This site has taken over my home page - http://search.searchonme.com/?m=1

Hi Jean,

See if you might have this malware redirecting DNS queries...

http://macmegasite.com/node/3924

http://www.ehow.com/how_2128387_remove-osxrspluga-trojan-horse-mac.html

How to fix...

http://www.macosxhints.com/article.php?story=20071031114140862

Edit:

http://krebsonsecurity.com/2012/03/court-4-more-months-for-dnschanger-infected-p cs/

Are you really still on 10.6.6? If so you can't've installed the lastest security update...

Disable Java in your Browser settings, not JavaScript.

http://support.apple.com/kb/HT5241?viewlocale=en_US

http://support.google.com/chrome/bin/answer.py?hl=en-GB&answer=142064

http://support.mozilla.org/en-US/kb/How%20to%20turn%20off%20Java%20applets

Flashback - Detect and remove the uprising Mac OS X Trojan...

http://www.mac-and-i.net/2012/04/flashback-detect-and-remove-uprising.html

In order to avoid detection, the installer will first look for the presence of some antivirus tools and other utilities that might be present on a power user's system, which according to F-Secure include the following:

/Library/Little Snitch

/Developer/Applications/Xcode.app/Contents/MacOS/Xcode

/Applications/VirusBarrier X6.app

/Applications/iAntiVirus/iAntiVirus.app

/Applications/avast!.app

/Applications/ClamXav.app

/Applications/HTTPScoop.app

/Applications/Packet Peeper.app

If these tools are found, then the malware deletes itself in an attempt to prevent detection by those who have the means and capability to do so. Many malware programs use this behavior, as was seen in others such as the Tsunami malware bot.

http://reviews.cnet.com/8301-13727_7-57410096-263/how-to-remove-the-flashback-ma lware-from-os-x/

http://x704.net/bbs/viewtopic.php?f=8&t=5844&p=70660#p70660

The most current flashback removal instructions are F-Secure's Trojan-Downloader:OSX/Flashback.K.

https://www.securelist.com/en/blog/208193454/Flashfake_Removal_Tool_and_online_c hecking_site

More bad news...

https://www.securelist.com/en/blog/208193467/SabPub_Mac_OS_X_Backdoor_Java_Explo its_Targeted_Attacks_and_Possible_APT_link

I found out how to remove this Virus in Google Chrome.

It is an annoying removal yet it removes the website completley.

Click on the wrench

Select "Settings" from the drop-down menu (or press Command + ,)

Under "Users", click on "Delete this User"

If you have an account with Google, you can restore all your plugins and bookmarks (such as AdBlock).

To see all your bookmarks, after you delete your user, select "View" from the Chrome menubar and select "Always Show Bookmarks Bar"

Hope this helped to get rid of any malware autostart website. Don't bother changing your DNS Servers, just be careful with what you download.

It should remove any malware autostart websites but it will forsure work to remove search.searchonme

GScottMalibu wrote:

I found out how to remove this Virus in Google Chrome.

It is an annoying removal yet it removes the website completley.

Click on the wrench

Select "Settings" from the drop-down menu (or press Command + ,)

Under "Users", click on "Delete this User"

Well that was a bit drastic, but I'm glad you got rid of it.

You probably got this by downloading and installing a Codec you were told you needed to view a video. It may have been called codec-c or codec-m or codec-v, perhaps some other letter. In any case, it normally comes with an uninstaller which works, believe it or not.

Most A-V software, including Apple's XProtect system will now identify it as FkCodec malware. The installer inserts extensions in Safari, FireFox and Chrome. It doesn't really do any harm other than to frustrate you by redirecting to the site mentioned, thus earning somebody some cash for referring you to the site.