DNS Unlocker adware issue

[petetherock]

Bros
Anyone with this issue on their Macs?

Suddenly it affected my 2010 iMac, Macbook, even my ipad and iphone!

And the odd thing is that it's affected my brand new iMac too - without any data being transferred from my old machines.. i.e. I saw the annoying adware pop-ups even as a standalone new computer.

Figured it's in my router or something, so I took that out, did a reboot from a new OS, also booted in my new iMac from work, and it seemed ok..

Swopped out the old router, and it seems stable.

Then I switched on my Macbook - which hasn't been on, since last month - no issues then.

And now it's also on the MBP using the new router!

Desperate for a solution.... thanks

 

[szeli]

u using chrome? sounds like a rogue extension that got synced to all your chrome browsers...

 

[petetherock]

How I finally licked it:
http://peteswrite.blogspot.sg/2015/12/dns-unlocker-adware-malware-how-to-fix.html

 

[God_of_poking]

help i also kena on chrome..tmd keep linkling me to other website suddenly and slowing down

 

[petetherock]

Some tips:
http://forums.hardwarezone.com.sg/103827902-post19.html

 

[chins]

I've been plagued with this problem on my MacBook for the past 2 mths. Interestingly, it only affects Safari and not Chrome. Only on this MacBook too, not on my iMac, iPhone or iPad which are connected to the same network.

I've read like every solution out there but still can't figure out how to resolve it, as most of the solutions there are for Windows.

The only solution for me is to clear all history and cookies in Safari, then I'll get a few days of peace until the problem raises its ugly head again. Recently, I set the cookies setting to "Allow from current website only". I've been having peace for a week now. Hope the problem does not surface again. First time having malware using Mac. Sighhh...

 

[szeli]

if e problem keeps coming back means there is something still running in yr system that is changing e dns. need to kill e root cause... n why aren't u using some form of adblocker?

 

[chins]

if e problem keeps coming back means there is something still running in yr system that is changing e dns. need to kill e root cause... n why aren't u using some form of adblocker?

I'm using Adblocker. Doesn't work. Used some malware removal software and they can't find any problems too.

 

[szeli]

I'm using Adblocker. Doesn't work. Used some malware removal software and they can't find any problems too.

what r yr dns settings? for both local machine n router.

 

[PetPet]

If you know brew.
Consider using DNSCrypt and dnsmasq.
Should be able to avoid this.

 

[petetherock]

I've been plagued with this problem on my MacBook for the past 2 mths. Interestingly, it only affects Safari and not Chrome. Only on this MacBook too, not on my iMac, iPhone or iPad which are connected to the same network.

I've read like every solution out there but still can't figure out how to resolve it, as most of the solutions there are for Windows.

The only solution for me is to clear all history and cookies in Safari, then I'll get a few days of peace until the problem raises its ugly head again. Recently, I set the cookies setting to "Allow from current website only". I've been having peace for a week now. Hope the problem does not surface again. First time having malware using Mac. Sighhh...

If you use it with a different provider, eg at work instead of home, does it still persist?
Try to change the provider to see where the feed of this comes from.
It comes in via your DNS, which is like your home address.. the malware has got your address locked in.

 

[petetherock]

http://www.straitstimes.com/tech/telcos-put-on-alert-after-cyber-attacks-on-starhub

I wonder if Starhub is more vulnerable than the other vendors.

He added that consumers could have bought malware-infected devices like web cams or routers that triggered the attack. He also advised consumers to buy devices from reputable vendors.

 

[LeatherWorkshoppe]

Just solved my DNS Unlocker issue.

For me, the ads only pop up on select sites e.g hardwarezone, tomshardware.com etc.

Checked my programs, no malicious or unexpected programs in control panel.

Followed this guide from Google https://support.google.com/chrome/answer/2765944

First, ran malwarebytes and it removed some threats. Noticed these were all in Google folder.

Scanned again upon restart with 0 threats.

Scanned again after visiting HWZ on IE and 0 threats.

Scanned again after opening Chrome without navigating and found threats. Evident the problem is an infected Chrome.

Ran Chrome Cleanup Tool but found no programs. Went to advanced settings in Chrome and reset to default settings. Eliminated threats with malwarebytes and restarted once again.

Opened chrome and scanned again with no threats detected. DNS unlocker ceased showing up.

It seems like the adware modifies chrome to redownload it everytime you install it.

Hope this helps guys!

 

[LeatherWorkshoppe]

No relapse so far!