I recently had a 'redirect virus' while I was logged in as administrator. Every time I would query something in a search engine, I was redirected to
domaindiscount24.com. After a virus cleanup everything resumed to normal. Until I noticed
nslookup.exe returning wrong ip addresses:
nslookup google.com: Non-authoritative answer: Name: google.com.domain.name Addresses: 188.8.131.52 184.108.40.206 220.127.116.11 nslookup yahoo.com: Non-authoritative answer: Name: yahoo.com.domain.name Addresses: 18.104.22.168 22.214.171.124 126.96.36.199
Every time I nslookup a domain name, I get these same ip addresses, which point to
domaindiscount24.com. Is my dns server(modem/router) poisoned? Or the addresses are mere records from the redirect virus earlier?
=========================** EDIT **===============================