Spyware, viruses, & security forum: Redirect/Pop-up Ads Malware Not Detected By...

Hi Bob,

Thanks for replying. Great suggestion. This problem began when I was not on a router. I was using a SPRINT USB Wireless account out of town for an extended length of time. Then I returned home to SF Bay Area and went to my tech guys. They checked and scanned and could find nothing wrong. But the problem stopped. Now a couple of months later after much Internet surfing the problem has restarted. I did switch away from the SPRINT wireless which I cancelled 2 weeks ago but the problem seems unrelated to the temporary out-of-town landlady's router because I had this problem for months on the SPRINT Wireless. This netbook was ALWAYS on the SPRINT Wireless from the moment I bought it until these symptoms started.

One odd thing to mention: I was able to use Kaspersky TDSS Killer (123.com) from my own desktop. I did not have to download to a friend's computer on a flashdrive in order to use it.

I'm off to work but I look forward to coming home and hopefully finding other thoughts or suggestions, from you, Bob, or anyone else!.

Look at the IP addresses of the DNS you are using and let's check that out. DNS hijacking can go undetected by most scanners. And can result in what you noted.

I know it sounds terrible but given I don't want to spend a lot of time on folk's machines I often change it to the Google DNS without seeing if the DNS was jacked. Your choice here on the research part so let's link about this one.

http://en.wikipedia.org/wiki/DNS_hijacking covers it all and includes notes about ISPs that "use DNS hijacking for their own purposes, such as displaying advertisements".

Bob

I read the DNS Hijack WIki and the Domain Name System WIki (for a refresher). The DNS Hijack examples did not sound like me. I really wasn't on a router or a network other than Sprint until about 10 days or two weeks ago, more likely the former. This problem has been going on since Spring, stopped in June, then started up again in early July. I'm going crazy. I'm trying to manage a renovation project, sell salvageable items on Craigslist and occasionally price something new online at a retailer, keep up with email and online news and I never know on what day a given site will give me a redirect to the white URL Not Found or worse the red Warning - some site is attempting to a redirect - this is not the site you want - go back or whatever (which I believe is generated from Chrome or an add-on or extension - I'm not really sure).

Even if it is a DNS Hijack and not a rootkit...how do I resolve a DNS Hijack???

I used the Google DNS and then cleared the arp cache just to be sure.

If that's not enough read http://www.bleepingcomputer.com/forums/topic436991.html about more scans to run.

There is that problem I run into and I understand that folk do not want to become masters of networking and change the DNS they use, but with all the pressure for ISPs to make a few bucks they can do things like this. Easy enough to use another DNS so that's what I do.

But how to get my mom to change this? Like most seniors, not into networking.
Bob