Browser Redirecting - possible hijack

boomercates

macrumors newbie
Original poster
Jul 30, 2010
11
1
hey guys...
just bought a new used macbook...and when I open google in Safari it redirects me to another random site...not sure what is going on here...
but after i search, and click a link which i searched, thats when it re-directs me. in a new window, but i noticed if i close that window and click the same link, it takes me to the correct site, most of the time? anybody know what may be going on? and how to fix this problem? :apple:
 

boomercates

macrumors newbie
Original poster
Jul 30, 2010
11
1
i just ran ianti-virus

hey guys i just ran ianti-virus and it picked up 3 trojans

Trojan.OSX.DNSChanger.B in Library/Receipts/install.pkg/Contents/Resources/preupgrade

Trojan.OSX.DNSChanger.B in Library/Receipts/install.pkg/Contents/Resources/preinstall

Trojan.OSX.DNSChanger.B in Library/Internet Plug-ins/Quicktime
.xpt

hopefully this will fix my problem...i will let you all know?!
 

Xenophon

macrumors regular
Apr 8, 2010
131
0
New Delhi, India
So far for the often heard and broad ranging statement that virus/trojan/malware protection on a mac is totally superfluous.....

I agree that the user brought it on himself b/c at some stage the admin passwd was entered to install the 'codec' but still....

inappropriate online videos
I thought this was a computer forum, not the website of the iranian moral police. As long as the content is not illegal, everyone does what he/she wants, at least last time I checked.
 

miles01110

macrumors Core
Jul 24, 2006
19,261
31
The Ivory Tower (I'm not coming down)
I thought this was a computer forum, not the website of the iranian moral police. As long as the content is not illegal, everyone does what he/she wants, at least last time I checked.
If you had read the link I provided it clearly states that the Trojan is found on sites hosting pornographic video. Read before you get all up in arms about people suggesting ways to keep your machine safe. In addition, you nicely took my statement out of context. Any porn site that requires you to install a mystery codec isn't even a reputable porn site.

What is it?

The DNSChanger Trojan Horse, also known as OSX.RSPlug.A and OSX/Puper, and OSX/Jahlav-C, has been found on numerous pornographic websites disguising itself as a video codec. Once downloaded and installed, DNSChanger changes the DNS settings on the computer, redirecting websites entered by the user to malicious sites. If personal information is entered on these malicious websites, it can lead to identity theft.
 

GGJstudios

macrumors Westmere
May 16, 2008
44,428
796
virus/trojan/malware protection on a mac is totally superfluous.....
It is.
I agree that the user brought it on himself b/c at some stage the admin passwd was entered to install the 'codec'
Exactly.

No AntiVirus app offers protection against a user doing stupid things with their computer. If a user exercises a modicum of common sense, AV protection on a Mac is a waste of space and system resources.
As long as the content is not illegal, everyone does what he/she wants, at least last time I checked.
It's perfectly legal for anyone to download and install software from less than reputable sites, as porn sites are well known to be. It's also quite predictable that someone is asking for trouble when they do so. It has nothing to do with whether porn is bad or not. It's about being foolish enough to trust porn sites as a source for reliable software.
 

npropes

macrumors member
Jul 20, 2010
49
0
When buying a used computer, even if the previous owner has reinstalled the OS, I'd definitely do it again myself to make sure its clean.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.