All other pages works fine. The problem is on Safari and Firefox. I have reinstalled Firefox and safari to no avail
MacBook Pro, Mac OS X (10.6.8)
Can you connect to any other web sites? Perhaps the issue is with Google.
Yes, I can connect to anything but google pages. I also have a Mini mac connected to the same router and that connects to google fine
jonboy1970 wrote:
All other pages works fine. The problem is on Safari and Firefox. I have reinstalled Firefox and safari to no avail
You may have been infected by malware that you downloaded and installed. The download was probably called "FlashPlayer.pkg". If you still have it please don't trash it quite yet. For the benefit of others in this community we need to analyze the installer package to see what it does. A couple of us can do that if you can send a link to a Mailinator address http://mailinator.com/ and post a notice in this thread.
If you are uncomfortable with that can you please upload it to http://www.virustotal.com. Once you have done that copy the ID and report it back here along with the exact name of the file that you uploaded.
If the results do not show anything in the status column next to ClamAV can you also upload it to http://cgi.clamav.net/sendvirus.cgi and in the description box include the keyword "macos". If you know the name of the site where you downloaded it from, that would also be useful. Then you should Trash it so you won't be tempted to run it again.
A description of this malware along with instructions on fixing it can be found here: http://www.f-secure.com/v-descs/trojan_bash_qhost_wb.shtml
Thanks in advance and let us know how it goes.
Disregard what I said about mailinator. I had forgotten that they won't accept attachments. We'll just have to find another way to get our hands on a sample.
I'm pretty sure you have nailed it!! only problem is I'm having some difficulty following the removall instructions. please see below text pasted from terminal, I have deleted some blank lines.
Last login: Thu Aug 18 22:44:21 on console
John-Dickinss-MacBook-Pro:~ John$ cd /private/ect
-bash: cd: /private/ect: No such file or directory
John-Dickinss-MacBook-Pro:~ John$ cd/private/ect
-bash: cd/private/ect: No such file or directory
John-Dickinss-MacBook-Pro:~ John$ cd /private/ect/
-bash: cd: /private/ect/: No such file or directory
John-Dickinss-MacBook-Pro:~ John$ sudo vim hosts
Password:
~
~
"hosts" [New File]
Please ignor last post, I was trying to do it without admin rights. All sorted now!!! wow that was a long slog, 3 weeks of trying alsorts to fix it. Unfourtunatly the offending file was deleted and I cant remember what web site i got it from.
Many thanks for your help!!!
jonboy1970 wrote:
I'm pretty sure you have nailed it!! only problem is I'm having some difficulty following the removall instructions. please see below text pasted from terminal, I have deleted some blank lines.
Last login: Thu Aug 18 22:44:21 on console
John-Dickinss-MacBook-Pro:~ John$ cd /private/ect
It should be cd /private/etc/ vice ect
You might find it easier to use TextEdit or your favorite text editor to accomplish the same thing. If you are not familiar with how to open hidden files, just choose File->Open then type Command-Shift-G and enter "/etc/" without the quotes.
How do I know if I am infected? This might be my problem
Grumpylicous wrote:
How do I know if I am infected? This might be my problem
Since this thread is almost a year old and the malware was only around for a couple of weeks, it's highly unlikely. Beside which, I see you are running OS X 10.7.4 and the XProtect system would have prevented you from installing it.
Stick with your new thread and perhaps we can figure out what's going on.
why can I no longer connect to any google pages?
