   Where Did My Google Go? [Hacked?!]
  So...starting about two minutes ago, whenever I type in Google.com, I get a website called 'Raj Computer'.  This is sorta weird.  Every other website works...Strange...I even reset my cache and whatnots.EDIT: Interesting whois....> whois google.comWhois Server Version 2.0Domain names in the .com and .net domains can now be registeredwith many different competing registrars. Go to http://www.internic.netfor detailed information.GOOGLE.COM.ZZZZZ.GET.LAID.AT.WWW.SWINGINGCOMMUNITY.COMGOOGLE.COM.ZZZZZ.DOWNLOAD.MOVIE.ONLINE.ZML2.COMGOOGLE.COM.ZOMBIED.AND.HACKED.BY.WWW.WEB-HACK.COMGOOGLE.COM.ZNAET.PRODOMEN.COMGOOGLE.COM.WORDT.DOOR.VEEL.WHTERS.GEBRUIKT.SERVERTJE.NETGOOGLE.COM.VNGOOGLE.COM.UYGOOGLE.COM.UAGOOGLE.COM.TWGOOGLE.COM.TRGOOGLE.COM.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COMGOOGLE.COM.SPROSIUYANDEKSA.RUGOOGLE.COM.SERVES.PR0N.FOR.ALLIYAH.NETGOOGLE.COM.SAGOOGLE.COM.PLZ.GIVE.A.PR8.TO.AUDIOTRACKER.NETGOOGLE.COM.MXGOOGLE.COM.IS.SHIT.SQUAREBOARDS.COMGOOGLE.COM.IS.NOT.HOSTED.BY.ACTIVEDOMAINDNS.NETGOOGLE.COM.IS.HOSTED.ON.PROFITHOSTING.NETGOOGLE.COM.IS.APPROVED.BY.NUMEA.COMGOOGLE.COM.HAS.LESS.FREE.PORN.IN.ITS.SEARCH.ENGINE.THAN.SECZY.COMGOOGLE.COM.DOGOOGLE.COM.COLLEGELEARNER.COMGOOGLE.COM.COGOOGLE.COM.BRGOOGLE.COM.BEYONDWHOIS.COMGOOGLE.COM.AUGOOGLE.COM.ACQUIRED.BY.CALITEC.NETGOOGLE.COMTo single out one record, look it up with "xxx", where xxx is one of theof the records displayed above. If the records are the same, look them upwith "=xxx" to receive a full display for each record.&gt;&gt;&gt; Last update of whois database: Fri, 29 May 2009 16:02:28 UTC &lt;&lt;&lt;NOTICE: The expiration date displayed in this record is the date theregistrar's sponsorship of the domain name registration in the registry iscurrently set to expire. This date does not necessarily reflect the expirationdate of the domain name registrant's agreement with the sponsoringregistrar.  Users may consult the sponsoring registrar's Whois database toview the registrar's reported date of expiration for this registration.TERMS OF USE: You are not authorized to access or query our Whoisdatabase through the use of electronic processes that are high-volume andautomated except as reasonably necessary to register domain names ormodify existing registrations; the Data in VeriSign Global RegistryServices' ("VeriSign") Whois database is provided by VeriSign forinformation purposes only, and to assist persons in obtaining informationabout or related to a domain name registration record. VeriSign does notguarantee its accuracy. By submitting a Whois query, you agree to abideby the following terms of use: You agree that you may use this Data onlyfor lawful purposes and that under no circumstances will you use this Datato: (1) allow, enable, or otherwise support the transmission of massunsolicited, commercial advertising or solicitations via e-mail, telephone,or facsimile; or (2) enable high volume, automated, electronic processesthat apply to VeriSign (or its computer systems). The compilation,repackaging, dissemination or other use of this Data is expresslyprohibited without the prior written consent of VeriSign. You agree not touse electronic processes that are automated and high-volume to access orquery the Whois database except as reasonably necessary to registerdomain names or modify existing registrations. VeriSign reserves the rightto restrict your access to the Whois database in its sole discretion to ensureoperational stability.  VeriSign may restrict or terminate your access to theWhois database for failure to abide by these terms of use. VeriSignreserves the right to modify these terms at any time.The Registry database contains ONLY .COM, .NET, .EDU domains andRegistrars.
  Open your hosts file in a text editor.  In windows, it's usually in Windows/System32/drivers/etc/hosts.  In most Linuxes (and probably OSX), it's in /etc/hosts.  That's the most straightforward way to do this to someone.It's also possible someone's hacked something between your computer and the internet.  For instance, your firewall may have been hacked, but it's much less likely.   ;  uh oh, you're now sending 1000 spams per second   ;  Heh someone hacked the router at my university before and redirected google.com to some random site and displayed messages like "what are you looking for?" and such.I would assume this kind of hacking is not uncommon. I wouldn't use it for a while in case they are doing something suspicious.   ;  Well, nobody else in my office has it.  This is sort of strange.  /etc/hosts looks fine.  This is a brand new MacBook I literally got a week ago.Hmmm....any ideas?EDIT: Can't find any zombie processes through ps or Activity Monitor...   ;  Check your proxy server settings.   ;  The whois looks like a red herring: http://www.razzed.com/2009/01/15/at-first-i-thought-google-was-being-hacked/   ;  The weird WHOIS stuff isn't related to your google.com stuff being hijacked. It's just a silly little thing that anyone can do because of how whois responds to text queries. Anyone who whois-es google.com will see that. You can even make your own! As for Google being redirected, if it isn't your hosts file it's either your DNS server or a proxy. Ping google.com and see what the IP is resolving to, then WHOIS that IP via a trusted gateway. If the result is owned by Google, it's a proxy server, either set up in Firefox or a transparent proxy on a router. If the result is owned by someone other than Google, then the chances are that your DNS server is 0wned by the same people.   ;  Well, I rebooted my computer and completely reset Safari and it seemed to fix itself.  A little strange, considering I am normally pretty good about the websites I visit...Thanks for the help anyway.   