GroupStudy.com GroupStudy.com - A virtual community of network engineers
 Home  BookStore  StudyNotes  Links  Archives  StudyRooms  HelpWanted  Discounts  Login
Re: OT:Web Browsing [7:91734] posted 08/13/2004
[Chronological Index] [Thread Index] [Top] [Date Prev][Date Next] [Thread Prev][Thread Next]


hijackthis is the only tool I use from spyware and it does not require an
install.

""Wojtek Zlobicki""  wrote in message
news:200408130034.i7D0Y8TV013224@xxxxxxxxxxxxxxxxx
> Try both Spybot Search and Destroy as well as Ad-Aware.  I have
> personally found that no single piece of software will find all
> spyware.
>
> On Thu, 12 Aug 2004 21:34:21 GMT, Mossburg, Geoff (MAN-Corporate)
>  wrote:
> > From what I've found online, this same problem has happened
intermittently
> > since at least January of this year. There's a site I found which seems
to
> > have a dialogue about the problem from around the beginning of last
month,
> > but the MyFamily.com problem is mixed in with other comments, and I
haven't
> > had time to read the posts all the way through. Here's the link if you
want
> > to check it out (watch for word wrap on the link):
> > http://forums.whirlpool.net.au/forum-replies.cfm?t=212763&p=2
> > You'll have to go about 3/4 of the way down the page before you'll see
the
> > MyFamily.com posts start; do a "Find" on the page for the word
"redirected"
> > and it will take you right there. This site seems to have determined
that
> > the problem is related to transparent proxy, so maybe that will help
your
> > search. Good luck!
> >
> > Geoff Mossburg
> >
> > -----Original Message-----
> > From: nobody@xxxxxxxxxxxxxx [mailto:nobody@xxxxxxxxxxxxxx] On Behalf Of
> > PADGETT.LYNNE
> > Sent: Thursday, August 12, 2004 4:55 PM
> > To: cisco@xxxxxxxxxxxxxx
> > Subject: RE: OT:Web Browsing [7:91734]
> >
> > Thanks to both of the suggestions that have been presented so far.  We
> > have pest patrol running on all of the 500 PCs that are affected, along
> > with the latest latest Trend stuff, latest Microsoft updates, and we've
> > flushed the DNS cache.  The thing that's driving me nuts is that it's
> > intermittent.
> >
> > Anyone else have any suggestions?
> >
> > -----Original Message-----
> > From: Sam Sneed [mailto:vman76@xxxxxxxxxxxxx]
> > Sent: Thursday, August 12, 2004 4:44 PM
> > To: cisco@xxxxxxxxxxxxxx
> > Subject: Re: OT:Web Browsing [7:91734]
> >
> > Check for spyware. I bet your connections are getting hijacked. Download
> > spybot and adaware and run them. I guarantee it will fix the problem.
> >
> > PADGETT.LYNNE wrote:
> > > Just wondering if any of you guys have run into this situation in the
> > > past couple of days.  When web browsing to random sites (so far it has
> >
> > > affected delta.com, cnn.com, google.com, aa.com --just to name a few),
> >
> > > we are being redirected to the myfamily.com website.  Doing nslookups
> > > resolves the name to the proper IP address, but you are unable to
> > > browse to the site.  It's like a bogus page is placed in front of your
> >
> > > true destination.  After about 3-5 minutes you are able to access the
> > > site again.
> > >
> > > We use and internal DNS server for outside queries.  As a process of
> > > elmination excercise, in an effort to determine the source of the
> > > problem, I changed a couple of my PCs to resolve to a DNS server on
> > > the outside of our network.  When I do this, the PCs on the outside
> > > are able to get to the sites that the internal DNS server is having a
> > > problem with, while the one that gets its DNS from our internal server
> >
> > > is not. I suspect that our DNS server has been compromised, but was
> > > wondering if any of you have run into a similar problem.
> > >
> > > TIA,
> > >
> > > Lynne
> -- 
> ----------------------------------------
> wojtek.zlobicki@xxxxxxxxx




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=91752&t=91734
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html