BleepingComputer.com: Google/Search Re-directs - Check your router!

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Google/Search Re-directs - Check your router! New hardware based malware change

#1 User is offline   FFXGuy 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 26-June 10

Posted 06 July 2010 - 11:55 AM

If you have been cleaning and scanning for hours and hours working with the team on this site and can't find anything, check your router! There is apparently a new piece of malware that attempts to hack into your wireless or standard router and add rogue DNS servers to it. If you search google with certain keywords (IP lookup for example), and notice "results5.google.com" when you click a link then this is likely part of the problem.

First eliminate your personal router from the equation either by directly plugging into your ISP's device or by using someone else's internet connection at another location. If you find the problem goes away then this is likely your problem. Most routers have a reset switch on the back, see your manual for instructions on how to reset to default. Once reset then you MUST change the default password on it. Do not store the password in any browser.

The IP's used for DNS were in the Russian Federation, 213.109.65.65 and 213.109.73.7.

Probably a good idea to change ALL your passwords if this fixes everything.

Keep in mind this likely only solves a portion of the issues you may have. Posting logs and working with the team on this site is still essential to ensure your system is clean.

Thanks.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users