Redirect Malware Travels Through Network.

[nedi]

Hello,

Upon clicking any wikipedia link or heading to wikipedia through address bar, I am redirected to a page containing ads. Also with Yahoo.com. Friend over last night acquired same thing after connecting to my network. Any help would be greatly appreciated. thank-you.

Attach.txt

DDS.txt

[nedi]

...Also, I believe I acquired it from next door neighbor. If not, I would imagine his computer is infected as well as we share a connection through the router in his apt. Problem is that he doesn't speak english, so I can't talk with him about it. So I'm hoping to fix it on my end and set up your fine product to at least protect myself. thanks again.

[David H. Lipman]

If you share access through his router then the problem may not be malware on all computers but the Router has been compromised and the DNS Table has been altered.

One way to tell if this is the case is to manually override the DNS servers provided by DHCP by providing statically set DNS Servers.

Setting the following as static DNS Servers is suggested as a test...

4.2.2.1

8.8.8.8

208.67.222.222

[nedi]

Terribly sorry, I've spent the last hour researching how to do that, but will put my pride in my pocket and ask how/ where to put those numbers. Perhaps a link instructing me?

[David H. Lipman]

You need to identify the OS for explicit instructions.

Simplistically you go to network connections and modify the TCP/IP stack and indicate what DNS servers to use.

[nedi]

Well, here is what I did before receiving your post: I went to the router set up and input the numbers into DHCP Server settings > static dns 1, 2 and 3. Wikipedia shows up okay now. What do you suggest?

[David H. Lipman]

Well. I wanted you to change the PC DNS table because I didn't think you had administrative access to the Router. What you did was PERFECT and I give you kudos.

The first thing you need to do is implement a strong password on the Router.

You also still need to scan the computers that connect to the Router to see if there is malware that may have altered the Router DNS table.

If you have knowledge of the Router it would also be a good idea to lock down the Remote Administration of the Router. That means to disable the ability to manage the Router from the POV of the Internet (WAN). Only Local Area Network (LAN) users who know the strong administrative password can manage the Router. This way you preclude the possibility of outside influences on the setup of the Router.

[nedi]

Thank you so much for your help, Mr. Lipman. I'll let everyone on the network know the situation, and I'll post what I find after they all run scans. Cheers.

[David H. Lipman]

BTW: I'm David. No need to be formal.

Please do post your results and any questions.

[screen317]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!