Websites being redirected to yandex.ru

Question

Level 1

0 points

Websites being redirected to yandex.ru

I am having a problem as of yesterday. A lot of the websites I have been trying to visit have been redirected to yandex.ru. I am running Chrome on a 15" MacBook Pro with Lion. the sites that are being redirected are very random, but they consistently redirect. For example, MSN.com always loads fine, but trying to click on a link within msn.com from yardbarker.com redirects to yandex.ru.

It doesn't matter whether I access the sites through a search engine or directly on the google omnibox, the sites are always redirected before completely loaded. It is also consistent on other browsers (Safari and Firefox). I have cleared all caches, cookies, extensions, deleted extra search engines, etc, and I have tried using other DNS addresses provided by OpenDNS. None of those things worked.

I thought it might be a problem with my ISP. I am living in Jordan for work, so who knows what kind of potentially shady goings-on are happening, but I asked a friend using the same ISP and DNS addresses to check the sites I was having trouble with, and they loaded fine for him.

I have used ClamXav and MacScan 2, and no problems were reported. I reset my router to factory settings, and I am still having the same trouble. All of the devices we use on the local network are also being redirected. My wife's macbook, my iPhone, and our iPad are all being affected.

I am using a Wimax router through a 3.5G HSPA connection with an airport Extreme attached via ethernet to extend the signal. I tried to connect to the Wimax router directly and still had the same issue. I tried logging in as a guest, using Safari, and was redirected as well. Not sure what to do next.

Any counsel would be thoroughly appreciated.

MacBook Pro, Mac OS X (10.7.2)

Posted on Dec 16, 2011 2:39 AM

Reply

Answer 1

thomas_r.

Level 7

31,989 points

Dec 16, 2011 3:37 AM in response to kandelfire

If you haven't changed the default password on your Wimax router, or if you didn't change it to a very secure one, it's possible that someone has hacked it and changed the DNS server settings in the router. You should check DNS settings on BOTH wireless routers.

Reply

Answer 2

mobei

Level 1

0 points

Dec 16, 2011 3:48 AM in response to kandelfire

I have the same problem in Amman JO, traffic on all devices connected to the router are getting redirected to yandex.ru. My wireless broadband ISP which uses Wimax technology have told me that I need to clear history cache etc and clear the %temp% folder however nothing has worked so far. The problem became too annoying I had to get a backup connected that works beautifully now. I am still experiencing difficulties using my main connection as 95% of my traffic gets channelled to russian spider search engine site.

I have used free and paid public DNS services, tried using private DNS servers of a friend of mine on the device trying to access the web itself, the wireless router, and on the Wimax gateway but I keep getting the same results.

Could the problem be with the router itself? I did a 30-30-30 hard reset and it wont go away. My 2 desktops, visitors laptops, many iDevices and my video gaming console all can't seem to be able to get rid of the problem.

If you do figure out any time please update the thread!

Reply

Answer 3

kandelfire Author

Level 1

0 points

Dec 16, 2011 5:33 AM in response to thomas_r.

They are not set to the default passwords on either router, and both are WPA2 protected.

I just found the DNS numbers in the airport extreme, and I changed those. I changed the numbers on my computer's connection yesterday, but I don't think I can change them on my wimax. If I can, I don't know how. It seems like, the ISP locks those settings.

Additionally, my friend is using the same ISP, has the same DNS numbers, and his stuff is still working fine. So, if he is using the same ISP and DNS numbers, and he is not having a problem, does that rule out a local DNS problem? My logic might be faulty, and I am certain there are things I don't know, so... not sure

Reply

Answer 4

thomas_r.

Level 7

31,989 points

Dec 16, 2011 5:38 AM in response to kandelfire

Do you have similar problems when you're not on your home network? For example, try on your friend's network and see if you experience the same thing. Similarly, what happens if your friend tries to connect from your home network?

Reply

Answer 5

mobei

Level 1

0 points

Dec 16, 2011 5:57 AM in response to thomas_r.

I ruled out the local dns problem, dns on the wireless router (Asus rtn16), all is well. also all the devices are clean.

I believe that the problem is inside the wimax gateway provided by my isp. I am testing 3 troubled devices on a new connection and they're working properly. I also introduced a completely new, untouched device to the troubled network and traffic became troubled immediately as if the device has been infected with the same problem.

Reply

Answer 6

mobei

Level 1

0 points

Dec 16, 2011 6:00 AM in response to kandelfire

Try changing dns by accessing the webpage of the wimax gateway, you can add new dns servers but the problem will stay I believe. I am going to try channel all traffic through a VPN server and see how it goes

Reply

Answer 7

kandelfire Author

Level 1

0 points

Dec 16, 2011 6:31 AM in response to mobei

I can change the DNS names under router settings, and those are the numbers being distributed, but when I go to the status page, the DNS numbers haven't changed, and there is no place in which to change them.

I have a proxy server subscription whose servers are in the States, and all of the affected sites work fine through that portal. Doesn't that prove that it is a Zain problem?

Reply

Answer 8

kandelfire Author

Level 1

0 points

Dec 16, 2011 6:53 AM in response to kandelfire

The numbers shown in the Status page are what the router is actually using from the ISP to communicate through the internet. Those numbers haven't changed.

Reply

Answer 9

mobei

Level 1

0 points

Dec 16, 2011 11:43 AM in response to kandelfire

Temporary solution proposed by zain technical support after a big fight over the phone... (works just fine)

Add yandex.ru to the List of blocked websites under the settings/options menu in the security section, this needs to be done for each browser you use. Whether ur cache is cleared or not, you will be able to avoid the sudden redirection to yandex. Your browser will show a notification that yandex has been blocked (it will block it three attempts of redirection, I took the three yandex.ru/*********** blocked sites and added them in full to the list of blocked sites under the security section in each and every browser on every single device accessing the hspa+ gateway)

My browsing is a **** lot easier now, speed though went a little down, not a problem for me as long as I can get things done)

Tech support promised a permanent solution the coming week.

I still haven't had the chance to try the VPN option. Will give it a shot and update the thread

Reply

Answer 10

Dec 16, 2011 12:44 PM in response to mobei

My Grandma knows more than Zain Technical Support.

To fix this annoying DNS redirect just do tho following

- Go to system prefrences -> Network

- Delete the active en3 connection

- disable the ipv6 - make it off

- unplug the zain usp and plug it in again and connect.

this will clear the cache between you and the ISP and renew the DNS settings.

Cheers,

Amer Dababneh

Reply

Answer 11

kandelfire Author

Level 1

0 points

Dec 16, 2011 2:01 PM in response to Magnify.jo

Amer, I probably should have asked you in the first place. I have to be honest, though. It is weird that you are interacting with me on here. Did you know that I started this thread?

Jason

Reply

Answer 12

Dec 16, 2011 2:36 PM in response to kandelfire

Hello Jason , yes i noticed that you started this thread but i fixed this silly thingy on Zain Boradband ,

try to do the same steps , it might work for the router also.

Reply

Answer 13

kandelfire Author

Level 1

0 points

Dec 16, 2011 9:59 PM in response to Magnify.jo

I don't see an en3 connection. Where is it? Also, I have no ipv6 connections to turn off. The only options are to set it to auto, manual, or link local only.

Reply

Answer 14

mobei

Level 1

0 points

Dec 17, 2011 2:13 AM in response to Magnify.jo

Amér., couldnt really do this on the wimax gateway, or on any iOS powered device. Using new dns servers and blocking the www solved it for me. It could also be that the problem has been corrected somewhere else at zains end. I do agree their tech support has very little capability to solve serious issues.

Are you the same amer dababneh from ages ago on irc?

M. Obeidat

Reply

Answer 15

Dec 17, 2011 5:12 AM in response to mobei

Go to Network Settings > airport > Advanced > TCP/IP and click on Renew DHCP

and put the Configure IPv6 to OFF , Then clear the browsers cash > reset the router.

Hope this gonna work.

Yes am the same Amer lol . Wait enta Yah00? lol

Reply