I've upgraded to Lion & Safari has been corrupted - how can I remove it & reinstall it please?

Hi

If I'm correct, I can only access extensions through the Safari menu which the malware has disabled access to. So I can't change anything in Safari itself. I'm tempted to disconnect from the internet & press the 'OK' button & see what happens (after completing a backup), but I'm not brave enough to.

I have run Sophos anti-virus but that didn't find anything. I had previously used ClamXav which removed a number of Phishing files.

The only plug-in listed is Picasa.plugin

There didn't appear to be anyting under Contextual, but when I typed it in as a search item the following Java Script files were listed (& I've added the number of times they were listed):

iWebBlog.js x3

iWebSite.js x12

whmozemu.js

ehlpdhtm.js

There was nothing showing under Input methods

I hope this provides some guidance.

I also checked for any updates from Apple, just in case they needed to fix similar problems with other users.

Thanks for your assistance

Tony

Hi Bee

Yes, I am running lion 10.7. Prior to that, my software was up to date.

I had another look at Safari & noticed what may have been the malware code under my history.

Ir refers to http://codenew.impresiones...5&rn=0&lgid=1311233583 (then 3 more numbers which I've left out in case it refers to something else)

Most of the menu options in Safari are greyed out - I can see them, just not click on them.

I can upload a screen shott if that helps.

Thanks again

Tony

Hi

Yes to both questions. I have reinstalled Lion without resolving the issue.

Cheers

Tony

Thanks - well captured

1. Your Safari got hijacked by a site that claims you have won a prize. - Correct

2. None of the menu items work now in Safari. - There are a few 'non-greyed' menu options (under FILE I appear to be able to HIDE SAFARI, HIDE OTHERS & QUIT SAFARI, under EDIT all items from FIND appear available, also TEXT ENCODING & SAFARI HELP appear available)

3. The probem persists in Safe Mode, and after reinstalling Lion. - Correct

4. In a New User, Safari is fine. - Correct (I also have VM Ware that allows me to run a windows version of Safari in the infected Mac environment)

5. To date, you have taken to the desktop:

Home>Library>Preferences>Safari plist- Correct

Home>Library> Entire Safari Folder - Correct

Home>Library> Cookies & Caches - Correct

(Tony, this is crucial. You got to the HOME folder with the great instructions given by kisuke3, right???? You did not go to the normal Library folder, HD > Library, right?) - Correct

Yes, I also get the problem launching Safari from the Applications Folder

Regards

Tony

Thanks for putting me on to this thread.

Holding down the shift key & clicking on Safari in the dock launched a clean looking version without the malware.

Thanks to everyone for their support & help :-)