Jump to content
BANGKOK
Sign in to follow this  
davejonesbkk

Anyone know about parking.ps/ virus?

Recommended Posts

Seems I have acquired a browser virus in the last 24 hrs or so, randomly websites redirect to http://parking.ps/, there doesnt seem to be any pattern on how or why, I have noticed that in the last hr its only been doing it in Google Chrome incognito mode while normal mode has been fine.

Ive been Googling and most of the results ask me to donwload a program to clean it which looks very suspicous to me eg:

http://www.cleanpcguide.com/remove-parking-ps-removal-guide-how-to-remove-parking-ps/

Ive been trying to follow the manual instructions to but I havent been able to find any evidence of Parking.ps in my installed programs or processes etc

Share this post


Link to post
Share on other sites

What ISP are you with.

I'm also seeing this, but it's affecting all devices in my home so I suspect it's a DNS hack. I'm on True cable.

PS do not download anything that looks dodgy - it will probably just double your pain. Stick to MalwareBytes or well known Malware/AV vendors only.

PPS CCleaner doesn't fix malware, ans Adaware wouldn't be a very good anti-malware program IMO.

Edited by RedCardinal

Share this post


Link to post
Share on other sites

I am getting the same thing across Chrome, Firefox and IE. It appears to be some sort of redirect. From what I researched, it is either a DNS hack, a WEB site hack, flash or javascript hack. One thing that seemed to help me was to clear the cache, history, etc of each browser.

Share this post


Link to post
Share on other sites

I am getting the same thing across Chrome, Firefox and IE. It appears to be some sort of redirect. From what I researched, it is either a DNS hack, a WEB site hack, flash or javascript hack. One thing that seemed to help me was to clear the cache, history, etc of each browser.

Who's your ISP? What DNS servers are you using?

Share this post


Link to post
Share on other sites

I am getting the same thing across Chrome, Firefox and IE. It appears to be some sort of redirect. From what I researched, it is either a DNS hack, a WEB site hack, flash or javascript hack. One thing that seemed to help me was to clear the cache, history, etc of each browser.

Who's your ISP? What DNS servers are you using?

Using True for ISP. I am using Google DNS (8.8.4.4) as my primary DNS and asianet DNS (203.144.207.49) as my secondary DNS server.

After clearing my browser data, I haven't seen the redirect in the past 30 minutes.

I also cleared my cached DNS by issuing "ipconfig /flushdns" in a windows command prompt. But that didn't seem to help.

Share this post


Link to post
Share on other sites

IM on True cable also, it only started around 24-36 hrs ago for me, I had downlaoded divx.com free trail just before that but I doubt from there, not done much else different really.

Interesting that other people are getting it and also on True. Im using opendns like always, I did a full cache clear etc an hr ago and after that it seems that this is now only happening in the incognito mode of chrome which is very weird.

I will try flushdns now myself and MalwareBytes.

So I guess if no evidence of it on my actual computer (none so far) then its a DNS hack? If so how worried should I be about passwords etc?

Share this post


Link to post
Share on other sites

Silurian -try running some test fro 20 mins or so opening websites in normal chrome and incognito and see what happens

Share this post


Link to post
Share on other sites

Lots of Thai users also getting this over on Pantip. Only ISP mentioned is True, so I reckon this is either something that's sitting on their caching servers, or some stupid change they've made.

A couple of years ago they got caught red-handed injecting their own ads into Youtube pages. Suffice to say Google security people were none too happy with them, and it stopped very quickly after Google were alerted.

I use True with Google DNS, cleared caches and still getting it. Will try True proxy to see if that fixes it.

Share this post


Link to post
Share on other sites

Open a command prompt and type NSLOOKUP

Then enter a site that's giving you this problem and see what answers.

e.g. www.ibm.com

Share this post


Link to post
Share on other sites

Open a command prompt and type NSLOOKUP

Then enter a site that's giving you this problem and see what answers.

e.g. www.ibm.com

Won't work. Sites are loading fine, but then redirected after a short delay. It may be an ad network, although I've now seen it on a page without ads. Debugging this is very hard since the redirect is probably being loaded asynchronously into the page, so wont appear in the initial page collateral. Still looking for the actual redirect...

Share this post


Link to post
Share on other sites

I'm also having this problem and using True Ultra cable internet, however I'm not using ISP DNS servers. I use google dns, and now I use local dns server (on Synology Nas) which has no effect. Problem is, I got this redirects on iPad, not my windows laptop. So I found adblock for safari on Jailbreak and installed it, problem solved. I have adblock on firefox so it was blocking this hijack somehow.

It is very annoying and I hardly understand how can they mess things up like this?

Share this post


Link to post
Share on other sites

Oh, I forget to mention. I had this annoying redirects on iPad even when I use a personal proxy server (proxy resolves DNS queries so it should prevent redirects). So problem mostly lies on hacked internet infastructure of True internet.

Share this post


Link to post
Share on other sites

Definitely not a virus. I got this yesterday on a MacBook Pro. Others are getting it on Windows, still others on the iPad OS. Unlikely a virus on three different OS.

The common link is everyone reporting this has True as their ISP, so it's likely something they've done, or security they have failed to do.

Edited by partington

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...