DNS hijacking (solution for website cannot be opened)

DNS hijacking (solution for website cannot be opened)

DNS is essential for us to access the Internet. Here we will first introduce the knowledge of DNS.

DNS is short for Domain NameSystem. It consists of a parser and a Domain Name Server. A Domain Name Server is a server that stores the domain names and corresponding IP addresses of all hosts in the network and converts a domain name to an IP address. The domain name must correspond to an IP address, but the IP address does not necessarily have a domain name.

In fact, we usually visit websites. For example, if we visit Baidu, we enter www.baidu.com in the browser and then translate and convert the Domain Name Server through the network, we have successfully accessed the real IP address of Baidu 220.181.111.85, so we can also see from here that if DNS errors or settings are incorrect, we will not be able to access this webpage smoothly, even if you can access it occasionally, it is as fast as a turtle. In this case, we need to manually set the IP address of the DNS server.

When the following occurs on our computer:

1. The home network is connected to the vro, but when you open the browser, it is not the home page you set (but you have not manually modified it), but another home page.

2. The network speed slows down significantly.

3. The image part on the webpage cannot be opened.

4. The home page and second-level webpage cannot be accessed and cannot be opened.

In this case, after troubleshooting hardware faults (such as routers, network cables, and modems), please refer to the problem about routers :). If the problem still persists, it is likely that DNS is hijacked.

Disclaimer: DNS hijacking means that malicious programs in your computer modify the IP address of your DNS. The ing from the URL to the IP address is incorrect.

At this point, first confirm whether the DNS is actually hijacked:

Method: Choose network sharing center> Local Connection> Properties> internet Protocol Version 4 in the lower right corner of the computer ], then, check whether the dns ip address we set at the bottom is changed.

For example, DNS is modified illegally.

Solution:

In this case, we can use [automatically retrieve DNS addresses]. When the DNS addresses are automatically obtained, they still do not work. You can set them based on the actual DNS server address of your local broadband carrier, generally, the system prompts that a DNS error occurs or that the website can only be accessed by QQ. At the same time, we can use a general DNS address: 114.114.114.114 (the first and third open DNS service address in China, also known as 114DNS) or 8.8.8.8 (Google free DNS ).

After the configuration is complete, restart the vro. We can also check whether our settings take effect again.

At the same time, to avoid further malicious modification, we 'd better change the vro login password (the original default account and password is admin ). Modification method:

Go to the vro Management page (enter 192.168.1.1 in the address bar of the browser ).

You can change the logon password in the last column on the left. For example:

 

If the problem persists at this time, we will restore the router to the factory settings (generally this solution is not satisfactory:

1. Enter "192.168.1.1" in the browser to enter the browser management interface.

2. Click "Restore factory settings" in the last item in the left column. After the configuration is completed, the vro automatically restarts, as shown in figure

3. At this time, we need to fill in some relevant information for the router,

4. Click "setting wizard" and select "ADSL virtual dialing ".

5. Fill in the broadband "account password ".

For the sake of security, we can modify the login password of the router:

6. After confirmation, the router restarts automatically.

7. Now we can use the vro again.

In this case, we don't have to worry about DNS hijacking.