New To Mac-Forums?

Welcome to our community! Join the discussion today by registering your FREE account. If you have any problems with the registration process, please contact us!

Get your questions answered by community gurus Advice and insight from world-class Apple enthusiasts Exclusive access to members-only contests, giveaways and deals

Join today!

 
Start a Discussion
 

Mac-Forums Brief

Subscribe to Mac-Forums Brief to receive special offers from Mac-Forums partners and sponsors

Join the conversation RSS
OS X - Operating System General OS operation information and support

Redirection Malware?


Post Reply New Thread Subscribe

 
Thread Tools
Helpme

 
Member Since: Sep 29, 2010
Posts: 3
Helpme is on a distinguished road

Helpme is offline
Hi,

I am new to this forum and I hope I am posting in the right place.

My problem is self generated as I foolishly was tempted to the darker corners of the internet. Feel free to judge me as you may.

I have a problem now where if I enter an incorrect url address I get redirected to a site called searchtube which is a search engine for adult videos.

I have spent a lot of time looking online tonight in various forums for ways to remove what I believe to be malware. I have downloaded and ran iAntivirus, Protect Macantivirus, Clam Xav etc. None of these searches have come up with anything.

I have tried clearing the caches and cookies for both Firefox and Safari (yes the same thing happens on both).

I have a MBP OS X 10.5.8 version.

I have learned my lesson about these sites and the supposed invulnerability of a mac.

I am hoping that someone can help me rid my computer of this problem.
QUOTE Thanks
dtravis7

 
dtravis7's Avatar
 
Member Since: Jan 04, 2005
Location: Modesto, Ca.
Posts: 27,554
dtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond repute
Mac Specs: iMac 2.4 C2D 10.9.4, iMac 2.16 C2d 10.6.8, Macbook2007 10.8.4, Mac Mini 10.8.4, iPhone 3GS Note 8!!

dtravis7 is offline
The only way you can get that Trojan that redirects is by downloading a video codes from a questionable site or some pirated software. Do you remember what you did? You also have to give it the OSX password for it to install. Tell us a bit more so I can be sure what is going on. I spent all night once to try and get that redirect Trojan and finally did on an old Mac. Gave it the password and let it rip. I removed it in a half a minute with the terminal. Will look for the command but please tell us what you did and where you went.

Not trying to trap you BTW, just trying to be sure I know what you have so I can help you remove it.

OSX is very secure. You had to give something permission and a password at sometime.
QUOTE Thanks
dtravis7

 
dtravis7's Avatar
 
Member Since: Jan 04, 2005
Location: Modesto, Ca.
Posts: 27,554
dtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond repute
Mac Specs: iMac 2.4 C2D 10.9.4, iMac 2.16 C2d 10.6.8, Macbook2007 10.8.4, Mac Mini 10.8.4, iPhone 3GS Note 8!!

dtravis7 is offline
If you have what I think you do, follow this EXACTLY and it will be gone. Like I said in my other message, please let us know what you did to get this. I want to be sure this is what you have.

How to find and remove the OSX.RSPlug.A malware - Mac OS X Hints
QUOTE Thanks
Helpme

 
Member Since: Sep 29, 2010
Posts: 3
Helpme is on a distinguished road

Helpme is offline
No worries I appreciate any help I can get.

I was on the youporn site.

Although my decision may not have shown it I am usually pretty smart about pop ups and such, I know not to accept or download. I also don't recall being asked to download any updates or give a password to accept a download. Which is why I am so baffled by this whole thing.

I really do wish I could provide more detail I just noticed this happen for the first time today.
QUOTE Thanks
dtravis7

 
dtravis7's Avatar
 
Member Since: Jan 04, 2005
Location: Modesto, Ca.
Posts: 27,554
dtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond repute
Mac Specs: iMac 2.4 C2D 10.9.4, iMac 2.16 C2d 10.6.8, Macbook2007 10.8.4, Mac Mini 10.8.4, iPhone 3GS Note 8!!

dtravis7 is offline
Check my 2nd message. See if any of those files are there.
QUOTE Thanks
Helpme

 
Member Since: Sep 29, 2010
Posts: 3
Helpme is on a distinguished road

Helpme is offline
also when I follow those steps I can't locate the internet plugin drop down under library.
QUOTE Thanks
dtravis7

 
dtravis7's Avatar
 
Member Since: Jan 04, 2005
Location: Modesto, Ca.
Posts: 27,554
dtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond repute
Mac Specs: iMac 2.4 C2D 10.9.4, iMac 2.16 C2d 10.6.8, Macbook2007 10.8.4, Mac Mini 10.8.4, iPhone 3GS Note 8!!

dtravis7 is offline
There are 3 Library folders. One in System, one off the root when you open your main hard drive and one inside users/username. The one they are talking about is the one right where Applications, System and Users are.

Internet Plugins is not a drop down. It's a folder inside that main Library folder.
Attached Images
File Type: jpg Picture 1.jpg (99.1 KB, 8 views)
File Type: jpg Picture 2.jpg (125.7 KB, 7 views)
QUOTE Thanks

Post Reply New Thread Subscribe


« virus | Possible keylogger? »
Thread Tools

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off
Forum Jump

Similar Threads
Thread
Thread Starter
Forum
Replies
Last Post
Official antivirus, malware, and firewall FAQ schweb Switcher Hangout 120 07-28-2011 04:27 PM
Expensive malware appears for Microsoft's Windows Mobile the8thark Apple Rumors and Reports 1 06-05-2010 12:14 PM
Not sure where to ask about malware, trojans and worms ... vita64 Apple Notebooks 3 03-14-2010 02:00 PM
Macs and Malware 101 capital2 Switcher Hangout 8 01-07-2010 03:44 PM
Malware for Mac lakewoodlady OS X - Apps and Games 2 02-05-2009 11:02 PM

All times are GMT -4. The time now is 08:36 AM.

Powered by vBulletin
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
X

Welcome to Mac-Forums.com

Create your username to jump into the discussion!

New members like you have made this community the ultimate source for your Mac since 2003!


(4 digit year)

Already a member?