A mac virus?

jester4jc wrote:
Aaaaaaah! So what do I do? I've run ClamXav and iAntiVirus and they both don't find anything!
Do I just have to wait for it to completely crumble before my eyes? How long do I have...how do I cleanse my computer of it?

I could be mistaking what Barney is saying, but I believe he's referring to iAntiVirus, SafeEyes and VirusBarrier and that they, individually or in combination, are causing or contributing to the instability of your computer, not that you have actual malware. In particular it's never recommended that you run more than one antivirus application on your computer at once; they often can conflict. I'd suggest removing one or both of the antivirus applications, and perhaps also removing Safe Eyes (which has generally gotten very poor reviews) and see if matters improve.

Regards.

if several computers on the same router get these odd sites coming up - either the router or isp dns is compromised, or slightly less likely, each computer has bad dns settings.

Find out how/where to see dns numbers in your router & note what they are.A quick google will usually reveal if they're dubious - or paste them here, of course 🙂.

Your mac seems, as others have said, compromised by 3rd party software - remove everything mentioned.

Barney's joke was a little too subtle... he was saying that the antivirus software you have installed is malware, because they are known to cause problems and to solve almost none. As has already been said, you don't have any actual malware.

So any idea as to my problem.

You are using Windows machines, not Macs, so... no. This is a Mac forum, answers here are unlikely to be relevant to you.

Although, I've gotta say I'm not understanding all the fuss from anyone on this thread. So a few sites have popups that are getting around your popup blocker... big whoop, it has probably happened to lots of people. I know I've gotten pop-unders from some sites despite having popup blocking turned on in Safari. Either get a different popup blocker or quit visiting those sites.

Is there a way that a router can be infected?

No. They can have their DNS server settings changed to malicious DNS servers, but cannot be infected.

Indeed - whatever is causing your problems is not a Mac virus.

Too late to edit, but I realized that you weren't the person who wasn't using a Mac. In any case, though, the rest of my post still stands.

jester4jc wrote:
Aaaaaaah! So what do I do? I've run ClamXav and iAntiVirus and they both don't find anything!
Do I just have to wait for it to completely crumble before my eyes? How long do I have...how do I cleanse my computer of it?

Exactly. If, as you presume, you have a virus, all the virus protection you've tried is useless. Therefore, your AV is useless.
Or, there is something else wrong. But, I still say AV is useless on a Mac.
Others have already pointed out that something has infiltrated your router or you ISP's DNS settings. You could try using [OpenDNS|http://www.opendns.com]'s settings and see what happens. Their site has instructions for how to set it up on individual computers or on many routers.

Guys can I just put something in here.
I have both Windows and Mac experience and this tihngs affects both, it's not just a pop-up problem. It's a dangerous trojan on the Windows machines which does not want to go away for me on my XP computer, regardless of whether viruses are meant to be able to affect Macs or not the same problem is obviously still occurring for people who are using Mac OS's as their predominant operating system.

What it does on Windows is redirect many websites (you can just hit back and often it will return to your desired website) to broken links or dangerous websites. It occasionally does this in a new window, yes. Apparently it can also steal personal information, so I reccommend using a different machine for anything sensitive like internet banking or anything should you be having this problem (if possible). It seems to affect all browsers, it happens to both IE and Firefox here and I think Chrome but I haven't put that on this machine yet.

For Windows I have been advised to try and disable something that appears in the hardware list on my device manager in the control panel and reboot. I don't currently run a Mac OS because my Mac died, so I haven't researched a Mac fix.

I know a lot of people seem to be hostile towards Windows users on here, but I run both usually so don't get irate, just thought this information might be able to help, or at least give another view on the issue.

It's a dangerous trojan on the Windows machines

Not impossible, but extremely unlikely in this case.

regardless of whether viruses are meant to be able to affect Macs or not

There is no "meant to" here. First, viruses written for Windows cannot affect the Mac OS. Period. Second, there are currently no Mac viruses, only a few rare trojans. Period. These are facts, not opinions.

What it does on Windows is redirect many websites

What you describe is DNS poisoning for the purpose of phishing, which is not likely to be what is happening here. Did you read the descriptions of the problems? Empty popup windows don't sound like phishing attempts to me.

I know a lot of people seem to be hostile towards Windows users on here

Not necessarily. Hostile towards Windows, maybe. Intolerant of inaccurate claims, absolutely.

I have had this problem on my Mac for 9 months. Very frustrating. Basically, Apple ignores it. Apple Care, Apple Bar geniuses and the like have worked on this about 4 times with no success. They even wiped out the hard drive reinstalled everything and it comes back with in several hours. Norton Antivirus doesn't find it. This problem surfaces with Safari and Firefox. I am not a Chrome user.

I am told it is some sort of DNS diversion routine. Besides eopclick I often get gugyle.analytics and yellow pages windows. Sometimes it makes the browser inoperable and my browser crashes several times a day.

If anybody knows how to get rid of this and prevent it from coming back, I would like to know.

What you describe is DNS poisoning for the purpose of phishing, which is not likely to be what is happening here. Did you read the descriptions of the problems? Empty popup windows don't sound like phishing attempts to me.

Indeed, they sound like run of the mill ham-fisted dns redirects, presumably in an effort to raise income or just cause trouble.

Given these posts I check my DNS settings. Two were listed, 85.255.116.146 and 85.255.112.124 and they are very different from those on another computer without the problem. I also noticed, that the settings were "unlocked" so I locked them. For these first few minutes at least the problem is gone. Time will tell.

Exactly - some outfit in the Ukraine... all too common.
Check the setting now & then until it seems settled & if a router one, reset the 'default' username & passwd.