Safari Hacked?

Question

Level 1

23 points

Safari Hacked?

When I try to open Apple/communities in Safari I get a blank page saying...

"for fun by tojen" on a blank page.

Very strange.
I did a print screen if anyone want to see.

Imac, Mac OS X (10.5.4)

Posted on Aug 14, 2010 4:15 AM

Reply

Answer 1

Aug 14, 2010 4:19 AM in response to n3nto

HI,

Please post the link you are referring to.

If you are running v10.5.4 as your profile suggests, click your Apple Menu / Software Updates. You need to be running v10.5.8.

Carolyn 🙂

Reply

Answer 2

n3nto Author

Level 1

23 points

Aug 14, 2010 4:24 AM in response to Carolyn Samit

Here is the print screen.
http://www.flickr.com/photos/13924946@N05/4890654198/

Still doing it.

Reply

Answer 3

Aug 14, 2010 4:27 AM in response to n3nto

Interesting.

Ok... In a Finder window click your Home Folder in the Sidebar on the left. Then on the right open the Library folder then the Cookies folder.

Move the Cookies.plist file to the Trash.

From that same Library folder then open the Caches folder then the com.apple.Safari folder.

Move the cache.db from the Caches folder to the Trash.

Restart your Mac and try that link.

🙂

Reply

Answer 4

n3nto Author

Level 1

23 points

Aug 14, 2010 4:48 AM in response to Carolyn Samit

Thanks for your help Carolyn

Did what you requested:
First time I opened communities nothing happened but when I tried again it started giving the same message. Posted a new print screen http://www.flickr.com/photos/13924946@N05/4890084605/

Do you think I have a virus on my Mac?, this just happens on the Apple site/communities with Safari. Tried with another browser and all is well.

(I have 10.6.4 installed, the first time i posted forgot to put the correct version)

Reply

Answer 5

Aug 14, 2010 4:56 AM in response to n3nto

HI,

Snow Leopard has you covered for viruses and malware, read here. http://www.apple.com/macosx/security/

No, I don't think it's a virus as I can access that link without a problem.

Did you try deleting those files?

🙂

Reply

Answer 6

n3nto Author

Level 1

23 points

Aug 14, 2010 4:56 AM in response to Carolyn Samit

Yes, I found and deleted those files then emptied the trash before restarting. Opened Safari then went to Apple/communities

Same message appeared.

Reply

Answer 7

Aug 14, 2010 4:58 AM in response to n3nto

Ok...

Open Keychain Access (Applications/Utilities) Select Passwords on the left.

Delete your AppleID keychain.

Relaunch Safari. Go here: http://discussions.apple.com/index.jspa

Login with your user name and password. Click Yes when prompted.

🙂

Reply

Answer 8

n3nto Author

Level 1

23 points

Aug 14, 2010 4:58 AM in response to Carolyn Samit

I meant a virus on my Mac.

I google the message and the only thing I can find similar is...
"for fun by trojan"

The message I get is "for fun by tojan" a bit different but it could be a similar thing.

Reply

Answer 9

Aug 14, 2010 4:59 AM in response to n3nto

There aren't any Mac viruses period.

🙂

Reply

Answer 10

n3nto Author

Level 1

23 points

Aug 14, 2010 5:09 AM in response to Carolyn Samit

No more message, thank you.

Can I pick your brain with just one other question?
Does this mean that my keychain was compromised? I had many passwords there. I have two other keychains one for airport express and one for airport extreme, should I delete these also?

Reply

Answer 11

Aug 14, 2010 5:12 AM in response to n3nto

You're welcome.

No, your keychain wasn't compromised.

No, do not remove anymore keychains. Leave your Airport keychains as they are.

AppleDiscussions is one of the busiest forums on the net. Suffice to say logging in can be problematic at times. Sometimes resetting the keychain or removing cookies or the cache.db file can help.

🙂

Reply

Answer 12

n3nto Author

Level 1

23 points

Aug 14, 2010 5:14 AM in response to Carolyn Samit

Great, Thanks again for your help
That was quite troubling.

Take care
Joao

Reply

Answer 13

Aug 14, 2010 5:14 AM in response to n3nto

You're welcome. 🙂

Reply

Answer 14

n3nto Author

Level 1

23 points

Aug 14, 2010 6:28 AM in response to Carolyn Samit

Carolyn sorry to bother you again but this is troubling me.

If I had to delete my keychain to get rid of the problem then how is it possible that the keychain with all my passwords was not compromised.

Can you run me through the thought process so that I can understand the reasoning as I am a Mac simpleton

My windows days of building my own PCs sort of ended a few years ago with my first Imac. Must be getting dumber!!!

Reply

Answer 15

andyBall_uk

Level 7

20,516 points

Aug 14, 2010 6:42 AM in response to n3nto

You're not the only one seeing this when accessing discussions - read here

The only way you might get such a thing is either your dns (on mac/router/isp) being compromised, or some temporary hack/diversion at a server between you & apple, assuming not apple itself.

Reply