LinuxSA Mailing list archives

  From: Adam Smith <adam.smith@sageautomation.com>
  To  : Ian Loxton <ilox@airnet.com.au>
  Date: Fri, 18 Apr 2003 15:09:04 +0930

Re: [OT] (win problem) I only get to 1 web site

On Fri, Apr 18, 2003 at 01:49:47PM +0930, Ian Loxton said:

> Doesn't matter if I am using IE 6, Opera 7 or Netscape 4, doesn't 
> matter if I dial into CompuServe direct or come through my LAN to 
> AirNet, any access to the web will end up at http://208.185.174.60, a 
> site supposedly on Zone alarm's web site and advertising Linksys and 
> PC-Cillan.
> 
> No idea why. I have totalled ALL caches and cookies. There isn't any 
> link within registry that I can find. Ad-Aware found a link in Opera 
> but I removed that. AVG doesn't find anything BUT it cant get through 
> to update the definitions.

Try looking for evidence of one of those programs that adds a DNS suffix to
your configuration, diverting all your resolved hostnames like
www.hotsex.com to www.hotsex.com.spammer.com.

ifconfig and nslookup should be a dead giveaway if this is the case, but
I've seen these symptoms at work many times when users (with their lovely
privileged Windows access) run those types of programs.


-- 
Adam Smith
Information Technology Officer
SAGE Automation Ltd.

adam.smith@sageautomation.com
http://www.sageautomation.com

"Just a friendly wave each morning.."
    - Neighbours

-- 
LinuxSA WWW: http://www.linuxsa.org.au/ IRC: #linuxsa on irc.freenode.net
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject