Argh. Please help. Copybook Auut Smartbizsearch redirect problem still!

Question

Level 1

0 points

Argh. Please help. Copybook Auut Smartbizsearch redirect problem still!

Hi,

I would admit to being a bit of a MAC novice. It could also be said that I may have been a little bit naive in terms of internet security etc in the past. My bad.

My computer seems to be infected with a DNS changer type bug. Any Google searches in Safari or Firefox come up with results that redirect me to Copybook/Auut/Smartbizsearch type sites. Also, the Google results page looks different to normal in that there are no sponsored links or GoogleAds (not necessarily a bad thing) and if I go back to the results and click on the link again it normally does go the selected page.

I have found this problem explained in several forums and have followed the advice, as best I can, to get rid of it. I seemed to get some success by running Intego's VirusBarrier X5. The first time I searched in Google, after it had finished scanning and I deleted to 4 pieces of malware that it found, the results page was back to normal but after a little while the **** problem had reappeared. I then ran the scan again but it did not find any malware the second time around!

Any help would be hugely appreciated as it is really starting to wind me up.

Thanks in advance.

Dual 2.7 GHz PowerPC G5, Mac OS X (10.5.5)

Posted on Oct 23, 2008 3:11 AM

Reply

Answer 1

Klaus1

Level 9

52,749 points

Oct 23, 2008 4:23 AM in response to halelodge

Hello hatelodge and welcome to the forums!

Firstly, you do not need to worry about viruses on a Mac. No virus in the wild has ever affected OS X.

You do not therefore need to waste money on anti-virus programs. However, as a Mac can pass on Windows viruses to a Windows user, you should download and install the free utility ClamXav from

http://www.clamxav.com/

and this is all you need in respect of viruses.

But as you correctly surmise, Trojans and some other forms of malware can affect even a Mac.

One example is a Trojan such as the one called 'DNSChanger' or 'OSZ.RSPlug', which can alter the DNS settings of your network connection. This particular Trojan can be inadvertently installed if you have come across certain Quicktime movies where got a window stating that you have to download and install a particular codec in order to see the video.

If you have agreed to that installation, your system can be infected and your DNS settings altered, which results in your system using the wrong DNS servers, which can slow web surfing to a crawl.

This can be fixed by downloading and running a freeware utility called DNSChanger Removal Tool which you can download from here:

http://www.versiontracker.com/dyn/moreinfo/macosx/33696

Once you have run that utility you have to re-boot your Mac, then reset Safari, and re-enter your DNS settings in System Preferences/Network.

Reply

Answer 2

halelodge Author

Level 1

0 points

Oct 23, 2008 5:18 AM in response to Klaus1

Hi Klaus1. Thanks for the quick reply.

I had already tried both clamxav and the DNSChanger Removal Tool without success as this as suggested on several forums. It hadn't seemed to work but I didn't realise I had to re-boot, reset safari and re-enter my DNS settings. I have now done this and the problem seems to be sorted. Thank you for the advice. It is such a relief to finally have it sorted.

One more question though if you don't mind. The DNS servers window in my System Preferences/Network now only shows one server (192.168.1.1) and it is grayed out. Is that ok?

Thanks again.

Reply

Answer 3

Klaus1

Level 9

52,749 points

Oct 23, 2008 6:13 AM in response to halelodge

As to your question, I must avoid getting into deeper water as you are on Leopard and I am on Tiger, and things may therefore be a little different.

That number looks like your IP/router address as supplied by your ISP and should not be changed, but your DNS settings can be.

Here are my settings:

Those numbers are optional, but many of use them (they are sourced from 'Open DNS') as they tend to speed up Safari quite a lot, and can therefore be recommended.

As you can see my IP Address and Router are not greyed out. As your IP address is only one digit from mine, are you also with BT Broadband? We have the same Router number!

Please post back with info on to what extent your settings differ from mine.

P.S. Info on Open DNS:

https://www.opendns.com/homenetwork/start/device/apple-osx-tiger

Message was edited by: Klaus1

Reply