Do I have a virus? OSX

Hey guys,

I just had a real bad encounter and dont know if my computer (Mac Mini) is in trouble....

I was on safari, on several pages; facebook, Etrade, MSNBC, and a lyric page for this song I was listening to on itunes.

My safari window is setup to take only the center portion of the screen. I have about an inch on top,bottom, and sides.

All of a sudden a new Safari page opened by itself to my home screen (google.com) and this new Safari window took up the whole screen! When I clicked the red dot to close the page, it popped up with something that said:



What is this?? I didn't click OK to continue, even though I couldn't close the application.. I ended up going to the "Force Quit" and forcing it to quit.

I dont want it to do greater damage, so I am on my MPB for the time being...

Is this a virus?? I have 7 other Mac computers in my house/network should I be worried? How do I eliminate this virus?

MAC MINI specs:
OSX 10.6.5
Safari 5.0.3
2009 model, pre redesign.

Thanks,
James

Look at the URL in your Safari window, that is surely not Google, you seem to have a DNS hijack going on. That is, something is directing you to the this tmc01.info site as opposed to the real site.

There are no virus for Mac, so no worries there..

Follow the instructions at How to check DNS settings in Mac and tell us what you see for the DNS info..compare that with your MBP and if it doesn't match (it should if you are using the same Internet connection), then that's your culprit..

Regards

Many member ask the question about viruses and malware on the Mac and in addition to using the search function at the top of the forum, you'll find almost all your answers here:

Official Antivirus, Malware, and Firewall FAQ

frey7190 said:

Is this a virus?? I have 7 other Mac computers in my house/network should I be worried? How do I eliminate this virus?

Click to expand...

I see you've already reached a conclusion. Hope it doesn't spread to your other Macs. Maybe move them all to a different room, and put a towel over the infected one, just in case it's highly contagious.

toMACsh said:

I see you've already reached a conclusion. Hope it doesn't spread to your other Macs. Maybe move them all to a different room, and put a towel over the infected one, just in case it's highly contagious.

Click to expand...

Haha, that is too funny.

*sigh*...

Apparently anything that goes wrong on a Mac is a virus.

There are Mac malware out there. Most of them have to be downloaded by the user. Usually masquerading as "cracked" software or keygens.
So yeah technically speaking there aren't any virii, but malware, trojans etc. yeah.

Virii isn't a word, it's viruses.

I tried browsing to that site here and it appeared to simply redirect to random sites that you would commonly see in popups. The php script did appear to be connecting to quite a few different networks (most of them looked to be ad sites) before finally loading one. I seemed to land on one that had to do with sound bites from movies frequently. That's all I can gather from it and I'm not even sure I'm describing what I saw accurately (I don't actually know what the script did - I'm speculating).

As has been suggested above, check your DNS settings. To do so, go to System Preferences > Network > click your device (airport if connecting wirelessly, ethernet if wired) > Advanced... > DNS. Take those IPs and search them in Google if they are unfamiliar to see if they are legit DNS servers from your ISP (or elsewhere such as OpenDNS) or if they are illegitimate ones.