Web pages autodirected to Parking.ps

Question

Level 1

0 points

Web pages autodirected to Parking.ps

Hi Everyone,

Have been facing a problem since many days now.

Everytime I click on a link in any page, it is autodirected to A website called Parking.ps. This happens mostly when, I try to open any videos in youtube or anyother Sites... What is this and How can I get rid of this.... Also why this happens..

I am aware of Parking Websites. But how is this connected to parking, since I am trying to open videos in youtube.... Need a solution for this ASAP... Please help....

Screen shot attached here....

Sandekum

iMac, OS X Mountain Lion (10.8.4)

Posted on Jul 13, 2013 12:10 PM

Reply

Answer 1

dominic23

Level 10

83,910 points

Jul 13, 2013 1:37 PM in response to Sandekum

Quit Safari.

Hold the shift key down and relaunch Safari.

Reset Safari.

Click Safari in the menu bar.

From the drop down select "Reset Safari".

Uncheck the box next to " Remove saved names and passwords".

Click "Reset".

Empty Caches

Safari > Preference > Advanced

Checkmark the box for "Show Develop menu in menu bar".

Develop menu will appear in the Safari menu bar.

Click Develop and select "Empty Caches" from the dropdown.

Turn off Extensions if any, and launch Safari.

Safari > Preferences > Extensions

Reply

Answer 2

Linc Davis

Level 10

209,547 points

Jul 13, 2013 3:39 PM in response to Sandekum

Resetting Safari and emptying the cache will have no effect.

From the Safari menu bar, select

Safari ▹ Preferences ▹ Extensions

Turn all extensions OFF and test. If the problem is resolved, turn extensions back ON and then disable them one or a few at a time until you find the culprit.

Reply

Answer 3

Sandekum Author

Level 1

0 points

Jul 13, 2013 11:12 PM in response to Linc Davis

Hi Davis,

Have tried all this, and finally I am here for a solution... Infact, I missed out something in my original post... Its not only Safari, but even Mozilla has the same problem. So I guess its not a Browser issue. What I wanted to check was that, is it some kind of a virus or malaware.. HAs any one faced this problem before....

Most of the time its very irritating when I am unable to view something in the browser....

And yes, my extensions are OFF...... Recently I have not added any extensions to safari.....

Please help guys...

Sandy

Reply

Answer 4

Jul 14, 2013 2:52 AM in response to Sandekum

Try a different DNS server ...

Open System Preferences > Network > Advanced > DNS

Click + and type:

208.67.222.222

Click + again and do the same.

208.67.220.220

Click Ok.

Quit and relaunch Safari to test.

Reply

Answer 5

Linc Davis

Level 10

209,547 points

Jul 14, 2013 6:44 AM in response to Sandekum

Please read this whole message before doing anything.

This procedure is a diagnostic test. It won’t solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.

Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.

These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.

Below are instructions to enter some UNIX shell commands. The commands are harmless, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects.

Some of the commands will line-wrap or scroll in your browser, but each one is really just a single line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then copy it. The headings “Step 1” and so on are not part of the commands.

Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. The other steps should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.

Launch the Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.

When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” and press return. You should then get a new line ending in a dollar sign.

Step 1

Triple-click the line of text below on this page to select it:

kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}' | open -f -a TextEdit

Copy the selected text to the Clipboard by pressing the key combination command-C. Then click anywhere in the Terminal window and paste (command-V). A TextEdit window will open with the output of the command. If the command produced no output, the window will be empty. Post the contents of the TextEdit window (not the Terminal window), if any — the text, please, not a screenshot. You can then close the TextEdit window. The title of the window doesn't matter, and you don't need to post that. No typing is involved in this step.

Step 2

Repeat with this line:

{ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|org\.(amav|apac|cups|isc|ntp|postf|x)/{print $3}'; sudo defaults read com.apple.loginwindow LoginHook 2> /dev/null; } | open -f -a TextEdit

This time you'll be prompted for your login password, which you do have to type. Nothing will be displayed when you type it. Type it carefully and then press return. You may get a one-time warning to be careful. Heed that warning, but don't post it. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

Note: If you don’t have a login password, you’ll need to set one before taking this step. If that’s not possible, skip to the next step.

Step 3

launchctl list | sed 1d | awk '!/0x|com\.apple|org\.(x|openbsd)/{print $3}' | open -f -a TextEdit

Step 4

ls -1A /e*/{la,mach}* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta}* L*/Fonts .la* 2> /dev/null | open -f -a TextEdit

Important: If you formerly synchronized with a MobileMe account, your me.com email address may appear in the output of the above command. If so, anonymize it before posting.

Step 5

osascript -e 'tell application "System Events" to get name of every login item' | open -f -a TextEdit

Remember, steps 1-5 are all copy-and-paste — no typing, except your password. Also remember to post the output.

You can then quit Terminal.

Reply

Answer 6

Sandekum Author

Level 1

0 points

Jul 14, 2013 9:32 AM in response to Linc Davis

Hi Linc,

Thanks for the steps... I have only user on my system and have executed all steps as you have mentioned.. Have removed my Mobile me id....

Step 1 -

com.google.filesystems.fusefs (2.2.1)

Step 2 -

com.oracle.java.Helper-Tool

com.microsoft.office.licensing.helper

com.google.keystone.daemon

com.Affinegy.InstaLANd

com.adobe.SwitchBoard

com.adobe.fpsaud

Step 3 -

J8RPQ294UB.com.skitch.SkitchHelper

com.oracle.java.Java-Updater

com.google.keystone.system.agent

com.Affinegy.InstaLANa

com.adobe.CS5ServiceManager

Step 4-

/Library/Components:

/Library/Extensions:

/Library/Frameworks:

AEProfiling.framework

AERegistration.framework

Adobe AIR.framework

AudioMixEngine.framework

MacFUSE.framework

NyxAudioAnalysis.framework

PluginManager.framework

iTunesLibrary.framework

/Library/Input Methods:

/Library/Internet Plug-Ins:

Flash Player.plugin

JavaAppletPlugin.plugin

Quartz Composer.webplugin

QuickTime Plugin.plugin

SharePointBrowserPlugin.plugin

SharePointWebKitPlugin.webplugin

Silverlight.plugin

flashplayer.xpt

googletalkbrowserplugin.plugin

npgtpo3dautoplugin.plugin

nsIQTScriptablePlugin.xpt

o1dbrowserplugin.plugin

/Library/Keyboard Layouts:

/Library/LaunchAgents:

com.Affinegy.InstaLANa.plist

com.adobe.AAM.Updater-1.0.plist

com.adobe.CS5ServiceManager.plist

com.google.keystone.agent.plist

com.oracle.java.Java-Updater.plist

/Library/LaunchDaemons:

com.Affinegy.InstaLANd.plist

com.adobe.SwitchBoard.plist

com.adobe.fpsaud.plist

com.google.keystone.daemon.plist

com.microsoft.office.licensing.helper.plist

com.oracle.java.Helper-Tool.plist

/Library/PreferencePanes:

Flash Player.prefPane

Growl.prefPane

JavaControlPanel.prefPane

MacFUSE.prefPane

NTFS-3G.prefPane

/Library/PrivilegedHelperTools:

com.microsoft.office.licensing.helper

/Library/QuickLook:

iBooksAuthor.qlgenerator

iWork.qlgenerator

/Library/QuickTime:

AppleIntermediateCodec.component

AppleMPEG2Codec.component

CanonMJPEGAVI.component

CanonMJPEGAVIDec.component

CanonText.component

/Library/ScriptingAdditions:

Adobe Unit Types.osax

/Library/Spotlight:

Microsoft Office.mdimporter

iBooksAuthor.mdimporter

iWork.mdimporter

/Library/StartupItems:

HWNetMgr

HWPortDetect

/etc/mach_init.d:

/etc/mach_init_per_login_session.d:

/etc/mach_init_per_user.d:

Library/Address Book Plug-Ins:

SkypeABDialer.bundle

SkypeABSMS.bundle

YMsgrCallABPlugin.bundle

YMsgrMsnABPlugin.bundle

YMsgrSmsABPlugin.bundle

YMsgrYimABPlugin.bundle

Library/Fonts:

BradhITC.TTF

Monotype Corsiva.ttf

Viner Hand ITC.ttf

ufonts.com_vivaldi-italic-2.ttf

Library/Input Methods:

.localized

Library/Internet Accounts:

V1

Library/Internet Plug-Ins:

ClickToFlash.webplugin

FacebookVideoCalling.bundle

Library/Keyboard Layouts:

Library/LaunchAgents:

.DS_Store

com.adobe.AAM.Updater-1.0.plist

com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.1BD4AAEB-6DA6-41DF-B454-8DB 9DF1ADD94.plist

com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.3A828292-616C-4678-9C6E-163 1F8EFC36F.plist

com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.4CD6EA15-064A-4378-AB42-26A 6A5E29B27.plist

com.apple.CSConfigDotMacCert-________________@me.com-SharedServices.Agent.plist

uk.co.markallan.clamxav.freshclam.plist

Library/PreferencePanes:

Library/Services:

Import into NOOK for Mac.workflow

Step 5 -

Skype, Dropbox

Reply

Answer 7

Linc Davis

Level 10

209,547 points

Jul 14, 2013 10:32 AM in response to Sandekum

Let's clarify something from your first message. You wrote:

Everytime I click on a link in any page, it is autodirected to A website called Parking.ps. This happens mostly when, I try to open any videos in youtube or anyother Sites.

Do you mean any link on any page, or some links on some pages? If only some, please give a specific example.

Reply

Answer 8

Sandekum Author

Level 1

0 points

Jul 14, 2013 11:23 AM in response to Linc Davis

Ok... Let me put in some more details here...

Here is the scenario.... In facebook, I get to see lot of videos shared by other people... Some links will open a new window or tab to play the video... in that case, it first opens the video and before it starts playing the video, the page gets autodirected to Parking.ps...

Secondly,,, When I typw in Youtube.com in a new page, it first goes to youtube home page... Then autodirects to the other...

Its not only with Youtube... When trying to access few other sites, i get the same issue..

here is an example ... when I try to acces this link...same thing happens...

http://snapknot.com/blog/wedding-photography-checklist/

Also whenever a parking page opens, a blank window also opens with it... Sorry for missing the details... I have never heard such a problem anywhere.....

Thanks for the help...

Sandy

Reply

Answer 9

Linc Davis

Level 10

209,547 points

Jul 14, 2013 12:22 PM in response to Sandekum

Back up all data.

Triple-click the line below on this page to select it:

~/Library/Internet Plug-Ins/ClickToFlash.webplugin

Right-click or control -click the highlighted line and select

Services ▹ Reveal

from the contextual menu.* A folder should open with an item selected. Quit the application if it's running. Move the selected item to the Trash. Relaunch the application and test.

*If you don't see the contextual menu item, copy the selected text to the Clipboard (command-C). In the Finder, select

Go ▹ Go to Folder...

from the menu bar, paste into the box that opens (command-V). You won't see what you pasted because a line break is included. Press return.

Reply

Answer 10

Sandekum Author

Level 1

0 points

Jul 15, 2013 7:06 AM in response to Linc Davis

Thanks for all the effort Linc...

Unfortunately the issue is still not solved.... 😟

Sandy

Reply

Answer 11

Linc Davis

Level 10

209,547 points

Jul 15, 2013 8:26 AM in response to Sandekum

Back up all data.

From the menu bar, select

 ▹ System Preferences ▹ Network

If the preference pane is locked, click the lock icon in the lower left corner and enter your password to unlock it. Then click the Advanced button and select the Proxies tab. If any proxy options are selected, make a note of them and then deselect them. You don’t need to change the bypass or FTP settings. Click OK and then Apply. Test. The result may be that you can't connect to any web server. Restore the previous settings if that happens.

Reply

Answer 12

Sandekum Author

Level 1

0 points

Jul 15, 2013 8:36 AM in response to Linc Davis

HI Linc, Here is the default seetings in Proxy.

Reply

Answer 13

Linc Davis

Level 10

209,547 points

Jul 15, 2013 9:09 AM in response to Sandekum

Double-click the line of text below on this page to select it, then copy it to the Clipboard (command-C):

www.snapknot.com

Launch the Network Utility application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad. Click Utilities, then Network Utility in the icon grid.

Step 1

Select the Lookup tab and paste into the address field (command-V). Press return. Post the output that appears below – the text, please, not a screenshot.

Step 2

Select the Ping tab and do the same. Please enter the same input as you did in Step 1. Don't use the output of Step 1 as input to Step 2.

Note: Some browsers and mail clients will automatically complete a domain name such as "www.example.com" to a URL, such as http://www.example.com. That will interfere with the test. If necessary, edit the input in the Network Utility window to remove any added characters.

Reply

Answer 14

Sandekum Author

Level 1

0 points

Jul 15, 2013 10:03 AM in response to Linc Davis

Here is the result:

Step 1

Lookup has started…

Trying "www.snapknot.com"

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27172

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:

;www.snapknot.com. IN ANY

;; ANSWER SECTION:

www.snapknot.com. 86293 IN A 74.207.246.101

Received 50 bytes from 88.198.94.235#53 in 206 ms

Step 2

Ping has started…

PING www.snapknot.com (74.207.246.101): 56 data bytes

64 bytes from 74.207.246.101: icmp_seq=0 ttl=55 time=285.082 ms

64 bytes from 74.207.246.101: icmp_seq=1 ttl=55 time=284.798 ms

64 bytes from 74.207.246.101: icmp_seq=2 ttl=55 time=289.289 ms

64 bytes from 74.207.246.101: icmp_seq=3 ttl=55 time=289.375 ms

64 bytes from 74.207.246.101: icmp_seq=4 ttl=55 time=284.934 ms

64 bytes from 74.207.246.101: icmp_seq=5 ttl=55 time=311.845 ms

64 bytes from 74.207.246.101: icmp_seq=6 ttl=55 time=289.225 ms

64 bytes from 74.207.246.101: icmp_seq=7 ttl=55 time=284.711 ms

64 bytes from 74.207.246.101: icmp_seq=8 ttl=55 time=288.913 ms

64 bytes from 74.207.246.101: icmp_seq=9 ttl=55 time=289.259 ms

--- www.snapknot.com ping statistics ---

10 packets transmitted, 10 packets received, 0.0% packet loss

round-trip min/avg/max/stddev = 284.711/289.743/311.845/7.646 ms

Thanks,

Sandy

Reply

Answer 15

Linc Davis

Level 10

209,547 points

Jul 15, 2013 10:12 AM in response to Sandekum

Please read this whole message before doing anything.

This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.

Step 1

The purpose of this step is to determine whether the problem is localized to your user account.

Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”

While logged in as Guest, you won’t have access to any of your personal files or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.

Test while logged in as Guest. Same problem?

After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.

*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.

Step 2

The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, or by a peripheral device.

Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.

Safe mode is much slower to boot and run than normal, and some things won’t work at all, including sound output and Wi-Fi on certain iMacs. The next normal boot may also be somewhat slow.

The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

Test while in safe mode. Same problem?

After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of steps 1 and 2.

Reply