1

Whenever I use internet from my home network on my mobile, and open any site, (except Facebook, Yahoo and Youtube), the doesn't load and it redirects to the pages malware pages mentioned in the title. They claim that your mobile has a dangerous virus etc.
An interesting thing to note is that whenever I switch to request desktop site option, the site opens, but in desktop format.
It has been more than 8 months like this. I have tried using every antivirus device I have heard of. I have reset my router also. (Because it happens only with my router). Also, it doesnt happen on any other device.
I remember that when it first started, it happened in my laptop also, but after I reset my router, it only happens in my mobile from then. I have tried, if I try it on any other network, malware disappears! I think the malware has been transferred from my router only, to all other devices.?
Please help!
Edit: As explained in comments, this issue is specifically for a mobile, read the question carefully please.

2

1 Answer 1

3
+50

From your description, it looks like someone has gotten into your router and managed to compromise it at a firmware level. The answer is to either get another router or to reflash the router firmware with firmware which is known to be good and not vulnerable to the same attack.

As you have not specified your router its difficult to provide more specific details.

Here is an article from Feb 2015 which talks about affected Linksys routers (and another one with more details). This particular attack works in part by changing your home routers DNS settings, so forcing DNS settings in your mobile (if you can do it) may mitigate things.

Here are other versions of the same problem on different routers. - May 2015, - A harmless variant in October 2015.

Here is another article which talks about DNS Changer Malware - which seems to be a likely candidate (although I acknowledge you say you have reset your router - other then that the description matches)

3
  • It is a BSNL Broadband router. Oct 13, 2015 at 5:50
  • Look at shiningleaf.wordpress.com/2015/03/12/… and quora.com/How-do-I-stop-AdsMatte-spam-popups-and-ads - Problem could be DNS Changer Malware, but possibly BSNL nameservers.
    – davidgo
    Oct 13, 2015 at 5:57
  • A quick test would be to change the nameservers in your router to a different public server, like 4.2.2.1/4.2.2.2 or 8.8.8.8. You might have to ask BNSL for help on how to do that if you don't know already. You can also change the DNS directly in your phone, by changing from DHCP to Static IP and listing nameservers there.
    – Paul
    Oct 14, 2015 at 19:37

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .