Bill Myrick
From:
Pea Ridge, Ar. (deceased)
|
Posted 21 Mar 2007 3:36 pm |
|
I updated to Internet Explorer 7, and now whenever I try to visit the domain name company www.godaddy.com I get immediately redirected to a website (64.28.178.5) is the name server info located in the source code. The funny thing is that while that number in the source code never changes, the website displayed DOES change each time it is refreshed.
My other computer in the office does NOT have this problem. I ran SpyBot Search & Destroy. I updated Norton and scanned (nothing found). I did the usual cleanups, I rebooted, etc. It only seems to redirect when I try to visit that particular url godaddy.com
It also happens when I use Firefox. How wierd is that?!
Any thoughts?
Many thanks.
Bill |
|
Wiz Feinberg
From:
Mid-Michigan, USA
|
Posted 21 Mar 2007 5:57 pm
|
|
This sounds like DNS Poisoning to me; using a sneaky redirect in your HOSTS file to send requests for GoDaddy to a porn site at the IP address you mentioned. You have accidentally allowed a bad guy onto your computer and it has managed to remain hidden from Spybot S&D. Spybot is updated once a week, on Wednesdays. Update it today (Wednesday), Immunize and scan for problems again. Visit your HOSTS file, located in Windows XP in C:\Windows\System32\Drivers\Etc\ and open it in Notepad. Look at any code lines beginning with 127.0.0.1 other than "localhost." If you find one listing godaddy.com, or any other web address and it is redirecting to an IP address, such as the one you listed, delete those lines and save the file, without changing the name; HOSTS. There is no extension, just a prefix. Reboot and try accessing the website again. If you are still redirected to the Indian porn site your redirect is probably in the Registry, or in a hidden file in your profile folders.
_________________
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog |
|
