Bad DNS requests are being hijacked supersonic_oasis 12/18/2008 3:52:02 PM Hi all, We run Windows 2003 DNS. I noticed today that when I typed in a bad DNS name in my browser that it sent me to the following site: wwwe.sitefindservice.info (which is an advertising site). If I type in any URL that doesn't exist, I get sent to this site. For example, If I dig at my DNS server for fake.fake, it sends me back 8.15.7.102, which is the IP for wwwe.sitefindservice.info. This didn't use to happen. I scanned the server for viruses with Kaspersky Anti-Virus and it didn't find anything. What's going on? Any help is appreciated, thanks.

Re: Bad DNS requests are being hijacked "Danny Sanders" <DSanders[ at ]NOSPAMciber.com> 12/18/2008 6:41:15 PM Open internet explorer and go to tool - IE Options and on the general page check your search settings. hth DDS "supersonic_oasis" <supersonicoasis[ at ]discussions.microsoft.com> wrote in message news:6361D254-FD11-496F-B5D9-0B97FC8DF1E4[ at ]microsoft.com... [Quoted Text] > Hi all, > > We run Windows 2003 DNS. I noticed today that when I typed in a bad DNS > name in my browser that it sent me to the following site: > wwwe.sitefindservice.info (which is an advertising site). > > If I type in any URL that doesn't exist, I get sent to this site. For > example, If I dig at my DNS server for fake.fake, it sends me back > 8.15.7.102, which is the IP for wwwe.sitefindservice.info. > > This didn't use to happen. I scanned the server for viruses with Kaspersky > Anti-Virus and it didn't find anything. What's going on? > > Any help is appreciated, thanks.

Re: Bad DNS requests are being hijacked "Ace Fekay [Microsoft Certified Trainer]" <firstnamelastname[ at ]hotmail.com> 12/18/2008 11:40:41 PM In news:6361D254-FD11-496F-B5D9-0B97FC8DF1E4[ at ]microsoft.com, supersonic_oasis <supersonicoasis[ at ]discussions.microsoft.com> requesting assistance, typed the following: [Quoted Text] > Hi all, > > We run Windows 2003 DNS. I noticed today that when I typed in a bad > DNS name in my browser that it sent me to the following site: > wwwe.sitefindservice.info (which is an advertising site). > > If I type in any URL that doesn't exist, I get sent to this site. For > example, If I dig at my DNS server for fake.fake, it sends me back > 8.15.7.102, which is the IP for wwwe.sitefindservice.info. > > This didn't use to happen. I scanned the server for viruses with > Kaspersky Anti-Virus and it didn't find anything. What's going on? > > Any help is appreciated, thanks. You might want to take a look at this: Which public DNS servers don’t hijack bad requests? http://stackoverflow.com/questions/341106/which-public-dns-servers-dont-hijack-bad-requests-closed -- Ace This posting is provided "AS-IS" with no warranties or guarantees and confers no rights. Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCT Microsoft Certified Trainer For urgent issues, you may want to contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.