Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Keep getting redirected

Ok, so I was trying to watch an episode of a show I missed, something came up and said I needed a codec and I clicked (STUPID, Yes, I am, I know...). Nothing came out though and I don't recall actually typing in my administrative password. So now, Safari and Firefox will redirect me whenever I search for something on a search engine. I get redirected to a weird site that has similar search results. Also, sometimes when I type in an address on the address bar it will take me somewhere else. I looked up a bunch of stuff online about this and it sounds like that DNSchanger trojan. The places I read that spoke about this said you can see if you're 'infected' by doing certain things, like looking to see if there's a specific file on your Internet Pluggins folder, or looking up crontabs on Terminal, as well as checking your DNS on the Network Preferences of AirPort. HOWEVER, every time I search for this, there's nothing there, in any of them. No crontabs, no weird thing on DNS, no 'pluggins.settings' on my Internet Pluggins folder...nothing. I have Norton Internet Security and though I ran it various times and it found/deleted 'trojans' and a 'zango adware' thing, Safari keeps doing this whole redirect thing every time I search or every once in a while when I type something in the address bar. It's super annoying and I don't know what to do and if this is affecting my computer somehow or damaging it in a way I don't know and can't see. I'm not sure if this question was answered before, though I did try to look before I posted. I could only find a thread about it being highjacked but the user's problem was solved fairly quickly and the advice given was of no use to me. I'd really REALLY appreciate the help. Thanks.

MacBook Pro, Mac OS X (10.6.3), Intel Core 2 Duo

Posted on Jun 7, 2010 12:33 PM

Reply
9 replies

Jun 7, 2010 1:00 PM in response to GiaV66

HI and Welcome to Apple Discussions...



I have Norton Internet Security and though I ran it various times and it found/deleted 'trojans' and a 'zango adware' thing,


That's the problem right there.

Follow the instructions here to tninstall Norton. http://www.macworld.com/article/150466/2010/04/uninstall_norton.html
"
Quote: And the proper procedure is to locate the Symantec Solutions folder inside the Applications folder at the root level of your hard drive, launch the Symantec Uninstaller application, select the Symantec AntiVirus Corporate, Norton AntiVirus, and Norton AntiVirus Auto-Protect entries, and click the Uninstall button. Confirm your decision when prompted and then enter your administrator password in the space provided. You’ll be asked to restart your Mac. Do so and Norton should be gone for good."

After you uninstall Norton, install Open DNS - Free/Basic That will stop the redirects.

You are running Snow Leopard v10.6.3. Information here re: malware and virus protection in SL.
http://www.apple.com/macosx/security/


















Carolyn 🙂

Jun 7, 2010 1:52 PM in response to GiaV66

You can try Open DNS while Norton is installed, but no guarantees.

Might want to search these forums for Norton and view the results.

Ok, so I was trying to watch an episode of a show I missed, something came up and said I needed a codec and I clicked (STUPID


Apparently your Mac required a particular plugin. That's not necessarily indicative
of malware being installed or of anything having an adverse effect on your Mac.




🙂

Jun 7, 2010 2:23 PM in response to Carolyn Samit

Oh, no not the Open DNS program. I'm sorry, I wasn't specific, I meant the reason for it redirecting you, why does the search engine do that?

Thanks a bunch Carolyn. I've been racking my brain trying to fix this thing and fearing it was something bad, but this was such an easy fix, I don't know why I didn't do this before! Thanks 🙂

Keep getting redirected

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.