Safari redirecting to chinese website

If you allow a Trojan to be installed, the user's DNS records can be modified, redirecting incoming internet traffic through the attacker's servers, where it can be hijacked and injected with malicious websites and pornographic advertisements. The trojan also installs a watchdog process that ensures the victim's (that's you!) DNS records stay modified on a minute-by-minute basis.

You can read more about how, for example, the OSX/DNSChanger Trojan works here:

http://www.f-secure.com/v-descs/trojanosxdnschanger.shtml

SecureMac has introduced a free Trojan Detection Tool for Mac OS X. It's available here:

http://macscan.securemac.com/

The DNSChanger Removal Tool detects and removes spyware targeting Mac OS X and allows users to check to see if the trojan has been installed on their computer; if it has, the software helps to identify and remove the offending file. After a system reboot, the users' DNS records will be repaired.

(Note that a 30 day trial version of MacScan can be downloaded free of charge from:

http://macscan.securemac.com/buy/

and this can perform a complete scan of your entire hard disk. After 30 days free trial the cost is $29.99. The full version permits you to scan selected files and folders only, as well as the entire hard disk. It will detect (and delete if you ask it to) all 'tracker cookies' that switch you to web sites you did not want to go to.)

You don't need it.

No viruses that can attack OS X have so far been detected 'in the wild', i.e. in anything other than laboratory conditions.

It is possible, however, to pass on a Windows virus to another Windows user, for example through an email attachment. To prevent this all you need is the free anti-virus utility ClamXav, which you can download for Tiger and Leopard from (on no account install Norton Anti-Virus on a Mac running OS X):

http://www.clamxav.com/

The new version for Snow Leopard is available here:

http://www.clamxav.com/index.php?page=v2beta

HI,

From the Safari Menu Bar click Safari/Preferences then select the Security tab. Click: Show Cookies

Look for a cookie similar to this: apple.com Under Name: POD

Remove that cookie.

Relaunch Safari.

It's not a virus or malware.








Carolyn 🙂

HI,

It's not a virus. If you still have problems with redirects, try deleting the cookies.





🙂

This happened to me the other day...I was trying to go to Comcast.net and it redirected me to Pricegrabber. I got it cleared up (don't really remember how)...but the same redirect is back today. Please tell me what to do to get this to stop! Thanks

sorry wrong OS posted.

I'm also being redirected to Pricegrabber when I try and go to Facebook. I've deleted all the Pricegrabber cookies but when I relaunch Safari, they're all back in there again and still redirecting to Pricegrabber. Any other suggestions would be greatly appreciated!

I'm not sure how or why this works but it fixed the problem on my Mac. Found this on Answers.com:

------------------------

Quit Safari if it's running.
Open System Preferences > Network > Advanced and in the window where DNS Servers are located, add these two at the top of the list:

8.8.8.8
8.8.4.4

click Apply Now and quit System Preferences. Then restart Safari and see if the problem continues.

*replying to joybug*

This happened to me the other day...I was trying to go to Comcast.net and it redirected me to Pricegrabber. I got it cleared up (don't really remember how)...but the same redirect is back today.

Interesting ... that might be a Comcast DNS redirection, as per:

[Comcast Finally Launches DNS Redirection|http://www.dslreports.com/shownews/Comcast-Finally-Launches-DNS-Red irection-103386]

Do you still get that if you do an opt-out of the DNS redirection?

I'm not sure how or why this works but it fixed the problem on my Mac.

Unless you specify otherwise, you will be using the DNS servers supplied
by your ISP. By bypassing your ISP's DNS servers you are no longer being
redirected by their DNS. The ones you quoted are the Google public DNS
addresses. You could also use OpenDNS (I do).

Dave

After I did the OpenDNS as somebody suggested above, I have had no other problems.

A simpler solution that worked for me: reboot the computer and power down/up the modem/router.