youbettersearch and DNS cache poisoning [CLOSED] - Geeks to Go Forums

Jump to content

Log in Register Register Malware removal guide How it works

youbettersearch and DNS cache poisoning [CLOSED]

#1 freefaller

  • Group: Member
  • Posts: 1
  • Joined: 14-December 05

Posted 14 December 2005 - 08:38 AM

All of the folders inside my root folder are redirecting me to youbettersearch.com but only if I fail to add the index.html in the url (comfortinncocoabeach.com/glory results in a redirect....but add /index.html and the proper page displays). This happens on no other sites. Further, I've contacted friends around the country who are all experiencing the same result.

My ISP says I have malware running on my system. I've looked at the host file and there are no entries indicating improper redirection. I've run hijackthis and there is no referrence to youbettersearch.

Then my ISP says the only other explaination would be DNS cache poisoning....but, he added, if that were the case, it would effect the entire site, not just the sub-folders.

Anyone got any ideas what is up with this? It might be enligtening for you to test the links youself and see if you get redirected. I know I don't have malware on my computer and it seems implausable that everyone I know from Denver, to Boston to Orlando all are infected.....and that the malware only presents itself on this single website.

I would sure appreciate some insight.

#2 Buckeye_Sam

  • Group: Member
  • Posts: 10,019
  • Joined: 10-July 05

Posted 18 December 2005 - 09:51 AM

Hi and welcome to GeeksToGo! My name is Sam and I will be helping you. :tazz:
That site seems to load fine for me. I get the Comfort Inn Cocoa Beach. It looks nice! :)
We need to take a look at a hijackthis log to find the malware.

Please visit this page and scroll down to Step 5.
Follow the instructions there to download a tool called Hijackthis and post a log here as a reply to this post.

#3 Buckeye_Sam

  • Group: Member
  • Posts: 10,019
  • Joined: 10-July 05

Posted 01 January 2006 - 08:34 AM

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.

Share this topic: