I recently had a 'redirect virus' while I was logged in as administrator. Every time I would query something in a search engine, I was redirected to domaindiscount24.com
. After a virus cleanup everything resumed to normal. Until I noticed nslookup.exe
returning wrong ip addresses:
nslookup google.com:
Non-authoritative answer:
Name: google.com.domain.name
Addresses: 213.128.138.236
109.234.109.20
109.234.109.21
nslookup yahoo.com:
Non-authoritative answer:
Name: yahoo.com.domain.name
Addresses: 109.234.109.21
213.128.138.236
109.234.109.20
Every time I nslookup a domain name, I get these same ip addresses, which point to domaindiscount24.com
. Is my dns server(modem/router) poisoned? Or the addresses are mere records from the redirect virus earlier?
=========================** EDIT **===============================
ipconfig /flushdns
That will clear the DNS cache.