Overclock.net › Forums › Overclock.net Forum › Forum Platform Help and Discussion  › DNSUnlocker killing OCN
New Posts  All Forums:Forum Nav:

DNSUnlocker killing OCN

post #1 of 15
Thread Starter 
Hi,

I'm having serious issues with the OCN site on my iphone 6 ever since a particular ad hijacked my screen while browsing the OCN headphone club and intercepted a click action. Now DNS Unlocker is slowing the site to a crawl with Javascript bloat, replacing all the images across OCN with terrible emoticons, messing up font weights and adding hyperlinked text to add ad links to any string of text it can find. So far it only seems to be affecting this site.

I did plan to post a thread with images I've collected of some of the issues this has caused but i'm having to use Safari with Javascript disabled. The popup ad hijacking started on the site to advertise Cool Water perfume probably because i frequent the water cooling section.

Please let me know what other details you need to remove the abominable ad that's ruined my most frequently visited site from the ad serving system.

Also, would optional paid membership cover the potential ad revenue that i would generate on the site? Even when the only occasional click was accidental due to ads sneakily loading where i started a click action? I'd prefer to pay to be a premium member than be subjected to some of terrible ads some of these ad programmers out there can write. Normally i wouldn't mind so much but this DNSUnlocker thing has got me pretty mad.

Thanks!
   
CPUMotherboardGraphicsRAM
Intel i7 4790K Asrock Z97 Extreme4 EVGA GeForce GTX 980 Ti SC+ Kingston HyperX Fury 1866 8gb White 
Hard DriveOSMonitorKeyboard
Kingston SSDNow V300 240GB SSD Microsoft Windows 10 AOC G2460PG Cooler Master Quickfire Ultimate (brown switches) 
PowerCaseMouseAudio
EVGA SuperNOVA 750W G2 Gold Power Supply Antec P180 Cooler Master Storm Reaper FiiO e10k 
AudioAudio
JDS Labs O2 Sennheiser HD 650 
CPUMotherboardGraphicsRAM
i5 750 Gigabyte GA-H55M-USB3 ASUS DirectCUII GTX670 8GB (2 x 4GB) G-Skill Ares 
Hard DrivePowerCase
Western Digital Blue 500GB CoolerMaster 850W (RM850-EMBA) Antec 300 
  hide details  
Reply
   
CPUMotherboardGraphicsRAM
Intel i7 4790K Asrock Z97 Extreme4 EVGA GeForce GTX 980 Ti SC+ Kingston HyperX Fury 1866 8gb White 
Hard DriveOSMonitorKeyboard
Kingston SSDNow V300 240GB SSD Microsoft Windows 10 AOC G2460PG Cooler Master Quickfire Ultimate (brown switches) 
PowerCaseMouseAudio
EVGA SuperNOVA 750W G2 Gold Power Supply Antec P180 Cooler Master Storm Reaper FiiO e10k 
AudioAudio
JDS Labs O2 Sennheiser HD 650 
CPUMotherboardGraphicsRAM
i5 750 Gigabyte GA-H55M-USB3 ASUS DirectCUII GTX670 8GB (2 x 4GB) G-Skill Ares 
Hard DrivePowerCase
Western Digital Blue 500GB CoolerMaster 850W (RM850-EMBA) Antec 300 
  hide details  
Reply
post #2 of 15
Thread Starter 
Ok, I've cleared all the web data in Safari, logged in again and it appears to be OK for now at home. Not sure if this is because I am now on a different wifi network. The DNSUnlocker ad system apparently hijacks DNS to serve a fake google analytics JS file then adds its own rubbish on top. I'll upload some images to demonstrate what I saw with the site hijacked.







Is there a reason to not consider serving OCN via HTTPS? I know reliance on some third party providers who don't offer secure assets can be difficult but I've heard that google will start penalising sites in the near future for not offering valid SSL connections to a site.
   
CPUMotherboardGraphicsRAM
Intel i7 4790K Asrock Z97 Extreme4 EVGA GeForce GTX 980 Ti SC+ Kingston HyperX Fury 1866 8gb White 
Hard DriveOSMonitorKeyboard
Kingston SSDNow V300 240GB SSD Microsoft Windows 10 AOC G2460PG Cooler Master Quickfire Ultimate (brown switches) 
PowerCaseMouseAudio
EVGA SuperNOVA 750W G2 Gold Power Supply Antec P180 Cooler Master Storm Reaper FiiO e10k 
AudioAudio
JDS Labs O2 Sennheiser HD 650 
CPUMotherboardGraphicsRAM
i5 750 Gigabyte GA-H55M-USB3 ASUS DirectCUII GTX670 8GB (2 x 4GB) G-Skill Ares 
Hard DrivePowerCase
Western Digital Blue 500GB CoolerMaster 850W (RM850-EMBA) Antec 300 
  hide details  
Reply
   
CPUMotherboardGraphicsRAM
Intel i7 4790K Asrock Z97 Extreme4 EVGA GeForce GTX 980 Ti SC+ Kingston HyperX Fury 1866 8gb White 
Hard DriveOSMonitorKeyboard
Kingston SSDNow V300 240GB SSD Microsoft Windows 10 AOC G2460PG Cooler Master Quickfire Ultimate (brown switches) 
PowerCaseMouseAudio
EVGA SuperNOVA 750W G2 Gold Power Supply Antec P180 Cooler Master Storm Reaper FiiO e10k 
AudioAudio
JDS Labs O2 Sennheiser HD 650 
CPUMotherboardGraphicsRAM
i5 750 Gigabyte GA-H55M-USB3 ASUS DirectCUII GTX670 8GB (2 x 4GB) G-Skill Ares 
Hard DrivePowerCase
Western Digital Blue 500GB CoolerMaster 850W (RM850-EMBA) Antec 300 
  hide details  
Reply
post #3 of 15
Taken from some other forums:


DNS Unlocker pop-ups are almost always the result of hacked network hardware. Most likely, either your router or your modem have been remotely hacked or infected.

Try disconnecting the router and connecting a computer directly, via Ethernet wire, to the modem. Does it still suffer the same problem? If so, the modem is the cause of the problem. If not, it's the router.

If the modem is causing the problem, you'll probably have to contact your internet service provider (ISP), unless you have bought your own modem. Your ISP may also be able to help with a modem you own.

If the problem is with your router (which I assume you own), you'll need to contact the manufacturer of that router for advice on fixing it. For some routers, a reset is all that is necessary, while for others the fix may be more involved. If it's a really old router, consider replacing it with something newer.
post #4 of 15
Quote:
Originally Posted by rathborne View Post

Hi,

I'm having serious issues with the OCN site on my iphone 6 ever since a particular ad hijacked my screen while browsing the OCN headphone club and intercepted a click action. Now DNS Unlocker is slowing the site to a crawl with Javascript bloat, replacing all the images across OCN with terrible emoticons, messing up font weights and adding hyperlinked text to add ad links to any string of text it can find. So far it only seems to be affecting this site.

I did plan to post a thread with images I've collected of some of the issues this has caused but i'm having to use Safari with Javascript disabled. The popup ad hijacking started on the site to advertise Cool Water perfume probably because i frequent the water cooling section.

Please let me know what other details you need to remove the abominable ad that's ruined my most frequently visited site from the ad serving system.

Also, would optional paid membership cover the potential ad revenue that i would generate on the site? Even when the only occasional click was accidental due to ads sneakily loading where i started a click action? I'd prefer to pay to be a premium member than be subjected to some of terrible ads some of these ad programmers out there can write. Normally i wouldn't mind so much but this DNSUnlocker thing has got me pretty mad.

Thanks!
Sorry for your troubles.

You can disable ads with the premium membership. More info here smile.gif

http://www.overclock.net/t/53674/overclocked-overclock-net-account

Re why this site doesn't have SSL more here.

http://www.overclock.net/t/1550117/does-password-and-username-travel-in-plain-text#post_23786207
post #5 of 15
Thread Starter 
Thanks for the replies guys smile.gif . I did a fair amount of googling on the issue when i got home. Can't say i 'removed' the malware but it didn't appear anymore. It only started when i accidentally clicked on an ad that spawned under my finger as i went to click on something.

I'll check out that info on the premium membership soon wink.gif . I tried looking for it last night but couldn't find it under the support or FAQ sections. The only reason I mentioned the SSL part was I came across a post on my googling for DNSUnlocker that said browsers are less likely to serve hijacked JS files on HTTPS sites as the hijacked file will be served from a non-HTTPS domain.
   
CPUMotherboardGraphicsRAM
Intel i7 4790K Asrock Z97 Extreme4 EVGA GeForce GTX 980 Ti SC+ Kingston HyperX Fury 1866 8gb White 
Hard DriveOSMonitorKeyboard
Kingston SSDNow V300 240GB SSD Microsoft Windows 10 AOC G2460PG Cooler Master Quickfire Ultimate (brown switches) 
PowerCaseMouseAudio
EVGA SuperNOVA 750W G2 Gold Power Supply Antec P180 Cooler Master Storm Reaper FiiO e10k 
AudioAudio
JDS Labs O2 Sennheiser HD 650 
CPUMotherboardGraphicsRAM
i5 750 Gigabyte GA-H55M-USB3 ASUS DirectCUII GTX670 8GB (2 x 4GB) G-Skill Ares 
Hard DrivePowerCase
Western Digital Blue 500GB CoolerMaster 850W (RM850-EMBA) Antec 300 
  hide details  
Reply
   
CPUMotherboardGraphicsRAM
Intel i7 4790K Asrock Z97 Extreme4 EVGA GeForce GTX 980 Ti SC+ Kingston HyperX Fury 1866 8gb White 
Hard DriveOSMonitorKeyboard
Kingston SSDNow V300 240GB SSD Microsoft Windows 10 AOC G2460PG Cooler Master Quickfire Ultimate (brown switches) 
PowerCaseMouseAudio
EVGA SuperNOVA 750W G2 Gold Power Supply Antec P180 Cooler Master Storm Reaper FiiO e10k 
AudioAudio
JDS Labs O2 Sennheiser HD 650 
CPUMotherboardGraphicsRAM
i5 750 Gigabyte GA-H55M-USB3 ASUS DirectCUII GTX670 8GB (2 x 4GB) G-Skill Ares 
Hard DrivePowerCase
Western Digital Blue 500GB CoolerMaster 850W (RM850-EMBA) Antec 300 
  hide details  
Reply
post #6 of 15
Quote:
Originally Posted by rathborne View Post

Thanks for the replies guys smile.gif . I did a fair amount of googling on the issue when i got home. Can't say i 'removed' the malware but it didn't appear anymore. It only started when i accidentally clicked on an ad that spawned under my finger as i went to click on something.

I'll check out that info on the premium membership soon wink.gif . I tried looking for it last night but couldn't find it under the support or FAQ sections. The only reason I mentioned the SSL part was I came across a post on my googling for DNSUnlocker that said browsers are less likely to serve hijacked JS files on HTTPS sites as the hijacked file will be served from a non-HTTPS domain.

If you can provide the URL of the ad, we can have a look at possibly removing it.
post #7 of 15
Thread Starter 
Quote:
Originally Posted by HowHardCanItBe View Post

If you can provide the URL of the ad, we can have a look at possibly removing it.

Unfortunately, I didn't get the URL on the mobile as the pages were changing too quickly. That last image I uploaded seemed to be the most common ad that was displayed when the hijacking took place.
   
CPUMotherboardGraphicsRAM
Intel i7 4790K Asrock Z97 Extreme4 EVGA GeForce GTX 980 Ti SC+ Kingston HyperX Fury 1866 8gb White 
Hard DriveOSMonitorKeyboard
Kingston SSDNow V300 240GB SSD Microsoft Windows 10 AOC G2460PG Cooler Master Quickfire Ultimate (brown switches) 
PowerCaseMouseAudio
EVGA SuperNOVA 750W G2 Gold Power Supply Antec P180 Cooler Master Storm Reaper FiiO e10k 
AudioAudio
JDS Labs O2 Sennheiser HD 650 
CPUMotherboardGraphicsRAM
i5 750 Gigabyte GA-H55M-USB3 ASUS DirectCUII GTX670 8GB (2 x 4GB) G-Skill Ares 
Hard DrivePowerCase
Western Digital Blue 500GB CoolerMaster 850W (RM850-EMBA) Antec 300 
  hide details  
Reply
   
CPUMotherboardGraphicsRAM
Intel i7 4790K Asrock Z97 Extreme4 EVGA GeForce GTX 980 Ti SC+ Kingston HyperX Fury 1866 8gb White 
Hard DriveOSMonitorKeyboard
Kingston SSDNow V300 240GB SSD Microsoft Windows 10 AOC G2460PG Cooler Master Quickfire Ultimate (brown switches) 
PowerCaseMouseAudio
EVGA SuperNOVA 750W G2 Gold Power Supply Antec P180 Cooler Master Storm Reaper FiiO e10k 
AudioAudio
JDS Labs O2 Sennheiser HD 650 
CPUMotherboardGraphicsRAM
i5 750 Gigabyte GA-H55M-USB3 ASUS DirectCUII GTX670 8GB (2 x 4GB) G-Skill Ares 
Hard DrivePowerCase
Western Digital Blue 500GB CoolerMaster 850W (RM850-EMBA) Antec 300 
  hide details  
Reply
post #8 of 15
The only way I got rid of DNSUnlocker which was plaguing my Google Chrome with Ads on my mobile is to use a DNS changer that would change it to google's DNS servers on my phone. Before I did that, I made sure that I cleared the app's data and cache.
Gaming Computer
(19 items)
 
   
CPUMotherboardGraphicsRAM
Intel Core 2 Quad Q6600 Asustek P5Q-PRO Nvidia 9800 GTX+ Kingston DDR2 8gb 
Hard DriveOptical DriveCoolingOS
Western Digital 1 TB Pioneer Noctua NH-U9B Windows 7 Ultimate 64-bit 
MonitorKeyboardPowerCase
Dell Monitor Logitech G110 Antec 750W Thermaltake Aluminium Old Case 
MouseMouse PadAudio
Logitech G500 Gaming Mouse Generic Mousepad Soundblaster 5.1 VX 
  hide details  
Reply
Gaming Computer
(19 items)
 
   
CPUMotherboardGraphicsRAM
Intel Core 2 Quad Q6600 Asustek P5Q-PRO Nvidia 9800 GTX+ Kingston DDR2 8gb 
Hard DriveOptical DriveCoolingOS
Western Digital 1 TB Pioneer Noctua NH-U9B Windows 7 Ultimate 64-bit 
MonitorKeyboardPowerCase
Dell Monitor Logitech G110 Antec 750W Thermaltake Aluminium Old Case 
MouseMouse PadAudio
Logitech G500 Gaming Mouse Generic Mousepad Soundblaster 5.1 VX 
  hide details  
Reply
post #9 of 15
I also encountered DNS Unlocker pop-up ads a month ago and they showed up on every web pages. I found out that "DNS Unlocker" had modified my DNS settings. In fact, I googled on the web and found a post mentioned repairing DNS settings and it did the trick.

The path to do this follows:

Control Panel > Network and Internet > Network and Sharing Center > Change Adapter Settings.
Right-click your active internet connection (usually Wi-Fi since everyone uses that, unless your using a desktop) and click properties.
Now under the Networking tab, scroll down until you find Internet Protocol Version 4 (TCP/IPv4). Highlight that then click on properties. Both options in this windows should be automatic. The first option should be set to "Obtain an IP address automatically" and the second should be set to "Obtain DNS server address automatically!".
If your computer belongs to a company or you actually have a custom DNS, then this would not apply to you. Once you are done, click "OK" and close the windows. Now go back into Chrome and reset your settings one more time and boom, it should work just fine.
post #10 of 15
Thread Starter 
Looks like another ad is breaking the site. It was advertising baby strollers and it appeared on the subscription feed. Any link followed on the page would trigger the ad's javascript and take you to one of those 'Congratulations viewer (x)! You win an (apple device)' pages.
   
CPUMotherboardGraphicsRAM
Intel i7 4790K Asrock Z97 Extreme4 EVGA GeForce GTX 980 Ti SC+ Kingston HyperX Fury 1866 8gb White 
Hard DriveOSMonitorKeyboard
Kingston SSDNow V300 240GB SSD Microsoft Windows 10 AOC G2460PG Cooler Master Quickfire Ultimate (brown switches) 
PowerCaseMouseAudio
EVGA SuperNOVA 750W G2 Gold Power Supply Antec P180 Cooler Master Storm Reaper FiiO e10k 
AudioAudio
JDS Labs O2 Sennheiser HD 650 
CPUMotherboardGraphicsRAM
i5 750 Gigabyte GA-H55M-USB3 ASUS DirectCUII GTX670 8GB (2 x 4GB) G-Skill Ares 
Hard DrivePowerCase
Western Digital Blue 500GB CoolerMaster 850W (RM850-EMBA) Antec 300 
  hide details  
Reply
   
CPUMotherboardGraphicsRAM
Intel i7 4790K Asrock Z97 Extreme4 EVGA GeForce GTX 980 Ti SC+ Kingston HyperX Fury 1866 8gb White 
Hard DriveOSMonitorKeyboard
Kingston SSDNow V300 240GB SSD Microsoft Windows 10 AOC G2460PG Cooler Master Quickfire Ultimate (brown switches) 
PowerCaseMouseAudio
EVGA SuperNOVA 750W G2 Gold Power Supply Antec P180 Cooler Master Storm Reaper FiiO e10k 
AudioAudio
JDS Labs O2 Sennheiser HD 650 
CPUMotherboardGraphicsRAM
i5 750 Gigabyte GA-H55M-USB3 ASUS DirectCUII GTX670 8GB (2 x 4GB) G-Skill Ares 
Hard DrivePowerCase
Western Digital Blue 500GB CoolerMaster 850W (RM850-EMBA) Antec 300 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
Overclock.net › Forums › Overclock.net Forum › Forum Platform Help and Discussion  › DNSUnlocker killing OCN