Redirection Malware?

Hi,

I am new to this forum and I hope I am posting in the right place.

My problem is self generated as I foolishly was tempted to the darker corners of the internet. Feel free to judge me as you may.

I have a problem now where if I enter an incorrect url address I get redirected to a site called searchtube which is a search engine for adult videos.

I have spent a lot of time looking online tonight in various forums for ways to remove what I believe to be malware. I have downloaded and ran iAntivirus, Protect Macantivirus, Clam Xav etc. None of these searches have come up with anything.

I have tried clearing the caches and cookies for both Firefox and Safari (yes the same thing happens on both).

I have a MBP OS X 10.5.8 version.

I have learned my lesson about these sites and the supposed invulnerability of a mac.

I am hoping that someone can help me rid my computer of this problem.

The only way you can get that Trojan that redirects is by downloading a video codes from a questionable site or some pirated software. Do you remember what you did? You also have to give it the OSX password for it to install. Tell us a bit more so I can be sure what is going on. I spent all night once to try and get that redirect Trojan and finally did on an old Mac. Gave it the password and let it rip. I removed it in a half a minute with the terminal. Will look for the command but please tell us what you did and where you went.

Not trying to trap you BTW, just trying to be sure I know what you have so I can help you remove it.

OSX is very secure. You had to give something permission and a password at sometime.

If you have what I think you do, follow this EXACTLY and it will be gone. Like I said in my other message, please let us know what you did to get this. I want to be sure this is what you have.

How to find and remove the OSX.RSPlug.A malware - Mac OS X Hints

No worries I appreciate any help I can get.

I was on the youporn site.

Although my decision may not have shown it I am usually pretty smart about pop ups and such, I know not to accept or download. I also don't recall being asked to download any updates or give a password to accept a download. Which is why I am so baffled by this whole thing.

I really do wish I could provide more detail I just noticed this happen for the first time today.

Check my 2nd message. See if any of those files are there.

also when I follow those steps I can't locate the internet plugin drop down under library.

There are 3 Library folders. One in System, one off the root when you open your main hard drive and one inside users/username. The one they are talking about is the one right where Applications, System and Users are.

Internet Plugins is not a drop down. It's a folder inside that main Library folder.