DNS Highjack? Malware?

Discussion in 'Mac OS X Lion (10.7)' started by bohemianboy, Jun 4, 2013.

  1. bohemianboy macrumors newbie

    Aug 12, 2008

    After a drunken night I admit to having installed the Badoo Desktop client... Now, after removing it, I've noticed that all my searches on chrome or firefox end up something like this:

    I've been looking around, I've tried the dnschanger tool, no success... Tried to change the dns's myself to the google and opendns ones, nothing... Now running a ClamXav scan, but I don't have so many hopes.

    My host file is something like this:

    # Host Database
    # localhost is used to configure the loopback interface
    # when the system is booting.  Do not change this entry.
    ##	localhost	broadcasthost
    (lots of adobe related itens)
    ::1             localhost 
    fe80::1%lo0	localhost
    ## gs.apple.com
    ## gs.apple.com
    Any ideas on what's going on?
  2. GGJstudios macrumors Westmere


    May 16, 2008
  3. bohemianboy thread starter macrumors newbie

    Aug 12, 2008
    Oh, but I have,

    I will give a go to the manual deletion tho.
  4. chown33 macrumors 604

    Aug 9, 2009
    Sailing beyond the sunset
    DNS has nothing to do with the URL shown. The problem lies in the URL itself, not in which remote DNS server is being used to resolve google.pt.

    A more likely possibility is that Badoo Desktop modified some settings for those browsers, so instead of using a plain google URL as the search engine, it uses the URL with the embedded badoo junk.

    You should look in the browser settings for settings that work with or manage search engines. If a search engine has been added or modified, fix it. If you don't see anything, then report back with that information.

    I don't use Chrome or Firefox regularly, so I googled this:
    chrome search engine

    and found this:

    See the heading "Add, edit, or remove search engines". AFAIK, this is the same as Chrome's builtin help / settings info.

    By the way, google.pt is Google's home page for Portugal. Unless you're located there, it seems like an odd choice.

Share This Page