Weird Browser Behavior Result of Surprise Browser Add-on

Tonight I was determined to take time to find out why I was having some strange behavior on my Firefox web browser on my MacBook Air. I’ve been doing some contract programming in Hawaii and finally got settled down enough to get a handle on some things like this. I’d also like to find some time to actually enjoy some of the nice things about Oahu instead of worrying about where I’m going to stay and how I’m going to pay for it. It’s crazy expensive here and like a whole different country. But I digress…

The browser behavior that I noticed initially was that certain web URLs would be redirected to what looked like a Yahoo search page. Is Yahoo getting that slimey? It was one of those sorts of things where if you tried to go back a page it would just redirect you again, ad infinitum. I remember going through and removing Yahoo from the search engine choices in the browser preferences a while back, but now those few site URLs give me a 404 – page not found kind of error. When I flip over to Chromium (not Chrome) the same site would load fine. So tonight I did some searching and found that some people have been having similar things happen to them. There were also the comparisons to the bad old days of Windows XP where malware was everywhere all the time. They recommended looking for plug-ins related to Yahoo and removing them. I didn’t find anything with Yahoo on it, so I started the browser up in safe mode, and sure enough the sites would load normally. So I restarted Firefox again and then started disabling plug-ins one by one, starting at the top of the list since those were the newest. After a few disablings and a few restarts, something further down the list jumped out at me — SearchMe. What the heck? I never installed such a beast. It had apparently snuck in with something else that had been installed or did some sort of cross-execution thing and downloaded itself. Anyway, I disabled it and the sites now load fine. I still have no idea how it suddenly appeared as one of my add-ons, but it did. Firefox is promising a new, safer add-ons model soon. Let’s hope it helps and doesn’t ruin many other good add-ons that we like to use.

Update: The Yahoo search reappeared in my browser and in my browser settings. I followed this guide to remove other traces of the vermin:

Adware Removal Guide : Spigot