9 Replies Latest reply: Jun 7, 2010 2:34 PM by GiaV66
GiaV66 Level 1 (0 points)
Ok, so I was trying to watch an episode of a show I missed, something came up and said I needed a codec and I clicked (STUPID, Yes, I am, I know...). Nothing came out though and I don't recall actually typing in my administrative password. So now, Safari and Firefox will redirect me whenever I search for something on a search engine. I get redirected to a weird site that has similar search results. Also, sometimes when I type in an address on the address bar it will take me somewhere else. I looked up a bunch of stuff online about this and it sounds like that DNSchanger trojan. The places I read that spoke about this said you can see if you're 'infected' by doing certain things, like looking to see if there's a specific file on your Internet Pluggins folder, or looking up crontabs on Terminal, as well as checking your DNS on the Network Preferences of AirPort. HOWEVER, every time I search for this, there's nothing there, in any of them. No crontabs, no weird thing on DNS, no 'pluggins.settings' on my Internet Pluggins folder...nothing. I have Norton Internet Security and though I ran it various times and it found/deleted 'trojans' and a 'zango adware' thing, Safari keeps doing this whole redirect thing every time I search or every once in a while when I type something in the address bar. It's super annoying and I don't know what to do and if this is affecting my computer somehow or damaging it in a way I don't know and can't see. I'm not sure if this question was answered before, though I did try to look before I posted. I could only find a thread about it being highjacked but the user's problem was solved fairly quickly and the advice given was of no use to me. I'd really REALLY appreciate the help. Thanks.

MacBook Pro, Mac OS X (10.6.3), Intel Core 2 Duo
  • Carolyn Samit Level 10 (103,365 points)
    HI and Welcome to Apple Discussions...



    I have Norton Internet Security and though I ran it various times and it found/deleted 'trojans' and a 'zango adware' thing,


    That's the problem right there.

    Follow the instructions here to tninstall Norton. http://www.macworld.com/article/150466/2010/04/uninstall_norton.html
    "
    Quote: And the proper procedure is to locate the Symantec Solutions folder inside the Applications folder at the root level of your hard drive, launch the Symantec Uninstaller application, select the Symantec AntiVirus Corporate, Norton AntiVirus, and Norton AntiVirus Auto-Protect entries, and click the Uninstall button. Confirm your decision when prompted and then enter your administrator password in the space provided. You’ll be asked to restart your Mac. Do so and Norton should be gone for good."

    After you uninstall Norton, install Open DNS - Free/Basic That will stop the redirects.

    You are running Snow Leopard v10.6.3. Information here re: malware and virus protection in SL.
    http://www.apple.com/macosx/security/


















    Carolyn
  • GiaV66 Level 1 (0 points)
    I installed Norton today, this problem has been going on for a few days now, even before Norton. Is there any way both can run together?

    Message was edited by: GiaV66
  • Carolyn Samit Level 10 (103,365 points)
    You can try Open DNS while Norton is installed, but no guarantees.

    Might want to search these forums for Norton and view the results.

    Ok, so I was trying to watch an episode of a show I missed, something came up and said I needed a codec and I clicked (STUPID


    Apparently your Mac required a particular plugin. That's not necessarily indicative
    of malware being installed or of anything having an adverse effect on your Mac.




  • GiaV66 Level 1 (0 points)
    Ok, So I did that and it seems that it has stopped...for now. I hope it's stopped for good. So what exactly is this DNS redirecting thingy? Is it a malware, spyware, or any other ware? Thanks so much for your help!
  • Carolyn Samit Level 10 (103,365 points)
    HI,

    Not malware or spyware... not at all. It's a safe way to surf the net without redirects.

    Read here: http://www.datadoctors.com/help/columns/21706-What-exactly-does-OpenDNScom-do/

    And yes I use it... 4 + years. This way your ISP cannot redirect you when you do a search.












    Carolyn You're welcome...
  • GiaV66 Level 1 (0 points)
    Oh, no not the Open DNS program. I'm sorry, I wasn't specific, I meant the reason for it redirecting you, why does the search engine do that?

    Thanks a bunch Carolyn. I've been racking my brain trying to fix this thing and fearing it was something bad, but this was such an easy fix, I don't know why I didn't do this before! Thanks
  • Carolyn Samit Level 10 (103,365 points)
    I meant the reason for it redirecting you, why does the search engine do that?


    So you will hopefully click on their ads at the links you are redirected to and spend $$$$$$.












  • GiaV66 Level 1 (0 points)
    Thanks again! Really appreciate it
  • Carolyn Samit Level 10 (103,365 points)
    You are welcome.