Hi, 10 hours of searching and googling and I still can't find what is redirecting my browser to this generated page of spam, well that's what I consider it to be. This happens as user or root, in any browser I use.
As an example, I type in some random letters... eg: "fhfhfhfhfh" The browser then converts this to "http://fhfhfhfhfh.local.net/"; in the url address bar. The titlebar then shows "RealEstate.NET", and the main window shows the following: <star graphic here> available The address you have entered ( fhfhfhfhfh.local.net ) is available to use. To be included in fantastic opening specials be sure to register your email within our launch newsletter, click here to return to the main website to join. Starting from as low as $399 a year you can get this address, a booking engine and a website to suit. Packages are restricted to Accommodation providers. click here to submit your website early to the Rooms.NET Directory I have added the following url's to my "/etc/hosts" file in an attempt to block this: 127.0.0.1 www.rri.local.net 127.0.0.1 jgo.local.net 127.0.0.1 intranet.local.net 127.0.0.1 trusted.internal.site.on.your.local.net 127.0.0.1 realestate.net 127.0.0.1 insideauto.net 127.0.0.1 insidecity.net 127.0.0.1 rooms.net This was the only links I could find using google and the contents of the html dump from the browser page. I could really use some help as I cannot identify how this has infiltrated my system, what is causing it, and what else it might now be sending/receiving from here. Regards magnet :( ____________________________________________________ Want to buy your Pack or Services from Mandriva? Go to http://store.mandriva.com Join the Club : http://www.mandrivaclub.com ____________________________________________________
