Safari redirected to a malware site/blank white page, am I safe

Question

Safari redirected to a malware site/blank white page, am I safe

Relatively new Mac user so I apologize if this is being overly worried. I was visiting a website, did not click anything, suddenly safari was redirected to an odd sounding web address which I won't name here because I don't want anyone visiting it. The page was completely blank, tried to hit the back button but kept forwarding me to the site. Upon going to google and other sites, I never got the redirect again. No popups occurred, nothing was downloaded or installed, nor was I asked to download or install anything. I did some checking on the site it was registered a week ago, nothing came up yesterday from Google. Today it did turn up on a site called malware domain list and it stated that the site redirects you to a fake av.

Computer is working fine, does anyone think I need to scan the computer? My assumption is that because the page was blank it was perhaps going after Windows users and thus I was not asked to download anything. Thanks for your time and help.

Mac OS X (10.6.2)

Posted on Dec 24, 2009 7:01 PM

Reply

Answer 1

Klaus1

Level 9

52,879 points

Dec 25, 2009 6:14 AM in response to GordonGekko1975

It sounds like the website in question has been hacked.

If you allow a Trojan to be installed, the user's DNS records can be modified, redirecting incoming internet traffic through the attacker's servers, where it can be hijacked and injected with malicious websites and pornographic advertisements. The trojan also installs a watchdog process that ensures the victim's (that's you!) DNS records stay modified on a minute-by-minute basis.

You can read more about how, for example, the OSX/DNSChanger Trojan works here:

http://www.f-secure.com/v-descs/trojanosxdnschanger.shtml

SecureMac has introduced a free Trojan Detection Tool for Mac OS X. It's available here:

http://macscan.securemac.com/

The DNSChanger Removal Tool detects and removes spyware targeting Mac OS X and allows users to check to see if the trojan has been installed on their computer; if it has, the software helps to identify and remove the offending file. After a system reboot, the users' DNS records will be repaired.

(Note that a 30 day trial version of MacScan can be downloaded free of charge from:

http://macscan.securemac.com/buy/

and this can perform a complete scan of your entire hard disk. After 30 days free trial the cost is $29.99. The full version permits you to scan selected files and folders only, as well as the entire hard disk. It will detect (and delete if you ask it to) all 'tracker cookies' that switch you to web sites you did not want to go to.)

Reply