?
Solved

Virus? IE throws web config referencing defaultredirect to mycustompage.htm

Posted on 2011-09-30
1
Medium Priority
?
403 Views
Last Modified: 2012-05-12
at a school district, randomly throughout the day, IE users are reporting that IE is throwing up a web config page referencing a default redirect to a mycustompage.htm.

I"m thinking virus.  Malwarebytes can't update either.

this is random users, not all.  

ideas where to start looking?

thanks

cliff
0
Comment
Question by:crp0499
1 Comment
 
LVL 13

Accepted Solution

by:
khairil earned 2000 total points
ID: 36894588
Hi,

1. Virus? Might be. We have same problem last two weeks on one of our falculties. The end up that one lecturer PC is infected by some kind of virus that act as DHCP supplying bogus IP address and also DNS. Any request to the Internet end up to same web page of the scammers. So you might want to check if there is some PC infected with this kind of viruses.

The PC that showing the scammer page might not get infected, but it can give you clue the DHCP IP range, and if you are network admin you can find it (but not so easy).

2. Other possibility is something have change the hosts file on that PC, try check the host file, for Windows it stays at SystemRoot%\system32\drivers\etc\hosts

3. Also try other browser, do they have same problem, if not then check the proxy setting of the IE.
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

An introduction to the wonderful sport of Scam Baiting.  Learn how to help fight scammers by beating them at their own game. This great pass time helps the world, while providing an endless source of entertainment. Enjoy!
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

601 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question