Network hacked?

I'm having the same problem. Get this flash player out of date popup and unable to my access gmail
 
PsyWulf said:
Isn't this that router hijack where the DNS is replaced on the router?
Among others: http://news.techworld.com/security/...e-routers-as-part-of-mystery-pharming-attack/
Click to expand...

Im still edging in the direction of it being this.
Its a really simple "hack" where a script is executed and attempts to identify the router type then tries default logins. When it gets access then it simply pushes the string through to change the DNS entries and will redirect you to whatever page they want you to see.
 
Rocket-Boy said:
Im still edging in the direction of it being this.
Its a really simple "hack" where a script is executed and attempts to identify the router type then tries default logins. When it gets access then it simply pushes the string through to change the DNS entries and will redirect you to whatever page they want you to see.
Click to expand...

I did a malware byte scan.
9 objects was detected
Gmail loaded successfully after reboot

EDIT: Still having trouble with Chrome
 
Last edited:
PsyWulf said:
Start -> run -> cmd
nslookup www.gmail.com

nslookup gmail.com 8.8.8.8

Post results
Click to expand...



Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Junaid>nslookup www.gmail.com
Server: UnKnown
Address: 192.168.1.1

Non-authoritative answer:
Name: googlemail.l.google.com
Addresses: 2c0f:fb50:4002:801::1015
74.125.233.85
Aliases: www.gmail.com
mail.google.com

___________________________________________________________________________________

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Junaid>nslookup gmail.com 8.8.8.8
Server: google-public-dns-a.google.com
Address: 8.8.8.8

Non-authoritative answer:
Name: gmail.com
Addresses: 2c0f:fb50:4002:801::1016
74.125.233.86
74.125.233.85


C:\Users\Junaid>
 
I had the same problem. I found the same DNS servers on the router, I can confirm the below works.

Set the DNS servers to:
Primary: 8.8.8.8
Secondary: 8.8.4.4
 
SpYkzzz said:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Junaid>nslookup www.gmail.com
Server: UnKnown
Address: 192.168.1.1

Non-authoritative answer:
Name: googlemail.l.google.com
Addresses: 2c0f:fb50:4002:801::1015
74.125.233.85
Aliases: www.gmail.com
mail.google.com

___________________________________________________________________________________

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Junaid>nslookup gmail.com 8.8.8.8
Server: google-public-dns-a.google.com
Address: 8.8.8.8

Non-authoritative answer:
Name: gmail.com
Addresses: 2c0f:fb50:4002:801::1016
74.125.233.86
74.125.233.85


C:\Users\Junaid>
Click to expand...
This is clear,but I would log into the router to confirm. Is it a Dlink?
 
After doing a scan with eset online scanner it picked up 15 viruses deleted them and restarted computer
All websites are working (had to reinstall firefox which kept giving update flashplayer with youtube)
Everything seems to be working
Thanks guys.
 
SpYkzzz said:
After doing a scan with eset online scanner it picked up 15 viruses deleted them and restarted computer
All websites are working (had to reinstall firefox which kept giving update flashplayer with youtube)
Everything seems to be working
Thanks guys.
Click to expand...

cool, tell user Junaid to stop looking at all that porn from those dodgy sites, less chances of viruses :wtf:
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X