Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Auto Redirection DNS Problem


  • This topic is locked This topic is locked
2 replies to this topic

#1 ESBLKN

ESBLKN

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:10 PM

Posted 03 November 2016 - 12:29 PM

Hello,

 

About 7 days ago, I was trying to test some game, AVG antivirus detected that there was a suspicious file in Temp while installing the game, so I've turned it off, for both virus scan and identity protection.

And so, I think, how this is problem infected my PC...

I've noticed whenever try to use internet, something redirects me to some adf.ly ad page or other similar ad pages... When I've checked my router configuration page, I've found that DNS server has changed to some DNS in France, I live in Egypt.

I've tried to change it manually, when I change it there's no such a problem of redirection appears.

 

But within minutes it changes again to the same French DNS or other French DNS, and the problem continues.

I've checked my computer with many tools:
Rougekiller: detected some registry suspicious problem about DNS server.

 

I've chosen to fix it, but the problem appeared again.

 

I've changed my Windows system, Deleted partition C, formatted it again, Reset my router to its default factory settings...

The problem still appear on my new Windows now (Windows 10 64 bit)...

 

Now these tools I've used:
Rouge killer doesn't detect any problems with the registry

Malwarebytes: detected nothing suspicious.
Norton Power Eraser: detected nothing suspicious.
Hitman Pro: detected nothing suspicious.
Adwcleaner: detected nothing suspicious.
TdssKiller: detected nothing suspicious.

AviraDNSrepair: detected nothing suspicious.
rkill: no changes happened.
Zemana antimaleware: detected nothing suspicious.

 

I've tried to reset my Firefox and Internet explorer, but also in vain.

I don't want what to do to resolve this problem...
I've deleted that game permanently, but is there any way to fix this problem...

Thanks for advance.



BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 40,476 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:10:10 AM

Posted 05 November 2016 - 09:17 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
attachlogs.png

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.

Click the Add reply button.
===

Please post the logs.

Wait for further instructions.

#3 ESBLKN

ESBLKN
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:10 PM

Posted 05 November 2016 - 12:25 PM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
attachlogs.png

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.

Click the Add reply button.
===

Please post the logs.

Wait for further instructions.

 

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
attachlogs.png

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.

Click the Add reply button.
===

Please post the logs.

Wait for further instructions.

 

Thank you My bro Nasdaq...
Problem Solved...
I've changed my router account password and now for 2 days DNS didn't change.

Thank you very much for your reply.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users