Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Firefox & Safari keep redirecting me to randoms websites

My problem is that I'm being redirected at anytime, it can be from a bookmark page, from typing on the address bar, from a google search, it doesn't matter but it is getting very annoying.


I changed my DNS to an openDNS, but the problem persisted. I instlled and runned ClamXav, it didn't find any malware or problem. I decided to create a new aiport conection with openDNS. The problems is still going on.


Any sugentions in what to do next? I tried updating my router firmware but on my router's website I don't see a tab or an option for "Firmware" (I have a motorola router with AT&T).


I will appreciate any help with this. Thanks!

MacBook, Mac OS X (10.5.8)

Posted on Nov 7, 2012 4:22 PM

Reply
Question marked as Best reply

Posted on Nov 7, 2012 10:47 PM

Vero-D wrote:


My problem is that I'm being redirected at anytime, it can be from a bookmark page, from typing on the address bar, from a google search, it doesn't matter but it is getting very annoying.

There seems to be alot of this going around recently. One user today felt he had tracked it down to a cookie action. He was able to temporarily get rid of it by trashing cookies in each browser, but it usually returned after a random amount of time. A few hours ago he said he thought he might have found a fix for Firefox which you can read here: https://discussions.apple.com/thread/4157083?answerId=20225006022#20225006022

13 replies
Question marked as Best reply

Nov 7, 2012 10:47 PM in response to Vero-D

Vero-D wrote:


My problem is that I'm being redirected at anytime, it can be from a bookmark page, from typing on the address bar, from a google search, it doesn't matter but it is getting very annoying.

There seems to be alot of this going around recently. One user today felt he had tracked it down to a cookie action. He was able to temporarily get rid of it by trashing cookies in each browser, but it usually returned after a random amount of time. A few hours ago he said he thought he might have found a fix for Firefox which you can read here: https://discussions.apple.com/thread/4157083?answerId=20225006022#20225006022

Nov 8, 2012 5:15 PM in response to MadMacs0

Vero-D wrote:


trashing cookies solve the problem for only a couple of hours!

I think that's ample evidence that it could well be cookie related, but were you able to inspect Firefox for whatever strangeness he mentioned?


If not, try this:

  • In the Firefox URL window type "about:config" without the quotes.
  • In the filter box type "keyword" without quotes
  • Find "Keyword.URL"
  • Copy and paste whatever you find in the "Value" column in a reply here.

---------------------------------

A suggestions I gave in that other thread was to check for EverCookies. These are hidden locations that are not deleted by normal Reset methods that have the ability to restore deleted or expired cookies. You can read about it in the references I gave in that other thread, but first check these locations for any data you don't recognize:


~/Library/Safari/Databases/

~/Library/Safari/LocalStorage/

~/Library/Preferences/Macromedia/Flash\ Player/\#SharedObjects/


where "~" is your home folder at /Users/<yourusername>


There will almost certainly be data there, all of which can be safely deleted and will be replaced if needed by those sites.

----------------------------

Intego published a blog article that may end up helping. I have never had your redirect problem and part of the reason may be because I have taken most, if not all of these steps already.


Top 5 Fast and Easy Ways to Improve Your Privacy Online

Nov 9, 2012 9:20 AM in response to MadMacs0

This is what I have in the value column: http://www.goodsearch.com/search.aspx?toolbarcharity=___toolbarcharity___&id=goo dsearchtb&v=2_1&keywords=


It's a browser I have had for a long time, long before this problem with the redirectin appeared.


About the Evercookies,

I checked the forlder that you recomended, and all the dara there seems familiar. I deleted some of them just in case.


I also followe the intruction from Samy’s evercookie demo page. Hopefully it will work. I will let you know.


Thanks again.


One more thing: I opened the "hosts" file again and this is what I see now


##

# Host Database

#

# localhost is used to configure the loopback interface

# when the system is booting. Do not change this entry.

##

127.0.0.1 localhost

127.0.0.1 activate.adobe.com

127.0.0.1 practivate.adobe.com

127.0.0.1 ereg.adobe.com

127.0.0.1 activate.wip3.adobe.com

127.0.0.1 wip3.adobe.com

127.0.0.1 3dns-3.adobe.com

127.0.0.1 3dns-2.adobe.com

127.0.0.1 adobe-dns.adobe.com

127.0.0.1 adobe-dns-2.adobe.com

127.0.0.1 adobe-dns-3.adobe.com

127.0.0.1 ereg.wip3.adobe.com

127.0.0.1 activate-sea.adobe.com

127.0.0.1 wwis-dubc1-vip60.adobe.com

127.0.0.1 activate-sjc0.adobe.com

127.0.0.1 hl2rcv.adobe.com

255.255.255.255 broadcasthost

::1 localhost

fe80::1%lo0 localhost


# Block Adobe Activation

127.0.0.1 activate.adobe.com

127.0.0.1 practivate.adobe.com

127.0.0.1 ereg.adobe.com

127.0.0.1 activate.wip3.adobe.com

127.0.0.1 wip3.adobe.com

127.0.0.1 3dns-3.adobe.com

127.0.0.1 3dns-2.adobe.com

127.0.0.1 adobe-dns.adobe.com

127.0.0.1 adobe-dns-2.adobe.com

127.0.0.1 adobe-dns-3.adobe.com

127.0.0.1 ereg.wip3.adobe.com

127.0.0.1 activate-sea.adobe.com

127.0.0.1 wwis-dubc1-vip60.adobe.com

127.0.0.1 activate-sjc0.adobe.com

127.0.0.1 hl2rcv.adobe.com


What should I do?

Nov 9, 2012 6:49 PM in response to Vero-D

Vero-D wrote:


This is what I have in the value column: http://www.goodsearch.com/search.aspx?toolbarcharity=___toolbarcharity___&id=goo dsearchtb&v=2_1&keywords=


It's a browser I have had for a long time, long before this problem with the redirectin appeared.

So that's a search site that you purposely adopted. It checks out with Google Safe Browsing and WOT, has a low level of tracking cookies and looks to be quite a worthwhile site. I can't see how it could be causing any of your issues.

About the Evercookies,

I checked the forlder that you recomended, and all the [data] there seems familiar. I deleted some of them just in case.


I also followe the intruction from Samy’s evercookie demo page. Hopefully it will work. I will let you know.

Good.

One more thing: I opened the "hosts" file again and this is what I see now


##

# Host Database

#

# localhost is used to configure the loopback interface

# when the system is booting. Do not change this entry.

##

127.0.0.1 localhost

127.0.0.1 activate.adobe.com

...

What should I do?

That's not your problem either, as it will simply redirect all calls to those site back to your computer, effectively blocking access to those sites. To see what that would seem to suggest, see this article. Looks like whatever caused it was run twice. If you would like to get rid of those entries let me know and I'll give you the steps you need to take to return it to it's original condition.

Nov 10, 2012 4:37 AM in response to Vero-D

In addition to MadMacs suggestions, for Firefox get the Better Privacy Add-on. It will remove all Flash cookies on browser quit.


And there is this more permanent solution for eliminating Flash Cookies. See Kurt Lang's post, illustrated with screenshots, which is based on the method I have been using.


https://discussions.apple.com/thread/4221814?answerId=19349393022#19349393022


EDIT: Oh, since this is Leopard, I don't think you will have that Preference Pane for Flash.


Do this then (courtesy of Anonymous at XYM'ers)


OK, here's the simplest solution to the annoying "allow third-party Flash content to store data on your computer" problem: lock the folders.


It is simple. It also solves the issue of persistent tracking objects being installed in Flash without configuring Flash in any way. Or if you like persistent tracking objects, it causes the problem that they cannot be stored. I don't like them, so it's pretty much ideal for me.


Here's what you do:


Delete your ~/Library/Preferences/Macromedia folder so you're starting from a clean, shared-object-free, slate.

Next, in your web browser visit http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_man ager02.html the Global Privacy Settings, click the button labeled "always deny" then "confirm" to prevent Flash from watching you through your webcam or listening to you over the computer's microphone. Technically speaking this isn't necessary, but it seems like a prudent move if you don't like the idea of web sites accessing these resources. Don't bother changing anything else in the Settings Manager because the other stuff pretty much involves what and how much can get saved on your computer, and we're going to answer those questions entirely different means.

Now navigate in the Finder back to your ~/Library/Preferences/Macromedia folder and and recursively lock every file and folder inside it. This should include macromedia.com/support/flashplayer/sys/settings.sol, macromedia.com/support/flashplayer/sys, macromedia.com/support/flashplayer, macromedia.com/support, macromedia.com/#SharedObjects/<random letters and numbers>, macromedia.com/#SharedObjects, and finally the macromedia.com folder itself.



That's it!


The cool thing about this is that Flash is convinced it can store this crap so everything works, but nothing is actually remembered by Flash. Or at least nothing is remembered between browser sessions. Flash apparently never tells sites attempting to store stuff that, even though storing is enabled, it doesn't actually work and nothing gets stored. Nifty.


Message was edited by: WZZZ

Nov 10, 2012 9:00 AM in response to MadMacs0

Since yesterday, I have been redirected only twice. Which is not bad at all after being redirected every 10 minutes!

Of those 2, "Ghostery" prevented one, so I actually was redirected only once. I can live with that.


I read the article you suggested, and even when I don't undesrtand everything (I'm not a exppert on this stuff), I think it would be a good idea to get rid of those entries. So, I would appreciate your help (AGAIN) on returning "hosts" to its original condition.


You have been such a help. Thanks you so much!

Nov 10, 2012 9:48 PM in response to Vero-D

Vero-D wrote:


I would appreciate your help (AGAIN) on returning "hosts" to its original condition.

Sure. Here are the steps, courtesy of Linc Davis:

Select "Go to Folder..." from the Finder menu bar. In the text box, enter "/etc" (without the quotes.) A Finder window will open on the "etc" folder.


Double-click the file named "hosts" in that folder. It should open in TextEdit. At the top of the file, you should see something like this:


##

# Host Database

#

# localhost is used to configure the loopback interface

# when the system is booting. Do not change this entry.

##

127.0.0.1 localhost

255.255.255.255 broadcasthost

::1 localhost

fe80::1%lo0 localhost


Above and below that, you'll see some other lines. Delete everything all of those. Don't try to save; you won't be able to. Instead, select "Save As..." from the file menu in TextEdit. In the Save dialog, deselect the option to add a ".txt" extension to the file name, if it's selected. Save the file to your Desktop. You should now have a file named exactly "hosts" with no extension on your Desktop, having the contents shown above.


Now comes the part that usually scares people. Launch the Terminal application, copy or drag -- do not type -- the line of text below into the window, and press return:


sudo sh -c ' cat Desktop/hosts > /etc/hosts '


You'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up. Don't panic when you see that warning. Quit Terminal.


Do not type anything into the Terminal window except your password.


That will fix your hosts file.

Firefox & Safari keep redirecting me to randoms websites

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.