mode. Same problem?

     

    After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of the test.

  • 6. Re: when go to google.com the Facebook web page shows up
    jcusic Level 1 Level 1 (0 points)

    Booted in Save mode as suggested.   All 3 browsers went to the google home page.

    Also tried the google link you enter earlier that worked too.

  • 7. Re: when go to google.com the Facebook web page shows up
    Linc Davis Level 10 Level 10 (118,285 points)

    Please read this whole message before doing anything.
      
    This procedure is a diagnostic test. It won’t solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
       
    Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.

     

    These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.

     

    Below are instructions to enter some UNIX shell commands. The commands are harmless, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects.

     

    Some of the commands will line-wrap or scroll in your browser, but each one is really just a single line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then either copy or drag it. The headings “Step 1” and so on are not part of the commands.

     

    Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. The other steps should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.

     

    Launch the Terminal application in any of the following ways:

     

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

     

    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

     

    ☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.

     

    When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” and press return. You should then get a new line ending in a dollar sign.

     

    Step 1

     

    Triple-click the line of text below to select it:
    kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'
     
    Copy (command-C) the selected text to the Clipboard. Then click anywhere in the Terminal window and paste (command-V). Post the lines of output (if any) that appear below what you just entered. You can do that by copy-and-paste as well. Omit the final line ending in “$”. No typing is involved in this step.
        
    Step 2

     

    Repeat with this line:
    sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfix|x)/{print $3}'
     
    This time you'll be prompted for your login password, which you do have to type. It won't be displayed when you type it. Type it carefully and then press return. You may get a one-time warning not to screw up. You don't need to post the warning. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

     

    Note: If you don’t have a login password, you’ll need to set one before taking this step. If that’s not possible, skip to the next step.

     

    Step 3
    launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'
     
    Step 4
    ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta}* L*/Fonts 2> /dev/null
      
    Important: If you formerly synchronized with a MobileMe account, your me.com email address may appear in the output of the above command. If so, anonymize it before posting.

     

    Step 5
    osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null
     
    Remember, steps 1-5 are all copy-and-paste — no typing, except your password. Also remember to post the output.

     

    You can then quit Terminal.

  • 8. Re: when go to google.com the Facebook web page shows up
    jcusic Level 1 Level 1 (0 points)

    Sorry for the slow responce...  Work tends to get in the way....   Thankf for your assistance!!!

     

    Step 1;  No output

    Step 2;  

         fi.polar.polard

         fi.polar.libpolar

         com.leapfrog.connect.shell

         com.adobe.fpsaud

     

    Step 3;

    com.042e.FarensiusHelper

    com.google.keystone.user.agent

    com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae

     

    Step4;

    /Library/Components:

     

    /Library/Extensions:

     

    /Library/Frameworks:

    AEProfiling.framework

    AERegistration.framework

    Adobe AIR.framework

    AudioMixEngine.framework

    EWSMac.framework

    NyxAudioAnalysis.framework

    PluginManager.framework

    iTunesLibrary.framework

     

    /Library/Input Methods:

     

    /Library/Internet Plug-Ins:

    AdobePDFViewer.plugin

    AdobePDFViewerNPAPI.plugin

    Flash Player.plugin

    GarminGpsControl.plugin

    JavaAppletPlugin.plugin

    Quartz Composer.webplugin

    QuickTime Plugin.plugin

    Unity Web Player.plugin

    Unused

    flashplayer.xpt

    nsIQTScriptablePlugin.xpt

     

    /Library/Keyboard Layouts:

     

    /Library/LaunchAgents:

     

    /Library/LaunchDaemons:

    com.adobe.fpsaud.plist

    com.apple.remotepairtool.plist

    com.leapfrog.connect.shell.plist

    fi.polar.libpolar.plist

    fi.polar.polard.plist

     

     

    /Library/PreferencePanes:

    Flash Player.prefPane

     

    /Library/PrivilegedHelperTools:

    com.leapfrog.connect.shell

     

     

    /Library/QuickLook:

    iWork.qlgenerator

     

    /Library/QuickTime:

    AppleIntermediateCodec.component

    AppleMPEG2Codec.component

     

    /Library/ScriptingAdditions:

     

    /Library/Spotlight:

    Microsoft Office.mdimporter

    iWork.mdimporter

     

    /Library/StartupItems:

    Jaksta

     

    /etc/mach_init.d:

     

    /etc/mach_init_per_login_session.d:

     

    /etc/mach_init_per_user.d:

     

    Library/Address Book Plug-Ins:

    SkypeABDialer.bundle

    SkypeABSMS.bundle

     

    Library/Fonts:

     

    Library/Frameworks:

    EWSMac.framework

     

    Library/Input Methods:

    .localized

     

    Library/Internet Plug-Ins:

     

    Library/Keyboard Layouts:

     

    Library/LaunchAgents:

    com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist

    com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.450ADFA1-92C6-4C9B-AAC9-4B2 AD4790C0B.plist

    com.google.keystone.agent.plist

     

    Library/PreferencePanes:

     

     

     

    Step 5;

    Monitor, Garmin Lifetime Map Updater, iTunesHelper, Fastest Free YouTube Downloader, WebSync, Dropbox

  • 9. Re: when go to google.com the Facebook web page shows up
    jcusic Level 1 Level 1 (0 points)

    I did  get this message in Google Chrome,  this appeared when I clicked Google search...

     

    Address;

    http://www.facebook.com/webhp?source=search_app

     

    The requested URL "/webhp?source=search_app", is invalid.

    Reference #9.3cf24317.1359173482.6377d1e3

  • 10. Re: when go to google.com the Facebook web page shows up
    Linc Davis Level 10 Level 10 (118,285 points)

    Please read this whole message carefully, especially the warnings, before doing anything.

    1. The changes to your configuration suggested here should be considered provisional; they may not solve your problem, or they may remove functionality that you find useful. If a third-party system modification that you want to keep is causing the problem, seek help from its developer.

    2. WARNING: Back up all data now if you haven’t already done so. Before proceeding, you must be sure you can restore your system to its present state, even if it becomes unbootable. If you’re not sure you can do that, STOP — DON’T CHANGE ANYTHING. If you’re dissatisfied with the results of the procedure suggested below, restore from your backup. I will not be responsible for the consequences, and I will not be able to help, if you ignore this warning.

    3. You should either remove or update the following system modification(s), if an update is available from the developer:

    N/A

    and definitely remove at least the following:

    Leapfrog Connect

    4. Whatever you remove must be removed completely, and (unless otherwise specified in this message) the only way to do that is to use the uninstallation tool, if any, provided by the third-party developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job. I can't be more specific, because I don't install such things myself. Please do your own research.

    Here are some general guidelines to get you started. Suppose you want to remove something called “BrickYourMac.” First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickyourmac.com. (That may not be the actual name of the site; if necessary, search the web for the product name.) If you don’t find anything on the website or in your search, email the developer. While you're waiting for a response, download BrickYourMac.dmg and open it. There may be an application in there such as “Uninstall BrickYourMac.” If not, open “BrickYourMac.pkg” and look for an Uninstall button.

    Again, please don't ask me to do this research for you. You can do it better than I can, because I haven't installed the product and I may not even know what it is.

    If you can’t remove software in any other way, you’ll have to erase your boot volume and perform a clean reinstallation of OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.

    WARNING: Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" that purport to remove software.

    5. I recommend that you never reinstall the modifications marked with a dagger (†) above, if any. If your problem is resolved after uninstalling all the above modifications and rebooting, but you still want to use some of those not marked with a dagger, you can experiment with putting them back, one at a time, testing carefully after each step. Keep in mind that system modifications may be incompatible with each other or with future OS X updates, so it may not be clear which one is at fault.

    6. If you still have problems after making the suggested changes and rebooting, post again. Remember: if you don’t like the results of this procedure, you can undo it by restoring from the last backup you made before you started.

  • 11. Re: when go to google.com the Facebook web page shows up
    MadMacs0 Level 4 Level 4 (3,735 points)

    jcusic wrote:

     

    Step4;

     

    /Library/Internet Plug-Ins:

     

    Unused

    Check this one. If it's a directory (folder), then it's probably OK. If it's a file then I don't recognize it as a valid plug-in. Move it to the desktop and reboot to see if that makes any difference. Don't throw the file away in case it's something new.

  • 12. Re: when go to google.com the Facebook web page shows up
    MadMacs0 Level 4 Level 4 (3,735 points)
  • 13. Re: when go to google.com the Facebook web page shows up
    jcusic Level 1 Level 1 (0 points)

    Okay....  this was the message I was looking for and why I'm thinking the security certificates may be mess up...

    Using Firefox, Google is set as the home page.   Instead of hitting the main Google page I get this message..

     

    This Connection is Untrusted

         

             You have asked Firefox to connect

    securely to www.google.com, but we can't confirm that your connection is secure.

              Normally, when you try to connect securely,

    sites will present trusted identification to prove that you are

    going to the right place. However, this site's identity can't be verified.

           

                      What Should I Do?

             

                If you usually connect to

    this site without problems, this error could mean that someone is

    trying to impersonate the site, and you shouldn't continue.

     

    Here is the link in the address bar...

    https://www.google.com/search?q=sears&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en- US:official&client=firefox-a

     

    When it hits that site I believe it verifies the site with the certificate assigned to it...  It they don't match then you get this message stating the site doesn't agree with the certificate that was presesnted.  "Do you want to continue?".   I'm some what suppisious I pick up some type of spyware or key logging virus that reports what sites I visit and what I enter..

               

    By the way I did get rid of the Leapfrog entries... 

  • 14. Re: when go to google.com the Facebook web page shows up
    Linc Davis Level 10 Level 10 (118,285 points)

    To confirm, you don't get this message when doing the same thing in safe mode. Right?

     

    If that is right, how did you remove Leapfrog?