Webhp? malware redirect in safari on my Mac. Any suggestions for removal?

I have picked up malware or a virus that is impacting Safari. Specifically it is a webhp? redirect that occurs when conducting a google search. How dangerous is this, and what actions should I take to remove the malware and restore my system? Thank you in advance for your recommendations.

iMac, Mac OS X (10.7.4)

Posted on Jul 30, 2012 4:56 PM

Reply
7 replies

Jul 31, 2012 1:24 AM in response to s2tpa

s2tpa wrote:


I have picked up malware or a virus that is impacting Safari. Specifically it is a webhp? redirect that occurs when conducting a google search.

There are two or three malware Trojans / Backdoors that are capable of doing Safari redirects, but webhp has not been one of them. A fully up-to-date OS X 10.7.4 protects you against all of them.


Please describe exactly what you are observing that leads you to believe you are infected.

Jul 31, 2012 3:24 AM in response to MadMacs0

I have run a thorough scan via both Sophos and ClamXAV (thank you BDAqua) and neither program detected a virus, however, when I open Safari and choose a Google search, the following url appears in the window:

http://www.google.com/webhp?hl=en&tab=nw.


Additionally, in google news, this url appears: http://news.google.com/nwshp?hl=en&tab=wn&pog=false


Safari seems to be up-to-date. Version 6.0 (7536.25)


While these urls do not seem to be automatically redirecting my search, I am concerned that this is either a sign of malware, spyware or some sort of trojan and my data and personal info may be in jeopardy. I am a relatively (Dec. 2011) new Mac user, but had this same issue on my PC before. I apologize, if this is normal, and I am overreacting, or if I'm not adequately describing the issue.


Would installing the latest OS update help?


Thank you for your thoughts and suggestions.

Jul 31, 2012 6:32 PM in response to s2tpa

s2tpa wrote:


when I open Safari and choose a Google search, the following url appears in the window:

http://www.google.com/webhp?hl=en&tab=nw.

Same here.Additionally, in google news, this url appears:

http://news.google.com/nwshp?hl=en&tab=wn&pog=false

OK, I don't get the pog=false part, but the rest is the same. Perhaps you have opted out of playing online games? Just a stab in the dark.

Safari seems to be up-to-date. Version 6.0 (7536.25)


I'm forced to stick with 5.0.6 (5533.22.3) so it evidently has nothing to do with that. Have you tried a different Browser.


I can't say I've paid close enough attention, but it clearly appears that Google has done some tweeking to their site, which is an almost everyday occurrance. Just more noticable than usual.


I see no evidence in anything you have said that malware is involved. If you ever end up at a site that doesn't end in "google.com" then come back, otherwise I know of no way to fake a domain name.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Webhp? malware redirect in safari on my Mac. Any suggestions for removal?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.