How to check router for DNS poisoning?

June 19, 2010 at 04:38:11
Specs: Windows xp, p4, 3ghz, 1gb
Hi, please help. I have 2 computers linked to the same router. One has been having problems for the last couple of weeks but now the second is having the same problem as well and it is getting worse on the first one.
The problem is when doing a search in google and clicking on it it will start to let me on the page but then go to a blank screen with googleanalytics at the top and arrow just turning but not getting anyway. Sometimes it randomly opens a blank, google or yahoo page when clicking on a link. There are some sites I just can't get on to at all now. I have firewalls, antivirus etc on my 2 computers but scans are revealing nothing. I thought it was on my computer but now it is affecting the 2nd computer I have found some people suggesting it could be my router that has the problem.
I have tried flushing the dns on both computers as suggested and then doing a command to see if it finds anything, the command being ping Apparantly it should find nothing after flushing but if it does then there is still a problem. I googled the IP address it found, it is exactly the same on both my computers, the google search of this address showed people having the same problem linked to this.
If you think the problem is my router how do I check it to see and how to I get rid of it, I read it could be dns poisoning on my router?
Your help is appreciated.

See More: How to check router for DNS poisoning?

Report •

June 22, 2010 at 07:28:41
Hi.Go into the router dns settings.You will find that there have been alternative settings used.Set your DNS to get setting direct from your server and apply.This was the cure for my redirection problems and nothing was found on my laptop.

Report •

June 22, 2010 at 11:18:04
DNS cache poisoining occurs on DNS servers (there are millions of DNS servers on the Internet), not routers. Your router could have been compromised if you left all the default settings in place and remote access to the router was enabled, or if it was hit by malware like this:

But it's more likely that your PC system (or systems) is (are) still infected if you're being redirected. You said you scanned, but with what? AntiVirus alone isn't enough these days with the onslaught of malware out there like Trojans, RootKits, SpyWare etc. I'd run MalwareBytes, A-Squared Free and maybe an AntiRootKit scanner (or 2) on your system like GMER, Radix and TrendMicro RootKit Buster.

Just another stupid saying...

Report •

Related Solutions

Ask Question