Skip navigation

Mac OSX 10.6.8 web browsing hijacked

8653 Views 23 Replies Latest reply: May 8, 2013 8:37 AM by MadMacs0 RSS
  • MadMacs0 Level 4 Level 4 (3,330 points)
    Currently Being Moderated
    Nov 7, 2012 7:11 PM (in response to sjd881)

    Have you looked into the EverCookie?

     

    arstechnica wrote "It is possible to kill the evercookie" which contains leads I've used to track a few down with my setup.

  • sjd881 Level 1 Level 1 (0 points)
    Currently Being Moderated
    Nov 7, 2012 7:21 PM (in response to MadMacs0)

    From the sporadic behaviour I get - i.e. some browsers it works and some it does not. I can delete cookies and its fixed etc. then I dont think this is the culprit. Ive just read up the Zombie thing and it is almost an undeletable cookie so just deleting cookies and relaunching the browser would not fix the problem.

     

    Also the system when fixed works fine on corporate network, when I go back home and plug into wireless supplied by China unicom (Telecoms company) then do a search or go to Gmail I get re-nfected. I am still 99.9% sure when the China system detects me doing a search on google or typing a url for BBC or Gmail it is doing something with my cookies and screwing them up to re-direct me to a chinese site.

     

    I hope they never find out about these EverCookies or Im up the creek without a paddle!

     

    Thanks for the suggestion.

  • MadMacs0 Level 4 Level 4 (3,330 points)
    Currently Being Moderated
    Nov 7, 2012 7:48 PM (in response to sjd881)

    sjd881 wrote:

     

    I hope they never find out about these EverCookies or Im up the creek without a paddle!

    I've been generally for about two years now and in it's original form of Flash Cookies for even longer. I can't imagine that they don't know about it, even if it's not what's going on here.

  • Vero-D Level 1 Level 1 (0 points)
    Currently Being Moderated
    Nov 8, 2012 3:46 PM (in response to MadMacs0)

    HI,

     

    What if my "hosts" has nothing on it? I opened the file as you suggested and a blank documente show up.

     

    I desesperately need a solution for this problem:

    I'm being redirected at anytime, it can be from a bookmark page, from typing on the address bar, from a google search, it doesn't matter but it is getting very annoying.

     

    I changed my DNS to an openDNS, but the problem persisted. I instlled and runned ClamXav, it didn't find any malware or problem. I decided to create a new aiport conection with openDNS. The problems is still going on.

     

    Trashing cookies solve the problem for only a couple of hours! It's getting worse everytime I try something new.

     

    Any more ideas please?

  • sjd881 Level 1 Level 1 (0 points)
    Currently Being Moderated
    Nov 8, 2012 4:52 PM (in response to Vero-D)

    Are you in China?

     

    If so its your Internet provider doing this - it will keep happening every day.

     

    Use firefox and the below as its quick and you dont need to delete cookies. Also before you do this input another DND server in your network panel and delete any other entries. Its a total pain in the ***! I cant find a better fix at the moment. I cant even get a VPN running currently.

     

    HOLD THE PRESS!

     

    Just spotted something else in firefox.

     

    Go to the help menu, troubleshooting information

     

    In the displayed list look at your important modified preferences. I had a modified preference for Keyword seach which looked very strange, anyway I pressed the "reset firefox" button and voila all fixed without deleting cookies.

     

    Cool, lets hope I have found an easy fix for firefox.

  • MadMacs0 Level 4 Level 4 (3,330 points)
    Currently Being Moderated
    Nov 8, 2012 5:40 PM (in response to Vero-D)

    Vero-D wrote:

     

    What if my "hosts" has nothing on it? I opened the file as you suggested and a blank documente show up.

    That would be very unusual, but would not explain redirects, either. The only thing that should be there is the localhost definitions:

    ##

    # Host Database

    #

    # localhost is used to configure the loopback interface

    # when the system is booting.  Do not change this entry.

    ##

    127.0.0.1 localhost

    255.255.255.255 broadcasthost

    ::1             localhost

    Any more ideas please?

    I gave you a few earlier in the Leopard thread.

  • guccio90 Calculating status...
    Currently Being Moderated
    May 8, 2013 6:27 AM (in response to MadMacs0)

    Hello,

    Me and a couple of friends have the same problem here in Shanghai...

    I tried everything... here is what my "hosts" file says:

     

    ##

    # Host Database

    #

    # localhost is used to configure the loopback interface

    # when the system is booting.  Do not change this entry.

    ##

    127.0.0.1          localhost

    127.0.0.1 activate.adobe.com

    127.0.0.1 practivate.adobe.com

    127.0.0.1 ereg.adobe.com

    127.0.0.1 activate.wip3.adobe.com

    127.0.0.1 wip3.adobe.com

    127.0.0.1 3dns-3.adobe.com

    127.0.0.1 3dns-2.adobe.com

    127.0.0.1 adobe-dns.adobe.com

    127.0.0.1 adobe-dns-2.adobe.com

    127.0.0.1 adobe-dns-3.adobe.com

    127.0.0.1 ereg.wip3.adobe.com

    127.0.0.1 activate-sea.adobe.com

    127.0.0.1 wwis-dubc1-vip60.adobe.com

    127.0.0.1 activate-sjc0.adobe.com

    127.0.0.1 hl2rcv.adobe.com

    255.255.255.255          broadcasthost

    ::1             localhost

    fe80::1%lo0          localhost

     

     

    What do we need to do?

  • MadMacs0 Level 4 Level 4 (3,330 points)
    Currently Being Moderated
    May 8, 2013 8:37 AM (in response to guccio90)

    guccio90 wrote:

     

    Hello,

    Me and a couple of friends have the same problem here in Shanghai...

    I tried everything... here is what my "hosts" file says:

    Your hosts file is not responsible for this particular problem.

     

    If resetting your browser doesn't help have a look at Thomas Reed's Eliminating browser redirects and advertisements.

1 2 Previous Next

Actions

More Like This

  • Retrieving data ...

Bookmarked By (1)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.