Uhh think my mac got a virus

[.:bHd:.]

Every time i turn on my computer safari opens and goes to a porn site. Has this happened to anyone? I have the latest mac osx updated and everything. It's kinda funny but worrying at the same time lol

[MisterSkiMask]

I'm not your wife, I don't need your excuses.

[BoBinder]

Originally Posted by MisterSkiMask

I'm not your wife, I don't need your excuses.

[BTM]

That's how my computer works...no viruses here

[Nedim]

Originally Posted by BTM

That's how my computer works...no viruses here

[radix]

Originally Posted by .:bHd:.

Every time i turn on my computer safari opens and goes to a porn site. Has this happened to anyone? I have the latest mac osx updated and everything. It's kinda funny but worrying at the same time lol

It's possible you downloaded a trojan. Reset Safari and see if it still happens. Additionally, make sure you're not autostarting Safari:

http://support.apple.com/kb/HT2602

[xtac]

http://www.dnschanger.com/

[radix]

Originally Posted by xtac

http://www.dnschanger.com/

Could be. That's one of the things I was thinking of. Two quick ways to rule it out:

1. System Preferences->Network->Advanced->DNS

or open a terminal and:

$ scutil
> open
> get State:/Network/Global/IPv4
> d.show
<dictionary> {
  PrimaryInterface : en1
  PrimaryService : C471E2F9-1A03-4608-A7C6-CE3AB0EE5895
  Router : 10.0.0.1
}
> get State:/Network/Service/C471E2F9-1A03-4608-A7C6-CE3AB0EE5895/DNS
> d.show
<dictionary> {
  ServerAddresses : <array> {
    0 : 10.0.0.1
  }
  DomainName : oompa.loompa.com.
}

[burningchicken]

maybe your friend just set it as your homepage o.O

[lopealle]

i wish my internet homepage could be set to porno. your suck lucky

[.:bHd:.]

it's not the home page. My homepage is still the same. This only happens when I turn on the computer. Safari automatically opens and goes to that site. Which looks familiar :x

[immiketoo]

Originally Posted by .:bHd:.

it's not the home page. My homepage is still the same. This only happens when I turn on the computer. Safari automatically opens and goes to that site. Which looks familiar :x

The part in red made me chuckle. I'd chalk it up to improved efficiency

[.:bHd:.]

alright I tried everything you guys said and it still happens. No trojans found by the way. I googled it turns out it happens to a lot of people. So ya this sucks

[lopealle]

you should consider yourself lucky. you got one of the better computers that knows its user.

[ABQ325i]

I always knew Macs were designed with the user in mind. After a while it intuitively learns your browsing habits and now automatically goes there for you.

[radix]

Originally Posted by .:bHd:.

alright I tried everything you guys said and it still happens. No trojans found by the way. I googled it turns out it happens to a lot of people. So ya this sucks

Did you follow the link I posted above to insure that safari was not autostarting? If that didn't help, open a terminal and type the following in bold at the prompt:

$ crontab -l
crontab: no crontab for xxxxxxxx
$ ls -l .bash{rc,_profile}*
ls: .bash_profile*: No such file or directory
ls: .bashrc*: No such file or directory
$ cat .profile

# MacPorts Installer addition on 2010-06-28_at_20:50:27: adding an appropriate PATH variable for use with MacPorts.
export PATH=/opt/local/bin:/opt/local/sbin:$PATH
# Finished adapting your PATH environment variable for use with MacPorts.

$ ps -ef | grep -i [s]afari
  501 40421   176   0   0:01.11 ??         0:05.39 /Applications/Safari.app/Contents/MacOS/Safari -psn_0_22152479

# Take note of the third column in red above

$ ps -p 176
  PID TTY           TIME CMD
  176 ??         0:10.23 /sbin/launchd

post the results. I know this is all complicated, but it'll help figure out what might be starting Safari. Please also sanitize your command prompt, I don't want to know your name.

[.:bHd:.]

Originally Posted by radix

Did you follow the link I posted above to insure that safari was not autostarting? If that didn't help, open a terminal and type the following in bold at the prompt:

$ crontab -l
crontab: no crontab for xxxxxxxx
$ ls -l .bash{rc,_profile}*
ls: .bash_profile*: No such file or directory
ls: .bashrc*: No such file or directory
$ cat .profile

# MacPorts Installer addition on 2010-06-28_at_20:50:27: adding an appropriate PATH variable for use with MacPorts.
export PATH=/opt/local/bin:/opt/local/sbin:$PATH
# Finished adapting your PATH environment variable for use with MacPorts.

$ ps -ef | grep -i [s]afari
  501 40421   176   0   0:01.11 ??         0:05.39 /Applications/Safari.app/Contents/MacOS/Safari -psn_0_22152479

# Take note of the third column in red above

$ ps -p 176
  PID TTY           TIME CMD
  176 ??         0:10.23 /sbin/launchd

post the results. I know this is all complicated, but it'll help figure out what might be starting Safari. Please also sanitize your command prompt, I don't want to know your name.

i tried and half of those commands didnt really do anything.. or im just not that good with terminal lol is there an easier way? With onyx maybe?

[OC Guy]

u must watch a lot of porn to get a virus on your mac.

Don't you know better? You can stream shit man.

[.:bHd:.]

Originally Posted by OC 335i

u must watch a lot of porn to get a virus on your mac.

Don't you know better? You can stream shit man.

bro i was streaming lmaoo Turns out its a common bug on safari.. it's just that with my shit luck it had to be a porn site.. it couldn't be e90post or something else

[OC Guy]

lol where were u streaming?

[.:bHd:.]

youjizz

[OC Guy]

damn. try turning Private browsing on, it might eliminate anything from being saved to your browser. It does not prevent cookies though, which has to be done manually.

Disclaimer: This is purely IT advice.