Wtf Internet? Being redirected to pages other than what I am typing

projectmayhem

So this started a few days ago when my lady was using the computer. She would click on the bookmark link in Chrome for facebook and it would take her to the washington post website. I didnt believe it at first until I saw it happen myself.

Then just now I was browsing slashfilm and it took me to a myspace error page with facebook.com as the web address.

I ran AVG the other night and nothing came up.

I am at a complete loss as to what is going on.

Halp?

MrIamMe

Sounds like maybe DNS poisoning.

Who is your ISP? And change your DNS to OpenDNS or googleDNS.

Google OpenDNS/googleDNS for instructions.

EDIT: American Court of Appeals overturned Network Neutrallity yesterday, so if you are with one of the big american ISPs, this is probably the case.

Visti

So yeah, post up hijackthis log, run anti-virus check, spyware check etc and report back with logs and whatnot.

Iconoclysm

Does this happen when browsing in another web browser too?
If not, uninstall/reinstall of chrome should fix it.
If it does, type the following IP address into the browser windows and report what happens:
66.220.146.25

( Its the IP address for facebook btw, nothing to worry about )

darkmayo

strange, normally adware malware would jack you browser to go to casinos or porn..

I would just system restore to before this shit started happening.

Shorn Scrotum Man

Gotta agree that it sounds like someone jacked your DNS. Check your DNS settings.

Then proceed to hit your computer with as much anti-virus/anti-spyware/anti-malware as you can.

NightDragon

Man, this has happened to me and my roommate two or three times this school year. I had no idea what was going on, either (no virus/malware/spyware/etc popped up when I ran a scan for it). I'll try to find this thread again when it happens next. :P

Ruckus

As a network tech, I'd recommend a third party DNS like opendns or Googledns

OpenDNS's servers are
208.67.222.222
208.67.220.220

Googles are
8.8.8.8
8.8.4.4

blakfeld

Did you check your hosts file?

Use notepad, and open it up: C:/ Windows/system32/drivers /etc/ hosts

should just read home (127.0.0.1), we play pranks on people all the time at work with it, like changing hulu to re-direct to a page that says "get back to work you tool"

SkyCaptain

blakfeld wrote: »

Did you check your hosts file?

Use notepad, and open it up: C:/ Windows/system32/drivers /etc/ hosts

should just read home (127.0.0.1), we play pranks on people all the time at work with it, like changing hulu to re-direct to a page that says "get back to work you tool"

On a sidenote about hosts files... is there a way to block everything except a small list of allowed sites and can you just specify those sites by typing in: penny-arcade.com or does it have to be the ip address?

MrIamMe

Use a whitelist filter, much easier.

projectmayhem

A follow up. It happened again today so I changed my dns to google. So far everything is working fine, thanks for the help =D

krush

happened to one of my kid's machines'. Type in google, yahoo, msn, or similar pages and it would redirect to random porn. Eventually, even myspace was taken over. I did a dns flush and pointed directly at our ISP's DNS servers and that took care of it.