Skip navigation

browsers redirect to random sites

704 Views 11 Replies Latest reply: Mar 31, 2013 9:57 AM by WZZZ RSS
M_Joan Calculating status...
Currently Being Moderated
Mar 29, 2013 6:04 AM

I'm using a iMac running OS10.6.8

Suddenly, all browsers are redirecting to random sites.

For example, if I enter an address for www.fairway.com, the browser takes me to http://www.activegolfsolutions.com/

The same thing happens if I click on a link in Google.

This happens when using Firefox, Safari, and Google Chrome.


I had this happen at work recently on a PC

 

Is this a virus?

What can I do?

iMac, Purchased July 2010
  • Radiation Mac Level 5 Level 5 (4,630 points)
    Currently Being Moderated
    Mar 29, 2013 6:11 AM (in response to M_Joan)

    Did you recently OK a request on your Mac's screen, while one of those browsers was open, for a download of some type to perform?

  • WZZZ Level 6 Level 6 (11,875 points)
    Currently Being Moderated
    Mar 29, 2013 6:25 AM (in response to M_Joan)

    I'd start using OpenDNS, which should prevent those redirects.

     

    Enter these 2 numbers in DNS in System Preferences>Network>Advanced above any others already there and hit Apply.

     

    208.67.222.222

     

    208.67.222.220

     

    Go to http://www.opendns.com/welcome/ to check that it's working.

     

    Note: only use this if you are relatively close to one of these locations. Anywhere along the East and West coasts and Central US should be OK. Western Europe as well.

     

    Amsterdam, The Netherlands

        Chicago, Illinois, USA

        Dallas, Texas, USA

        Frankfurt, Germany

        London, United Kingdom

        Los Angeles, California, USA

        Miami, Florida, USA

        New York, New York, USA

        Palo Alto, California, USA

        Seattle, Washington, USA

        Singapore

        Washington, DC, USA

        Hong Kong, China

     

    The only drawback to using OpenDNS is that, if you misspell an address, it will hijack that from google to its own search results page.

  • Frank Caggiano Level 7 Level 7 (22,760 points)
    Currently Being Moderated
    Mar 29, 2013 6:29 AM (in response to M_Joan)

    Who is your ISP? Have you contacted them to report the problem?

     

    It is most likely a problem with their DNS server and these types of things usually resolve themselves in a short amount of time (the ISP can't afford to have their customers being messed up like this).

     

    If after contacting your ISP the problem remains post back.

     

    regards

  • WZZZ Level 6 Level 6 (11,875 points)
    Currently Being Moderated
    Mar 29, 2013 6:33 AM (in response to WZZZ)

    http://www.zdnet.com/is-the-new-mac-trojan-hitting-os-x-browsers-really-a-trojan -7000012937/

     

    A general FYI: If it's this, it's been blocked by Apple's XProtect anti-malware in 10.6 through 10.8.

  • WZZZ Level 6 Level 6 (11,875 points)
    Currently Being Moderated
    Mar 29, 2013 6:40 AM (in response to Frank Caggiano)

    Personally, I wouldn't waste any time and effort bothering with the ISP and their beaurocracy, with possibly mixed results. I"d go straight to OpenDNS and most likely get this sorted out immediately.

  • andyBall_uk Level 6 Level 6 (17,470 points)
    Currently Being Moderated
    Mar 29, 2013 8:13 AM (in response to M_Joan)

    that particular redirect is not related to faulty dns resolution... others may be & you should try WZZZ's suggestion, or even google's if opendns grabbing mis-typed addresses is annoying.

     

    There's a redirect webpage on the server at fairway.com sending all browsers to activegolfsolutions

  • WZZZ Level 6 Level 6 (11,875 points)
    Currently Being Moderated
    Mar 29, 2013 8:40 AM (in response to andyBall_uk)

    Actually, searching for fairway.com does show a golf site. I think the OP probably meant to enter fairwaymarket.com, a well known supermarket chain in the NY area. But that doesn't explain the redirects for other sites.

     

    Screen shot 2013-03-29 at 11.37.20 AM.png

  • andyBall_uk Level 6 Level 6 (17,470 points)
    Currently Being Moderated
    Mar 29, 2013 8:50 AM (in response to WZZZ)

    right you are - Fairway > Active Golf is expected, if M_Joan gives another example or two, we might see some cause, although switching dns to test is likely quicker.

  • Linc Davis Level 10 Level 10 (107,650 points)
    Currently Being Moderated
    Mar 29, 2013 8:10 PM (in response to M_Joan)

    The same thing happens if I click on a link in Google.

     

    The example you gave is not valid. Please give another example of what you consider to be an abnormal redirect.

  • WZZZ Level 6 Level 6 (11,875 points)
    Currently Being Moderated
    Mar 31, 2013 9:57 AM (in response to M_Joan)

    Can you please say what exactly Sophos found.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.