Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Virus? IE throws web config referencing defaultredirect to mycustompage.htm

Posted on 2011-09-30
1
Medium Priority
?
402 Views
Last Modified: 2012-05-12
at a school district, randomly throughout the day, IE users are reporting that IE is throwing up a web config page referencing a default redirect to a mycustompage.htm.

I"m thinking virus.  Malwarebytes can't update either.

this is random users, not all.  

ideas where to start looking?

thanks

cliff
0
Comment
Question by:crp0499
1 Comment
 
LVL 13

Accepted Solution

by:
khairil earned 2000 total points
ID: 36894588
Hi,

1. Virus? Might be. We have same problem last two weeks on one of our falculties. The end up that one lecturer PC is infected by some kind of virus that act as DHCP supplying bogus IP address and also DNS. Any request to the Internet end up to same web page of the scammers. So you might want to check if there is some PC infected with this kind of viruses.

The PC that showing the scammer page might not get infected, but it can give you clue the DHCP IP range, and if you are network admin you can find it (but not so easy).

2. Other possibility is something have change the hosts file on that PC, try check the host file, for Windows it stays at SystemRoot%\system32\drivers\etc\hosts

3. Also try other browser, do they have same problem, if not then check the proxy setting of the IE.
0

Featured Post

Cyber Threats to Small Businesses (Part 1)

This past May, Webroot surveyed more than 600 IT decision-makers at medium-sized companies to see how these small businesses perceived new threats facing their organizations.  Read what Webroot CISO, Gary Hayslip, has to say about the survey in part 1 of this 2-part blog series.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've been an avid user and supporter of Malwarebytes Premium Version 2.x for years. It's an excellent product that runs alongside just about any Anti-Virus application without issues. It seems to have an uncanny ability to pick up many things that A…
Phishing emails are a popular malware delivery vehicle for attack.  While there are many ways for an attacker to increase the chances of success for their phishing emails, one of the most effective methods involves spoofing the message to appear to …
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question