Related links on CNN not working

[ShamshielDF]

Hrm...curiouser and curiouser...

Lets try another query and see what's going on a bit more behind the scenes.  Again, command prompt:

Code Select Expand

ipconfig /flushdns
ping traffic.outbrain.com
ipconfig /displaydns

You should get a rather big pile of ugly responses to the last command, looking something like this:

Code Select Expand

lt.andomedia.com
----------------------------------------
No records of type AAAA


lt.andomedia.com
----------------------------------------
Record Name . . . . . : lt.andomedia.com
Record Type . . . . . : 1
Time To Live  . . . . : 81445
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 174.129.250.132


Record Name . . . . . : lt.andomedia.com
Record Type . . . . . : 1
Time To Live  . . . . : 81445
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 174.129.224.43


Record Name . . . . . : lt.andomedia.com
Record Type . . . . . : 1
Time To Live  . . . . : 81445
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 174.129.210.179


Record Name . . . . . : lt.andomedia.com
Record Type . . . . . : 1
Time To Live  . . . . : 81445
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 174.129.210.177


Record Name . . . . . : lt.andomedia.com
Record Type . . . . . : 1
Time To Live  . . . . : 81445
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 174.129.209.98


Record Name . . . . . : lt.andomedia.com
Record Type . . . . . : 1
Time To Live  . . . . : 81445
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 184.73.206.70


Record Name . . . . . : udns2.ultradns.net
Record Type . . . . . : 1
Time To Live  . . . . : 81445
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 204.74.101.1


Record Name . . . . . : udns1.ultradns.net
Record Type . . . . . : 1
Time To Live  . . . . : 81445
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 204.69.234.1


1.0.0.127.in-addr.arpa
----------------------------------------
Record Name . . . . . : 1.0.0.127.in-addr.arpa.
Record Type . . . . . : 12
Time To Live  . . . . : 585896
Data Length . . . . . : 4
Section . . . . . . . : Answer
PTR Record  . . . . . : localhost


traffic.outbrain.com
----------------------------------------
No records of type AAAA


traffic.outbrain.com
----------------------------------------
Record Name . . . . . : traffic.outbrain.com
Record Type . . . . . : 1
Time To Live  . . . . : 291
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 208.68.171.10


Record Name . . . . . : dns12.cotdns.net
Record Type . . . . . : 1
Time To Live  . . . . : 291
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 208.93.136.12


Record Name . . . . . : dns11.cotdns.net
Record Type . . . . . : 1
Time To Live  . . . . : 291
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 208.93.136.11


localhost
----------------------------------------
Record Name . . . . . : localhost
Record Type . . . . . : 1
Time To Live  . . . . : 585896
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 127.0.0.1

Mind, we're most interested in the part regarding traffic.outbrain.com, but there may be other clues buried in the other responses.

[Trieste]

When I carry out those commands, the final command produces a result that some of it seems to scroll out of the command line's buffer. I'll paste you what I have, but it's probably only a fraction of what's there.

    Record Name . . . . . : roulettevip.net
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    roulettevip.net
    ----------------------------------------
    No records of type AAAA


    quicktime-download-now.com
    ----------------------------------------
    Record Name . . . . . : quicktime-download-now.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    quicktime-download-now.com
    ----------------------------------------
    No records of type AAAA


    quicktime2008.com
    ----------------------------------------
    Record Name . . . . . : quicktime2008.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    quicktime2008.com
    ----------------------------------------
    No records of type AAAA


    paginebianchwe.it
    ----------------------------------------
    Record Name . . . . . : paginebianchwe.it
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    paginebianchwe.it
    ----------------------------------------
    No records of type AAAA


    ofexpect.com
    ----------------------------------------
    Record Name . . . . . : ofexpect.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    ofexpect.com
    ----------------------------------------
    No records of type AAAA


    oaginebianche.it
    ----------------------------------------
    Record Name . . . . . : oaginebianche.it
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    oaginebianche.it
    ----------------------------------------
    No records of type AAAA


    www.mydailyaap19.com
    ----------------------------------------
    Record Name . . . . . : www.mydailyaap19.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    www.mydailyaap19.com
    ----------------------------------------
    No records of type AAAA


    www.meinfahrschultest.com
    ----------------------------------------
    Record Name . . . . . : www.meinfahrschultest.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    www.meinfahrschultest.com
    ----------------------------------------
    No records of type AAAA


    www.mbsex.info
    ----------------------------------------
    Record Name . . . . . : www.mbsex.info
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    www.mbsex.info
    ----------------------------------------
    No records of type AAAA


    lovezest.com
    ----------------------------------------
    Record Name . . . . . : lovezest.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    lovezest.com
    ----------------------------------------
    No records of type AAAA


    www.keinegefahr.com
    ----------------------------------------
    Record Name . . . . . : www.keinegefahr.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    www.keinegefahr.com
    ----------------------------------------
    No records of type AAAA


    katawerb.it
    ----------------------------------------
    Record Name . . . . . : katawerb.it
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    katawerb.it
    ----------------------------------------
    No records of type AAAA


    jhzjyj.bigwww.com
    ----------------------------------------
    Record Name . . . . . : jhzjyj.bigwww.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    jhzjyj.bigwww.com
    ----------------------------------------
    No records of type AAAA


    www.internet-media-download.com
    ----------------------------------------
    Record Name . . . . . : www.internet-media-download.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    www.internet-media-download.com
    ----------------------------------------
    No records of type AAAA


    www.gvsex.info
    ----------------------------------------
    Record Name . . . . . : www.gvsex.info
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    www.gvsex.info
    ----------------------------------------
    No records of type AAAA


    gbazzetta.it
    ----------------------------------------
    Record Name . . . . . : gbazzetta.it
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    gbazzetta.it
    ----------------------------------------
    No records of type AAAA


    frrari.it
    ----------------------------------------
    Record Name . . . . . : frrari.it
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    frrari.it
    ----------------------------------------
    No records of type AAAA


    www.flwview.com
    ----------------------------------------
    Record Name . . . . . : www.flwview.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    www.flwview.com
    ----------------------------------------
    No records of type AAAA


    flwsolution.com
    ----------------------------------------
    Record Name . . . . . : flwsolution.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    flwsolution.com
    ----------------------------------------
    No records of type AAAA


    fionasteel.com
    ----------------------------------------
    Record Name . . . . . : fionasteel.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 86400
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 127.0.0.1


    fionasteel.com
    ----------------------------------------
    No records of type AAAA

[ShamshielDF]

Running "ipconfig /flushdns" should clear that list, meaning it should be fairly short when you do the "ipconfig /displaydns".  If that's still too long, then we'll have to change the buffer length.

When you open the command prompt, right click on the title bar at the top and go to properties.  Go to the Layout tab.  In there you should see a screen buffer size that, by default, is set to 80 wide and 300 long.  Width isn't really a problem, so lets change the length to something a bit more usable, like... 9999 or so.

(Just because most every machine I use at work ends up with that setting at some point...300 lines is never enough...though you would probably be safe around the 2000 - 3000 range)

Once you've done that, try running the previous commands again:

Code Select Expand

ipconfig /flushdns
ping traffic.outbrain.com
ipconfig /displaydns

Also, I would suggest closing anything else that you might be running that might use the network.  That should help clean the DNS list as well.

[Trieste]

Errrr. I have it, and I saved it to a Word doc. I can email it to you - the list is 182 pages in Word, though, so it's a hella long list. The ping and whatnot looks like this:

Code Select Expand


Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\Trieste>ipconfig /flushdns

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Users\Trieste>ping traffic.outbrain.com

Pinging traffic.outbrain.com [127.0.0.1] with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms


And there is no specific outbrain entry among displaydns. It's all other random sites.

[Oniya]

I think the more interesting thing is that all of the addresses are 127.0.0.0, even after the flush.

[Trieste]

I have no idea of the significance of that.

[Oniya]

A bit of background on the Hosts file and DNS for Non-technical users:  Think of the hosts file as something like a phone book.  Whenever you try to go to a site or browse to another machine, your computer looks to the hosts file first, similar to looking something up in an old fashioned personal notebook.  It may be out of date, the numbers may be wrong, but it's right there.  The way anti-adware works is similar to the idea of listing every commercial number in your phone book as your home number.  Whenever you try to call it, you get yourself (or a busy tone).  Same thing for ad sites.  127.0.0.1 is the universal loopback address, effectively a phone number that, no matter where you dial it from will always be the phone you dialed from.

...

As with any metaphor, this isn't perfect, but it suffices for giving an idea of what is going on.

Basically, your computer is 'calling itself' when it should be calling the other servers.

[Trieste]

Well, yes, I understood that. I'm just not sure what the flushdns does. I renamed the hosts file and whatnot, I understood that part.

What is the significance of flushdns?

[Oniya]

When a computer visits a website for the first time, it stores the website's DNS information in cache. The next time the computer visits a website, it looks in the cache to see if the website's information is present to use.  If you watch the little message in the lower left of your browser, this speeds up the time is spends 'Looking up [whatever]'. This can cause problems if the website's DNS information has changed since the computer's last visit - or in this case, when the wrong information seems to be stored in memory. Flushing the cache is supposed to remove all the information stored in cache, forcing the computer to find the new DNS information for the website.

[ShamshielDF]

That strongly suggests to me that it is pulling the hosts file still (somehow) or that it is using an internal proxy server of some variety, which is going to take a bit more doing to sort out what it might be.  Also, checking the various sites that were listed in the sample section before they all seem to be the generic "this site doesn't exist yet, but someone is camping it with ads" variety, which implies to me that something is blocking access to them intentionally.  I'm going to poke around a bit do some research...I'm not as intimately familiar with the particulars of Windows DNS subsystem a I might like for the direction this appears to be going.

[Trieste]

I wonder if it's Adblock acting up. I only have it on Firefox, though, and this happens with both Firefox and Chrome.

[Oniya]

I thought you said you'd tried turning that off, though?

[Trieste]

Yeah, I just tried turning it off again and didn't work.

[Oniya]

Try turning it off, doing the flush thing again and then trying CNN?

[Trieste]

Nope.