Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm a bit stumped by this problem. My machine can ping google.com and www.google.com successfully. I get correct ips like 74.125..

When I try to go to google in Firefox or IE or Chrome, I get a typical dns error page. For some reason, Safari is still working.

My first guess was a caching issue, but after clearing all browser caches I still see the problem. Second guess was that malware reconfigured my proxy settings, but no luck there either. Everything is set to "No proxy". I downloaded wireshark and the browser is querying my dns server.

Other sites resolve fine in all browsers. Everything seems to be working as expected but... Basically, I have run out of ideas on this one.

In response to comments:

  • IP directly in browser works, obviously. This is a DNS issue, not a connection issue.
  • Clearing the DNS cache in windows did not fix the problem. Checking the chrome internals shows that www.google.com could not be resolved.
  • My hosts file is clean (no entries).
  • Rebooting does not fix the problem.
share|improve this question

migrated from serverfault.com Feb 21 '12 at 1:56

This question came from our site for professional system and network administrators.

    
a) This should be on SuperUser b) try using the IP directly in the browsers that aren't working - some firewalls can be configured to block specific programs - check yours. c) Chrome maintains its own DNS cache - about:dns also check about:net-internals#dns d) try flushing your DNS cache (ipconfig /flushdns) –  cyberx86 Feb 21 '12 at 1:01
    
be aware that nslookup uses its own DNS Client. Have you checked your hosts file (the new favorite malware file-to-edit)? –  Mathias R. Jessen Feb 21 '12 at 1:11
    
have you rebooted? Sometimes browsers try internet before wireless has come up all the way and then don't notice that internet has started to work again. Closing browser or rebooting usually fix this. –  Robert Feb 21 '12 at 1:21
add comment

1 Answer

Answering my own question:

There was a rootkit virus attempting to redirect google.com. I was able to download a rootkit removal tool which found and removed the threat.

share|improve this answer
1  
What was the rootkit (and removal tool)? –  Synetech Feb 27 '12 at 1:09
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.