Q: I've upgraded to Lion & Safari has been corrupted - how can I remove it & reinstall it please?

Hi Bee

Thanks for that thought but it didn't work.  I also tried removing the Cache folder without success.

Regards

Tony

Hi

If I'm correct, I can only access extensions through the Safari menu which the malware has disabled access to.  So I can't change anything in Safari itself.  I'm tempted to disconnect from the internet & press the 'OK' button & see what happens (after completing a backup), but I'm not brave enough to.

I have run Sophos anti-virus but that didn't find anything.  I had previously used ClamXav which removed a number of Phishing files.

The only plug-in listed is Picasa.plugin

There didn't appear to be anyting under Contextual, but when I typed it in as a search item the following Java Script files were listed (& I've added the number of times they were listed):

iWebBlog.js x3

iWebSite.js x12

whmozemu.js

ehlpdhtm.js

There was nothing showing under Input methods

I hope this provides some guidance.

I also checked for any updates from Apple, just in case they needed to fix similar problems with other users.

Thanks for your assistance

Tony

Hi Bee

Yes, I am running lion 10.7.  Prior to that, my software was up to date.

I had another look at Safari & noticed what may have been the malware code under my history.

Ir refers to http://codenew.impresiones...5&rn=0&lgid=1311233583 (then 3 more numbers which I've left out in case it refers to something else)

Most of the menu options in Safari are greyed out - I can see them, just not click on them.

I can upload a screen shott if that helps.

Thanks again

Tony

Hi

Yes to both questions. I have reinstalled Lion without resolving the issue.

Cheers

Tony

Thanks - well captured

1.  Your Safari got hijacked by a site that claims you have won a prize. - Correct

2.  None of the menu items work now in Safari. - There are a few 'non-greyed' menu options (under FILE I appear to be able to HIDE SAFARI, HIDE OTHERS & QUIT SAFARI, under EDIT all items from FIND appear available, also TEXT ENCODING & SAFARI HELP appear available)

3.  The probem persists in Safe Mode, and after reinstalling Lion. - Correct

4.  In a New User, Safari is fine. - Correct (I also have VM Ware that allows me to run a windows version of Safari in the infected Mac environment)

5.  To date, you have taken to the desktop:

     Home>Library>Preferences>Safari plist- Correct

     Home>Library> Entire Safari Folder - Correct

     Home>Library> Cookies & Caches - Correct

(Tony, this is crucial.  You got to the HOME folder with the great instructions given by kisuke3, right????  You did not go to the normal Library folder, HD > Library, right?) - Correct

Yes, I also get the problem launching Safari from the Applications Folder

Regards

Tony

Thanks for putting me on to this thread.

Holding down the shift key & clicking on Safari in the dock launched a clean looking version without the malware.

Thanks to everyone for their support & help :-)