Before anyone says it, yes, I know my name is trojan18 and I'm posting about possibly having a trojan on my computer. Oh, the irony.
While surfing the web tonight, I accidentally typed the wrong address into Safari.
I typed preview.cnn.com instead of just cnn.com because the previous site I was surfing did have a preview in the address and I just wasn't thinking straight.
But instead of the standard page telling me that the address did not exist, I was redirected to a very shady looking site:
http://wwwm.help-yield.net/search?qo=preview.cnn.com&rn=wAnOwJ1zkvwXV2J
The page says it's "powered by Yahoo Search" and has some pretty random links on it related to CNN. Pretty standard search page.
So I tried again, intentionally putting in a wrong address:
trojan.macrumors.com leads to http://wwwm.help-yield.net/search?qo=trojan.macrumors.com&rn=7kKcagOmqvCtzRa
Basically, any completely wrong address with a prefix before the main site will lead me to this help-yield.net search page.
For example, CNN.com/preview leads me to CNN's standard 401 error. It's only when I do preview.cnn.com or anything.cnn.com that I am taken to help-yield.net
This is also happening in Firefox as well, same exact story, so it's not just a Safari issue.
Most shady and/or alarming of all is the following link at the bottom of this "search" page, titled "About this Page"... clicking on it takes you to this:
About the Search Results Page
The search results on the prior page were provided to you because you entered keywords or an improperly formatted, currently unavailable, or nonexistent domain name into the address bar. This service is designed to enhance your web surfing experience.
No software was installed on your computer for this service to work.
It then features an "opt-out" box where you can stop this site from coming up, but says that in order for it to work, the site will download a cookie to a computer and you must keep this cookie installed or the search page will pop back up again.
http://wwwm.help-yield.net/options
Obviously, I'm not downloading anything right now until I figure out what is going on.
I never installed this, never asked for it, it just started happening.
Any ideas?
I'm using an ibook G4 with the latest version of Tiger installed. This is not happening on my newer intel Imac, just this computer.
While surfing the web tonight, I accidentally typed the wrong address into Safari.
I typed preview.cnn.com instead of just cnn.com because the previous site I was surfing did have a preview in the address and I just wasn't thinking straight.
But instead of the standard page telling me that the address did not exist, I was redirected to a very shady looking site:
http://wwwm.help-yield.net/search?qo=preview.cnn.com&rn=wAnOwJ1zkvwXV2J
The page says it's "powered by Yahoo Search" and has some pretty random links on it related to CNN. Pretty standard search page.
So I tried again, intentionally putting in a wrong address:
trojan.macrumors.com leads to http://wwwm.help-yield.net/search?qo=trojan.macrumors.com&rn=7kKcagOmqvCtzRa
Basically, any completely wrong address with a prefix before the main site will lead me to this help-yield.net search page.
For example, CNN.com/preview leads me to CNN's standard 401 error. It's only when I do preview.cnn.com or anything.cnn.com that I am taken to help-yield.net
This is also happening in Firefox as well, same exact story, so it's not just a Safari issue.
Most shady and/or alarming of all is the following link at the bottom of this "search" page, titled "About this Page"... clicking on it takes you to this:
About the Search Results Page
The search results on the prior page were provided to you because you entered keywords or an improperly formatted, currently unavailable, or nonexistent domain name into the address bar. This service is designed to enhance your web surfing experience.
No software was installed on your computer for this service to work.
It then features an "opt-out" box where you can stop this site from coming up, but says that in order for it to work, the site will download a cookie to a computer and you must keep this cookie installed or the search page will pop back up again.
http://wwwm.help-yield.net/options
Obviously, I'm not downloading anything right now until I figure out what is going on.
I never installed this, never asked for it, it just started happening.
Any ideas?
I'm using an ibook G4 with the latest version of Tiger installed. This is not happening on my newer intel Imac, just this computer.
