DNS hijacking to medical sites

[Jimmy Boy]

hi i have windows 2000 server dns service running and for some reason when
my users type a url on the internet like msn.com and they get redirected to
a precription medication site. When this happens we can type a few known
urls and they all get redirected to this medical web page. Once i restart my
dns server and dns client service on the server it goes back to working
normal and resolving the names to the correct address. seems like if i get
hijacked or something. this has happened to me twice. has anyone else seen
this problem?

thanks

 

[Lanwench [MVP - Exchange]]

hi i have windows 2000 server dns service running and for some reason
when my users type a url on the internet like msn.com and they get
redirected to a precription medication site. When this happens we can
type a few known urls and they all get redirected to this medical web
page. Once i restart my dns server and dns client service on the
server it goes back to working normal and resolving the names to the
correct address. seems like if i get hijacked or something. this has
happened to me twice. has anyone else seen this problem?

thanks

See reply to your other post.

 

[Guest]

Have you discovered what ion your DNS server was causing this? I am having
the same problem.

Thanks,
Rob

 

[Jimmy Boy]

sorry rob, no i haven't . but at least i know it's not just me now.
sounds to me like somekind of bug on windows dns that gets attacked.

let me know if you find anything out though.

thanks

 

[Jonathan de Boyne Pollard]

JB> When this happens we can type a few known urls and they
JB> all get redirected to this medical web page.

Prove that this is a DNS problem. Show us the output of a DNS diagnosis
tool, performing a lookup of one of the domain names concerned.

<URL:http://homepages.tesco.net./~J.deBoynePollard/FGA/dns-diagnosis-tools.html>
<URL:http://homepages.tesco.net./~J.deBoynePollard/FGA/problem-report-standard-litany.html>