Web Page Redirect?

Discussion in 'Malware Help (A Specialist Will Reply)' started by catlady, Jun 9, 2005.

  1. catlady

    catlady Private E-2

    Hello,
    I found this in "HijackThis" O17 - HKLM\System\CCS\Services\Tcpip\..\{B5AE3E29-ECCE-4A6E-A8BC-69E92D978063}: NameServer = 65.165.152.9 199.170.121.15

    Should I delete this?

    I already tried to delete it actually, but it came back when I restarted my computer, however I did not try to delete it in safe mode yet. Also, my email did not seem to work after I deleted it, maybe just a coincidence?

    Thanks in advance for any help with this.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I would guess that the first IP address is your ISP:

    Code:
     [url="http://samspade.org/t/whois?a=65.165.152.9;server=auto"][color=#0000ff]65.165.152.9[/color][/url] = [ [url="http://samspade.org/t/whois?a=cache1.yadtel.net;server=auto"][color=#0000ff]cache1.yadtel.net[/color][/url] ] 
     
    OrgName:	Sprint 
    OrgID:	 SPRN 
    Address:	12502 Sunrise Valley Drive 
    City:	 Reston 
    StateProv: VA 
    PostalCode: 20196 
    Country:	US 
    
    And that the second is probably your local home network?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds