• April 18, 2024, 11:22:12 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: DSL-520B Recurring DNS cache poisoning problem?  (Read 8992 times)

Drewfr

  • Level 1 Member
  • *
  • Posts: 1
DSL-520B Recurring DNS cache poisoning problem?
« on: June 15, 2015, 12:08:43 PM »

Does anyone know anything about this?

I'll make a list of details instead of a big paragraph:

  • While browsing from home via DSL-520B:
  • On only one website (so far) ..that I happen to be the designer/administrator.
  • I occasionally (every 2-3 weeks) get spam link at top of page (viagra, etc. but also parkinson's and chiari info with some asian (Chinese?) characters at end.
  • Thought my site was hacked but couldn't find subfolders mentioned in URL shown by browser when hovering over link.
  • Webhost support couldn't see the spam link. Site client couldn't see spam link from their office, but I saw it on multiple computers in my home.
  • Spam link goes away after rebooting DSL-520B modem and waiting a few seconds.
  • Firmware: NA_1.10. After onset if issue I have manually set DNS servers to 8.8.8.8 and 8.8.4.4 to rule out ISP DNS servers. Still occurs.
  • Using D-Link time servers but Device Info screen says April 21, 2010.
All expertise is appreciated!  Thanks!
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: DSL-520B Recurring DNS cache poisoning problem?
« Reply #1 on: June 16, 2015, 01:18:34 PM »

Link>Welcome!

  • What region are you located?

PC 3rd Party Security Software Configurations
  • Turn off all anti virus and firewall programs on PC while testing. 3rd party firewalls are not generally needed when using routers as they are effective on blocking malicious inbound traffic.
  • Turn off all devices accept for one wired LAN PC while testing.
  • Disable any downloading client software managers, i.e. Torrents or similar.


PC Web Browser Configurations
What browser are you using?
Try Opera or FF? If IE 8, 9, 10 or 11, set compatibility mode and test again. (For older generation routers.)
Disable any security browser Add-ons like No Script and Ad-Block or configure them to allow All Pages when connected to the router.
Clear all browser caches.
Be sure to log into the Admin account on the router.
Try turning off these features in Chrome:
Top right corner, little bars for options > Settings > Settings (on left) > Show advanced settings.
Uncheck these:
Use a web service to help resolve navigation errors
Use a prediction service to help complete searches and URLs typed in the address bar
Predict network actions to improve page load performance
Enable phishing and malware protection

I'd scan your PC for any malware using MalwareBytes. Its free.

Does a different PC exhibit the same thing while connected to the modem?
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.