re: http://dns.sysip.net/services/nslookup/tad Advertisment page redirect
Tuesday, May 23, 2006 at 5:36 am
Windows 2000 Annoyances Discussion Forum
Posted by hristo
(1 messages posted)
How can you catch dns.sysip.net
It seems it hijacks the housecall.trendmicro.com address on some dns servers and
installs itself instead of trendmicro's free spyware scanner:
http://dns.sysip.net/services/nslookup/tad/app=PS&v=1.2.8&site=I.ETHOS.LIVE&size=tad&rnd=42646&referer-kw=free%20online%20virus,online%20virus%20scan,housecall,trend%20micro,scan%20pc,desktop,email,protection,scanning,agreement&referer=http%3A%2F%2Fhousecall.trendmicro.com%2F&xinfopsid=0&format=html&orig=http%3A%2F%2Fwww.trendmicro.com%2Fhc_intro%2Fdefault.asp
Beware when using the link from the first reply in the forum from an dns.sysip.net
infected computer:
http://www.mvps.org/winhelp2002/hosts.htm
It seems dns.sysip.net hijacks this link as well.
On Wednesday, May 10, 2006 at 8:42 pm, John wrote:
>I believe that I have some sort of spyware on my machine but I can’t figure out
how
>to get rid of it. When I am surfing the net every so often instead of going to
the
>page that I have chosen, I get a page that has an advertisement on it. At the top
>right of the screen it says skip ad. I click on the skip ad and it takes me to
where
>I want to go. Normally I would say that this is just the website, but it has happened
>on 6 different websites and the look of the ad and the URL is always the same.
Here
>is a sample of one of URLs I have seen:
>
>http://dns.sysip.net/services/nslookup/tad/app=PS&v=1.2.8&site=I.ETHOS.LIVE&size=tad&rnd=8591571
>
>&referer-kw=swi%20forums,spyware,thiefware,browser%20hijackers,advertising%20parasites,malware%20removal,
>
>spywareinfo,log,today,pm&referer=http%3A%2F%2Fforums.spywareinfo.com%2F&xinfopsid=0&format=html&orig=http%3A%2F%
>
>2Fforums.spywareinfo.com%2Findex.php%3Fs%3Daee21a09977b94f46500bc2c49728d7a%26act%3DSearch%26f%3D
>
>I did a search on dns.sysip.net and I came up with nothing. I searched and searched
>for just sysip and I can’t find anything. The scary thing about this is it seems
>to be saving all of my pages that I have been to. If I look at my internet history
>it has a folder for dns.sysip and when I hover over some of the pages it lists the
>pages I have been to even if I didn’t get the advertisement page.
>
>It isn’t a popup, it’s just a web page redirect that I get sent to before I can
get
>to the page I requested. If I wait a few seconds it automatically redirects me.
> I have run spybot, adaware, Microsoft defender, yahoo spyware and Ewido anti malware.
> They all say I am clean. I have installed and running Norton which runs every
night
>and has no virus history. I have all MS updates installed on my 2K box.
>
>Any ideas?
>
|
