World of Pageantry

World of Pageantry

All times are UTC - 8 hours


Post new topic Reply to topic  [ 17 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: HELP! Searh Engine Redirect Virus
PostPosted: Sun Apr 20, 2008 1:42 pm 
Offline
Support Staff
Support Staff
User avatar

Joined: Thu Oct 30, 2003 12:58 pm
Posts: 3598
Location: Escondido, Ca
Someone Help! I seem to have a virus that causes all my search engine results to be redirected. It's affecting all the search engines, Yahoo, Google, Alta Vista!!! When I perform a search the normal results come up, but when I click on a result it doesn't take me to the actual site, it comes up with a http://reults.yahoo.com and then takes me to some stupid spam page. The yahoo results address comes up no matter which search engine I use. The virus is not appear to be browser related, I have the same problem in Firefox, Opera, and Safari. Is anyone else having this problem or is the virus on my computer, or is it universal at the moment? Having a Mac I never really have to deal with viruses, so I'm not sure what to do, but it is quite annoying.

_________________
Go read "Ishmael" a novel by Daniel Quinn. It will literally change your life.
Corruptissima re publica plurimae leges.
Image


Top
 Profile E-mail  
 
 Post subject:
PostPosted: Sun Apr 20, 2008 8:10 pm 
Offline
Section Leader
Section Leader
User avatar

Joined: Thu Jan 04, 2007 8:13 pm
Posts: 896
Location: California
Could be a virus or more likely, malware. Based on previous posts I assume that you're running a mac. Try downloading Adaware and running a scan. If you're on a PC then Windows Defender is quite a bit better.

_________________
Image


Top
 Profile  
 
 Post subject:
PostPosted: Sun Apr 20, 2008 11:01 pm 
Offline
Drum Major
Drum Major
User avatar

Joined: Mon Jul 25, 2005 9:12 am
Posts: 1819
Location: Amory
adaware doesn't work for mac... i don't know if there is anything out for mac yet...

try emptying every single internet file folder you have. it's bound to be there somewhere.

_________________
Image

Cybernations


Top
 Profile E-mail  
 
 Post subject:
PostPosted: Mon Apr 21, 2008 9:12 am 
Offline
Support Staff
Support Staff
User avatar

Joined: Tue Oct 29, 2002 6:46 am
Posts: 7944
Location: West Allis, WI
Ex Nihilo wrote:
adaware doesn't work for mac... i don't know if there is anything out for mac yet...

Nor does Spybot.

Yeah, 95% of all viruses/spyware might target PCs... but that means about 95% of all the FIXES do, too.


Top
 Profile E-mail  
 
 Post subject:
PostPosted: Mon Apr 21, 2008 9:14 am 
Offline
Support Staff
Support Staff
User avatar

Joined: Thu Oct 30, 2003 12:58 pm
Posts: 3598
Location: Escondido, Ca
I downloaded and ran MacScan which found a few minor viruses, I deleted them all and still had the problem. I ended up just clearing all my cookies and that fixed the problem. But it's annoying having to login to all my pages and having to tell my browser to remember them again.

_________________
Go read "Ishmael" a novel by Daniel Quinn. It will literally change your life.
Corruptissima re publica plurimae leges.
Image


Top
 Profile E-mail  
 
 Post subject:
PostPosted: Mon Apr 21, 2008 1:23 pm 
Offline
Support Staff
Support Staff
User avatar

Joined: Thu Oct 30, 2003 12:58 pm
Posts: 3598
Location: Escondido, Ca
OK, nevermind, thought the problem was fixed, but I was wrong, grrrr.

_________________
Go read "Ishmael" a novel by Daniel Quinn. It will literally change your life.
Corruptissima re publica plurimae leges.
Image


Top
 Profile E-mail  
 
 Post subject:
PostPosted: Mon Apr 21, 2008 3:42 pm 
Offline
Section Leader
Section Leader
User avatar

Joined: Thu Jan 04, 2007 8:13 pm
Posts: 896
Location: California
Doh! I thought adaware ran on any platform.

Although I'm not sure how to do it on a mac, the next step would be to look at your startup programs (on a pc it's msconfig) to see if there is anything out of the ordinary. Also be on the alert for a double entry (ie if it shows acrobat twice, be a little suspicious of it). I'm almost positive that macs have 2 startup folders... 1 for login startup and one for computer/os startup... you will need to check both.

_________________
Image


Top
 Profile  
 
 Post subject:
PostPosted: Tue Apr 22, 2008 1:14 pm 
Offline
Drum Major
Drum Major
User avatar

Joined: Fri Apr 25, 2003 12:38 am
Posts: 2858
Location: Los Angeles
is there a safe mode on Macs? you should try some computer cleaning in safe mode. I've never had any virus problems since the late 90s. Friends of mine had some success defeating ad/spyware running cleaning programs and clearing cookies on safe mode.

_________________
WHS '05, UCSB '10
WOP OT Round 1 Picture Battle Champion!
WOP OT Mafia Game II: First ever mafia champions
http://officeofstrategicinfluence.com/spam/


Top
 Profile  
 
 Post subject:
PostPosted: Wed Apr 23, 2008 7:31 am 
IsnipeWithAknife wrote:
is there a safe mode on Macs?


Hold down shift after the chime and wait for the gray loading screen.


Top
  
 
 Post subject:
PostPosted: Tue Apr 29, 2008 4:34 pm 
Offline
Drum Major
Drum Major
User avatar

Joined: Wed Sep 08, 2004 5:21 pm
Posts: 2412
Location: Jerusalem, Israel
An attack like this would generally be an infection in the winsock catalog on a PC. Basically, you access the internet through a series of programs called LSPs (Layered Service Providers) stored in the winsock catalog. Each one has the ability to do ANYTHING IT WANTS to ANY INTERNET TRAFFIC currently running on your computer.

On windows there's an easy command (netsh wins reset) to reset the catalog to a "clean" state (that is, the same way it was when the OS was installed). I don't know if the same exists for Mac.

_________________
It's 5:00... do you know where your ancestors came from?


Top
 Profile E-mail  
 
 Post subject:
PostPosted: Wed Apr 30, 2008 6:47 am 
Offline
Support Staff
Support Staff
User avatar

Joined: Thu Oct 30, 2003 12:58 pm
Posts: 3598
Location: Escondido, Ca
mkosbie wrote:
An attack like this would generally be an infection in the winsock catalog on a PC. Basically, you access the internet through a series of programs called LSPs (Layered Service Providers) stored in the winsock catalog. Each one has the ability to do ANYTHING IT WANTS to ANY INTERNET TRAFFIC currently running on your computer.

On windows there's an easy command (netsh wins reset) to reset the catalog to a "clean" state (that is, the same way it was when the OS was installed). I don't know if the same exists for Mac.


UNIX systems do not require a Winsock equivalent because TCP/IP and its use of sockets was designed to run directly with UNIX application programs. Basically eliminates the middle man, there is no WinSock.dll in between your browser and your TCP/IP on a mac.

_________________
Go read "Ishmael" a novel by Daniel Quinn. It will literally change your life.
Corruptissima re publica plurimae leges.
Image


Top
 Profile E-mail  
 
 Post subject:
PostPosted: Sun May 11, 2008 10:17 am 
Offline
Support Staff
Support Staff
User avatar

Joined: Thu Oct 30, 2003 12:58 pm
Posts: 3598
Location: Escondido, Ca
OK, so I finally got rid of it. All I had to do was flush my DNS cache, and voila. I'm assuming since that fixed the problem, the malware I had was a Trojan Virus DNS Changer, had all the syptoms and flushing the DNS cache solved the problem.

_________________
Go read "Ishmael" a novel by Daniel Quinn. It will literally change your life.
Corruptissima re publica plurimae leges.
Image


Top
 Profile E-mail  
 
 Post subject:
PostPosted: Sun May 11, 2008 10:32 pm 
Offline
Drum Major
Drum Major
User avatar

Joined: Mon Jul 25, 2005 9:12 am
Posts: 1819
Location: Amory
any idea where it came from?

_________________
Image

Cybernations


Top
 Profile E-mail  
 
 Post subject:
PostPosted: Mon May 12, 2008 7:27 am 
Offline
Support Staff
Support Staff
User avatar

Joined: Tue Oct 29, 2002 6:46 am
Posts: 7944
Location: West Allis, WI
The internet.

:duck:


Top
 Profile E-mail  
 
 Post subject:
PostPosted: Mon May 12, 2008 8:25 am 
Offline
Support Staff
Support Staff
User avatar

Joined: Thu Oct 30, 2003 12:58 pm
Posts: 3598
Location: Escondido, Ca
Ex Nihilo wrote:
any idea where it came from?


Not sure, but there are a few users on this computer and ALL the accounts were affected, so we may never know.

_________________
Go read "Ishmael" a novel by Daniel Quinn. It will literally change your life.
Corruptissima re publica plurimae leges.
Image


Top
 Profile E-mail  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 17 posts ]  Go to page 1, 2  Next

All times are UTC - 8 hours


Who is online

Users browsing this forum: No registered users and 6 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
  http://www.worldofpageantry.com Copyright © 1996 - 2006 Email:  admin@worldofpageantry.com  

Site design and maintenance by Dave Schaafsma at Dave's Web Dynamics