Dns resolve some website slowly

Dns is resolving a lot of website quickly, but there are some websites like cnn.com , bbc.com take around 15 second to resolve the host name , I used nslookup then ping cnn.com and bbc.com and then take time also . I have 2 dns , and I have 3 dns for
isp and when I changed my dns and put any of isp dns I can open any website so fast, before all websites were opening fine but now I have that issue, and I check all configuration and connectivity all work great, OS Win server 2008 r2 and clients
win 7 and xp.

check the workload of your DNS
how many users in your environment?
http://technet.microsoft.com/en-us/library/cc778608(v=ws.10).aspx
Monitoring DNS server performance
Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
IT Stuff Quick Bytes

Similar Messages

  • I can't connect to the itunes store and have some problems with other websites. Some websites load OK. I had the same problem on my iPad and changed the DNS, but don't want to do this on my iMac, anyway, surely I should have my router's DNS?

    I can't connect to the iTunes store from my iMac and have problems loading a number of other websites, however some websites load perfectly well. I have had the iTunes store issue on my iPad and resolved it by changing the DNS but surely I should use the DNS for my router. I don't really want to change it for the iMac as I access secure sites with it to internet shop.
    Any ideas, I was going to try loading Chrome but can't get it without going through the iTunes store. Anyway, that is treating the symprom not the cause.

    Adding Open DNS codes to your Network Preferences, should give good results in terms of speed-up as well as added security, (including anti-phishing and redirects) (Full information about Open DNS is here: http://www.opendns.com/home/nobloat ) and further independent information can be read here:
    http://reviews.cnet.com/8301-13727_7-57338784-263/free-dnscrypt-tool-enhances-ma c-web-security/?tag=mncol;txt
    and here:
    http://www.macworld.com/article/1146064/troubleshootdns.html?t=234
    Open System Preferences/Network. Double click on your connection type, or select it in the drop-down menu, and in the box marked 'DNS Servers' add the following two numbers:
    208.67.222.222
    208.67.220.220
    (You can also enter them if you click on Advanced and then DNS)
    Sometimes reversing the order of the DNS numbers can be beneficial in cases where there is a long delay before web pages start to load, and then suddenly load at normal speed:
    http://support.apple.com/kb/TS2296

  • Can't access some websites. Possibly DNS problem.

    This problem only started to occur a couple of days ago. I found that I can't access certain websites,but all the other computers in exactly the same network environment have no problem accessing them. I tried changing my DNS server settings from the servers my ISP provided to the Google DNSs, 8.8.8.8 and 4.4.4.4, and those websites I couldn't access before became accessible immediately, but some other websites, which I was able to access with the DNS provided by my ISP before, became inaccessible again. I tried using another set of DNS addresses, the same thing happened: some websites that I couldn't access before became accessible, but some others become inaccessible again. All these DNS servers that I used work perfectly on other computers in my network, so it has to be the problem of my computer. This has nothing to do with the browser, as all of the browers in my system have the same problem, even including the Internet Explorer in my VMware Windows virtual machine. I tried flushing the DNS cache with dscacheutil -flushcache, and it didn't work.
    I'm using Lion 10.7.3 on MacBook Pro MC371. Please help!

    Please give an example of a site you can't access now.

  • 2008 R2 DNS does not resolve external websites until I clear DNS cache

    Do I need to apply this hotfix
    http://support.microsoft.com/kb/2508835/en-us
    MCSE Certified

    Thank you for posting the ipconfig /all, but we can't use it since the relevant data that we need to evaluate has been blocked out. I can understand if you have a strong security policy.
    The Conditional Forwarders shouldn't be causing you to not to resolve specific domain names.
    How long has this been going on?
    What exactly occurs? Does DNS stops totally responding when you test it with nslookup, or are you just testing it with Internet Explorer?
    If you have nslookup tests and responses, it may be helpful to see them, but if your security policy prevents you from posting them, I understand.
    I'm curious about this part that you posted:
    > "And as suggested by microsoft
    > earlier,we have blocked few DNS
    > Domains by creating conditional
    > forwarders , pointing to
    > our another domain."
    Did you open a ticket with Microsoft support that provided this suggestion? If yes, you can email your support engineer that assisted you.
    Or did you post this in this forum or elsewhere that you received this suggestion? If a forum post, do you have a link?
    Without specifics, it may be difficult to assist. However, what I can provide are the following hotfixes. The second one you had already installed. I suggest and recommend to install the others.
    1. DNS Server service does not use root hints to resolve external names in Windows Server 2008 R2
    Post Windows 2008 R2 SP1 HOTFIX available.
    APPLIES TO •Windows 2008 R2 Datacenter •Windows 2008 R2 Ent •Windows 2008 R2 Std.
    Requires a restart.
    http://support.microsoft.com/kb/2616776
    2. DNS Server service does not resolve some external DNS names after it works for a while in Windows Server 2008 R2
    Hotfix release - (released 4/15/2011)
    http://support.microsoft.com/kb/2508835
    3. Windows 2008 -
    DNS queries for external domains are not resolved when you use Conditional Forwarding in Windows Server 2008
    Post Windows 2008 SP2 Hotfix available
    Requires a restart.
    http://support.microsoft.com/kb/2625735/
    4. DNS server stops responding to DNS queries from client computers in in Windows Server 2003, in Windows Server 2008 or in Windows Server 2008 R2 - Post Service Pack Hotfix available.
    Does not require a restart.
    http://support.microsoft.com/kb/2655960
    If the above do not help or provide improvements, I highly suggest to contact Microsoft Support for specific assistance. Here's the link if you decide that you need to go with this option:
    http://support.microsoft.com/contactus/
    Ace Fekay
    MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
    This posting is provided AS-IS with no warranties or guarantees and confers no rights.

  • Cant access some urls, ubuntu firefox does, no obvious network probs, reinstalled XP, reinstalled firefox, checked DNS settings, tried Website wont load FAQ

    Some websites are inaccesible. eg microsoft, trendmicro, adobe update, and many more
    I noticed it first when I needed EFAT drivers from Microsoft.
    I Could'nt access the site. Subsequently I have discovered other sites with similar problems.
    two of my XP machines are exhibiting this problem. BUT one XP netbook is'nt.
    my Linux Ubuntu 12.04 boxes are not affected.
    The error I get is " Server not found at [insert url here] "
    I can access google, ebay, facebook, my website, most other websites, both HTTP:// and HTTPS://
    I cannot see what the difference between access and no access is.
    My network is working fine and I can access these unobtainable websites using Linux running Firefox on this network but not on the XP machines with any web browser I have tried.
    Its not AFICS a virus on the two machines.
    I have isolated one machine from the network, and re-installed XP from CD, installed fresh Firefox, and while isolated from the rest of the intranet, connected to the internet Still problem exists.
    I have tried different DNS servers,
    I have changed the adsl router to a different manufacturers router and still the fault exists.
    I am at my wits end here. Any help appreciated.
    thanks

  • Open dns resolver issues on windows server 2008 R2

    my client is running a windows 2008 r2 server with dns and dhcp roles. it's not a domain controller, just a workgoup server.
    got a notification from my client's isp:
    "These attacks have been facilitated through DNS
    amplification attacks. AT&T has detected these attacks and has confirmed
    that the IP address x.x.x.x allocated to your Internet access account is
    accessible from the Internet as an open DNS resolver. "
    tried disabling recursion, but then there is no access to the internet.
    tried disabling the firewall rule for dns udp, and no access to the internet.
    does anyone have any idea how to correct this? do i need to add a public dns server to my dhcp scope for internet access? if i do, then what good is a dns server and it doesn't resolve internet addresses?
    Gary

    Just to add, I was wondering why you had port 53 opened to your DNS servers. And just to point out, that rule you created is a port translation rule that allows access to your DNS server from the internet, just as if you had created a rule to allow access
    to an internal web server for public use, or for allowing webmail (OWA) access from the internet to your internal mail server.
    What you did, as Keith said, will stop that, but to further point out, the rules are not really needed again, I would just remove the rules completely. For internet access, such as allowing your users to access websites, your DNS to resolve external names
    (whether using Root hints or a Forwarder), just about any firewall will allow that out-of-the-box. In some firewalls, you have to create a rule to the outside untrusted interface to "allow established" meaning when an internal request goes to an outside resource,
    such as a website, to allow the response back in.
    The only time you want to create rules is either you want to allow inbound traffic with a port translation rule (such as what you originally unknowingly did for TCP & UDP 53) to a web server, OWA, SMTP traffic to a mail server, etc.), otherwise,
    leave it out of the box.
    As for what the ISP is concerned about regarding DNS amplification attacks, is that they are a fairly recent method for attackers to create a DOS (denial of service). You can read up at a couple of recent discussions about what all that means in
    the following threads, with ways to stop or mitigate them.
    Best way to reduce or disable DNS amplification for external DNS?,
    Sunday, June 16, 2013 6:08 PM
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/d087a768-2075-49e4-afec-4fd23b50af0a/best-way-to-reduce-or-disable-dns-amplification-for-external-dns
    Protecting Windows DNS Server from being abused for DNS amplification attacks,
    Wednesday, April 10, 2013 8:05 AM
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/fac86dc7-779d-48eb-a113-9c06c2222af9/protecting-windows-dns-server-from-being-abused-for-dns-amplification-attacks
    Ace Fekay
    MVP, MCT, MCITP/EA, MCTS Windows 2008/R2 & Exchange 2007, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Technical Blogs & Videos: http://www.delawarecountycomputerconsulting.com/
    This post is provided AS-IS with no warranties or guarantees and confers no rights.

  • Unable to load some websites after an update to IOS6

    I am unable to load some websites in both Safari and Google Chrome. This did not bother me until I found at that I cannot access some websites I can access before and frequent. I am unsure if this was caused by the update to ios6, but this incident only happened after the update. I am unsure as well if this is related to the problem of me unable to connect to itunes and app store after the update. I've fixed those by changing my DNS to 8.8.8.8 and changing the time trick. I've also noticed that twitter and some apps crashed a lot. I have no problem connecting to the wifi though. Thank you in advance.  

    Some additional details I have also noticed. Some images will not show or appears as a blue and white question mark in some websites. Even here in apple website.

  • Cannot open click to enlarge on some websites

    == Issue
    ==
    I have another kind of problem with Firefox
    == Description
    ==
    Unable to click to enlarge on some websites. Have started Firefox in safe mode and it's ok. Started Firefox in normal mode and with all extentions disabled problem is resolved. Howver I have been unable to ascertain which extention is causing the problem. It appears to be a combination of 2 if not 3 extentions. Any help would be appreciated.
    == This happened
    ==
    Every time Firefox opened
    == Only really noticed it after going to 3.6.6
    ==
    == Troubleshooting information
    ==
    Application Basics
    Name Firefox
    Version 3.6.6
    Profile Directory
    Open Containing Folder
    Installed Plugins
    about:plugins
    Build Configuration
    about:buildconfig
    Extensions
    Name
    Version
    Enabled
    ID
    AVG Safe Search 9.0.0.825 true {3f963a5b-e555-4543-90e2-c3908898db71}
    AVG Security Toolbar 4.504.019.002 true avg@igeared
    Google Toolbar for Firefox 7.0.20100326W true {3112ca9c-de6d-4884-a869-9855de68056c}
    Microsoft .NET Framework Assistant 1.2.1 true {20a82645-c095-46ed-80e3-08825760534b}
    RealPlayer Browser Record Plugin 1.0 false
    ZoneAlarm Toolbar 1.5.53.4 true
    Java Console 6.0.20 true
    Java Quick Starter 1.0 true [email protected]
    Modified Preferences
    Name
    Value
    accessibility.typeaheadfind.flashBar 0
    browser.fixup.alternate.enabled false
    browser.history_expire_days 20
    browser.history_expire_days.mirror 20
    browser.history_expire_days_min 62
    browser.places.importBookmarksHTML false
    browser.places.importDefaults false
    browser.places.leftPaneFolderId -1
    browser.places.migratePostDataAnnotations false
    browser.places.smartBookmarksVersion 2
    browser.places.updateRecentTagsUri false
    browser.startup.homepage http://www.google.co.uk | http://www.bbc.co.uk
    browser.startup.homepage_override.mstone rv:1.9.2.6
    extensions.lastAppVersion 3.6.6
    general.useragent.extra.microsoftdotnet ( .NET CLR 3.5.30729)
    network.cookie.prefsMigrated true
    places.last_vacuum 1275386845
    print.print_printer HP DeskJet 895Cse
    print.printer_HP_DeskJet_895Cse.print_bgcolor false
    print.printer_HP_DeskJet_895Cse.print_bgimages false
    print.printer_HP_DeskJet_895Cse.print_command
    print.printer_HP_DeskJet_895Cse.print_downloadfonts true
    print.printer_HP_DeskJet_895Cse.print_edge_bottom 0
    print.printer_HP_DeskJet_895Cse.print_edge_left 0
    print.printer_HP_DeskJet_895Cse.print_edge_right 0
    print.printer_HP_DeskJet_895Cse.print_edge_top 0
    print.printer_HP_DeskJet_895Cse.print_evenpages true
    print.printer_HP_DeskJet_895Cse.print_footercenter
    print.printer_HP_DeskJet_895Cse.print_footerleft &PT
    print.printer_HP_DeskJet_895Cse.print_footerright &D
    print.printer_HP_DeskJet_895Cse.print_headercenter
    print.printer_HP_DeskJet_895Cse.print_headerleft &T
    print.printer_HP_DeskJet_895Cse.print_headerright &U
    print.printer_HP_DeskJet_895Cse.print_in_color true
    print.printer_HP_DeskJet_895Cse.print_margin_bottom 0.5
    print.printer_HP_DeskJet_895Cse.print_margin_left 0.5
    print.printer_HP_DeskJet_895Cse.print_margin_right 0.5
    print.printer_HP_DeskJet_895Cse.print_margin_top 0.5
    print.printer_HP_DeskJet_895Cse.print_oddpages true
    print.printer_HP_DeskJet_895Cse.print_orientation 0
    print.printer_HP_DeskJet_895Cse.print_pagedelay 500
    print.printer_HP_DeskJet_895Cse.print_paper_data 9
    print.printer_HP_DeskJet_895Cse.print_paper_height 11.00
    print.printer_HP_DeskJet_895Cse.print_paper_size 0
    print.printer_HP_DeskJet_895Cse.print_paper_size_type 0
    print.printer_HP_DeskJet_895Cse.print_paper_size_unit 1
    print.printer_HP_DeskJet_895Cse.print_paper_width 8.50
    print.printer_HP_DeskJet_895Cse.print_reversed false
    print.printer_HP_DeskJet_895Cse.print_scaling 1.00
    print.printer_HP_DeskJet_895Cse.print_shrink_to_fit true
    print.printer_HP_DeskJet_895Cse.print_to_file false
    print.printer_HP_DeskJet_895Cse.print_unwriteable_margin_bottom 0
    print.printer_HP_DeskJet_895Cse.print_unwriteable_margin_left 0
    print.printer_HP_DeskJet_895Cse.print_unwriteable_margin_right 0
    print.printer_HP_DeskJet_895Cse.print_unwriteable_margin_top 0
    print.printer_Microsoft_XPS_Document_Writer.print_bgcolor false
    print.printer_Microsoft_XPS_Document_Writer.print_bgimages false
    print.printer_Microsoft_XPS_Document_Writer.print_command
    print.printer_Microsoft_XPS_Document_Writer.print_downloadfonts true
    print.printer_Microsoft_XPS_Document_Writer.print_edge_bottom 0
    print.printer_Microsoft_XPS_Document_Writer.print_edge_left 0
    print.printer_Microsoft_XPS_Document_Writer.print_edge_right 0
    print.printer_Microsoft_XPS_Document_Writer.print_edge_top 0
    print.printer_Microsoft_XPS_Document_Writer.print_evenpages true
    print.printer_Microsoft_XPS_Document_Writer.print_footercenter
    print.printer_Microsoft_XPS_Document_Writer.print_footerleft &PT
    print.printer_Microsoft_XPS_Document_Writer.print_footerright &D
    print.printer_Microsoft_XPS_Document_Writer.print_headercenter
    print.printer_Microsoft_XPS_Document_Writer.print_headerleft &T
    print.printer_Microsoft_XPS_Document_Writer.print_headerright &U
    print.printer_Microsoft_XPS_Document_Writer.print_in_color true
    print.printer_Microsoft_XPS_Document_Writer.print_margin_bottom 0.5
    print.printer_Microsoft_XPS_Document_Writer.print_margin_left 0.5
    print.printer_Microsoft_XPS_Document_Writer.print_margin_right 0.5
    print.printer_Microsoft_XPS_Document_Writer.print_margin_top 0.5
    print.printer_Microsoft_XPS_Document_Writer.print_oddpages true
    print.printer_Microsoft_XPS_Document_Writer.print_orientation 1
    print.printer_Microsoft_XPS_Document_Writer.print_pagedelay 500
    print.printer_Microsoft_XPS_Document_Writer.print_paper_data 9
    print.printer_Microsoft_XPS_Document_Writer.print_paper_height 11.00
    print.printer_Microsoft_XPS_Document_Writer.print_paper_size_type 0
    print.printer_Microsoft_XPS_Document_Writer.print_paper_size_unit 1
    print.printer_Microsoft_XPS_Document_Writer.print_paper_width 8.50
    print.printer_Microsoft_XPS_Document_Writer.print_reversed false
    print.printer_Microsoft_XPS_Document_Writer.print_scaling 1.00
    print.printer_Microsoft_XPS_Document_Writer.print_shrink_to_fit true
    print.printer_Microsoft_XPS_Document_Writer.print_to_file false
    print.printer_Microsoft_XPS_Document_Writer.print_unwriteable_margin_bottom 0
    print.printer_Microsoft_XPS_Document_Writer.print_unwriteable_margin_left 0
    print.printer_Microsoft_XPS_Document_Writer.print_unwriteable_margin_right 0
    print.printer_Microsoft_XPS_Document_Writer.print_unwriteable_margin_top 0
    privacy.cpd.sessions false
    privacy.cpd.siteSettings true
    privacy.sanitize.migrateFx3Prefs true
    privacy.sanitize.timeSpan 2
    security.warn_viewing_mixed false
    == Firefox version
    ==
    3.6.6
    == Operating system
    ==
    Windows XP
    == User Agent
    ==
    Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6 GTB7.0 ( .NET CLR 3.5.30729)
    == Plugins installed
    ==
    *-np-mswmp
    *Adobe PDF Plug-In For Firefox and Netscape "9.3.3"
    *Default Plug-in
    *The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
    *NPRuntime Script Plug-in Library for Java(TM) Deploy
    *6.0.12.775
    *RealPlayer(tm) LiveConnect-Enabled Plug-In
    *RealJukebox Netscape Plugin
    *Shockwave Flash 10.1 r53
    *iTunes Detector Plug-in
    *GEPlugin
    *Picasa plugin
    *4.0.50524.0
    *Google Updater pluginhttp://pack.google.com/
    *RealPlayer(tm) HTML5VideoShim Plug-In
    *Google Update
    *Next Generation Java Plug-in 1.6.0_20 for Mozilla browsers
    *Npdsplay dll
    *DRM Store Netscape Plugin
    *DRM Netscape Network Object

    To avoid confusion: http://kb.mozillazine.org/JavaScript_is_not_Java
    Start Firefox in [[Safe Mode]] to check if one of the add-ons is causing the problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
    * Don't make any changes on the Safe mode start window.
    See:
    * [[Troubleshooting extensions and themes]]

  • Can't access some websites using time capsule

    Everything has been working just fine with my time capsule and my imac and just today I couldn't access some websites for some reason. I tried many other sites including this one and can get to them no problem. I have been through all of the airport settings and trouble shooting and can't find any problems, also the other 2 computers and my blackberry can't access some of the same sites either, I am stumped. Does anyone out there have any idea whats going on? Thanks for your help!

    Welcome to the discussions!
    Suggest that you contact your ISP. It sounds like their DNS server is overloaded at the moment, but also unlikely that they will ever admit it.
    It wouldn't hurt to power cycle your complete network as well. Just power everything down, order is not important.
    Start the modem first and let it run a few minutes by itself.
    Then start the next device connected to the modem, probably your Time Capsule, and let it run a few minutes.
    Then start your computers and devices one by one the same way.
    Message was edited by: Bob Timmons

  • Why do some videos from some website stop working after seconds or minutes on a new iPad

    I subscribe to some website posting videos. The videos will start as it should and then stop after, sometimes seconds, and sometimes minutes after the beginning.
    The iPad is less than 3 weeks old. it is already the second. The first was a 16 GB this one is a 32 GB. no difference. This issue does not happen with only one website but other posted videos from other websites.

    This and other answers helped me to understand better why I cannot view these videos and search for answers. I found that the videos posted by this website end in .cfm, and doing research cfm is Adobe and is not compatible with apple software ? why this is not resolved is surprising to me - Several other people experience the same issue as I (dating 2007-to 2013) I am not computer literate but I know how to find information on the web and know +or -  how to use the programs. There seems to be nothing that will convert these videos into a format that the iPad could process and allow. should I buy quicktime for my windows device and transfer/sync it to the ipad (?)(3 weeks old I paid $900) will this work. I have tried to upgrade the firmware to my router but no luck there either; even following all the steps religiously. the unzip is not working? I get a file the upgrade button rejects.
    if it is this cfm format that is doing that, then there is no reason to spend x$ into a new router : the issue will remain the same- is this statement correct ?
    your help is greatly appreciated.

  • Some websites, like Amazon and Shutterstock became garbled after I updated Java.

    Some websites, like Amazon and Shutterstock show up completely garbled. I suspect problems with Javascript, and I'm pretty sure the issue started after I updated Java. I did all the troubleshooting tips listed on this site, and none helped. I booted Firefox without extensions and the problem prevailed. I don't know what else to do.
    Mac OS 10.6.8, Java up to date, Firefox 12.0

    hello, can you try to clear cache, cookies & history for the affected sites as it is described here: [https://support.mozilla.org/en-US/kb/Websites%20say%20cookies%20are%20blocked#w_clear-history-for-that-site]
    in case this doesn't resolve the issue, also go through the other troubleshooting steps of [[Websites look wrong]]. thank you.

  • Some websites down? (Wikipedia)

    Hi guys,
    Is anyone having problems connecting to some websites hosted in the USA?
    I can't access wikipedia.org or xfactorservers.com. 
    DNS has been cleared and connectivity to game servers has been intemittant for about an hour.
    I'm also finding the Forums slow to browse.
    Thanks for your posts.
    Like this post? Give it a Star . If this post answers your question, please Mark it as the Accepted Solution.

    Hi Chris
    Wikipedia - server located in the Netherlands and xfactorservers - server located in the USA are currently loading fine for me
    These forums, ah, well earlier - http://community.bt.com/t5/Forum-Guidance-Ideas/Browser-Forum-oddness/m-p/180761#M1668 though it does seem okay atm...
    -+-No longer a forum member-+-

  • Links on some websites

    On some websites I go to the links do not work.  Is there a setting in my BB I need to change or is it just something about the website?
    Thanks
    Solved!
    Go to Solution.

    Hi,
    I was not able to access the options with the Blackberry Browser, however Opera Mini had no problems.
    Opera mini is a FREE browser that runs o the BB and can sometimes display sites a little better and
    with more function.
    Here is the link if you are interested:
    http://www.operamini.com/download/
    Thanks,
    If you need more info please ask!  If not please resolve the thread using the options by the Kudos’ star, Just place the check in the Post that answered your question, Thanks    
    Click Accept as Solution for posts that have solved your issue(s)!
    Be sure to click Like! for those who have helped you.
    Install BlackBerry Protect it's a free application designed to help find your lost BlackBerry smartphone, and keep the information on it secure.

  • Hi everybody, I am in Turkey on a long assignment, I need help solving a big problem on my macbook pro os 10.9.3. The other week my wife visited some website and now we have a redirect virus of some sort, and every other time when we click

    Hi everybody, I am in Turkey on a long assignment, I need help solving a big problem on my macbook pro os 10.9.3. The other week my wife visited some website and now we have a redirect virus of some sort, and every other time when we click on a link or anywhere on the page we are redirected to this casino web site, https://casino.7bets10.com/tr/?from=hy9yKXD43jSC-8Oxbw4femNd7ZgqdRLk-dHJpeG9uaXR l. Its the same whether on Chrome or Safari. Does anyone have a solution, thank you!

    1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.
    Don't be put off merely by the seeming complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.
    2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.
    There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
    3. Below are instructions to run a UNIX shell script, a type of program. All it does is to collect information about the state of the computer. That information goes nowhere unless you choose to share it. However, you should be cautious about running any kind of program (not just a shell script) at the behest of a stranger. If you have doubts, search this site for other discussions in which this procedure has been followed without any report of ill effects. If you can't satisfy yourself that the instructions are safe, don't follow them. Ask for other options.
    Here's a summary of what you need to do, if you choose to proceed:
    Copy a line of text in this window to the Clipboard.
    Paste into the window of another application.
    Wait for the test to run. It usually takes a few minutes.
    Paste the results, which will have been copied automatically, back into a reply on this page.
    The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.
    4. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode, under the conditions in which the problem is reproduced. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.
    5. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.
    6. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.
    Triple-click anywhere in the line of text below on this page to select it:
    PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(Software Hardware Memory Diagnostics Power FireWire Thunderbolt USB Fonts 51 4 1000 25 5120 KiB/s 1024 85 \\b%% 20480 1 MB/s 25000 ports ' \*AutoCad \*dropbox \*GoogleDr\* vidinst\* ' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH -86 ` route -n get default|awk '/e:/{print $2}' ` 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 25 1000 MB com.apple.AirPortBaseStationAgent 464843899 );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^\([0-9]+\) /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s: %s\n' '\n%s\n\n%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n-\t%s\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("%s (UID %s) is using %s '${p[$2]}'",$0,u,q);} ';};s=(' /^ *$|CSConfigDot/d;s/^ */  /;s/[-0-9A-Fa-f]{22,}/UUID/g;s/(ochat)\.[^.]+(\..+)/\1\2/;/Shared/!s/\/Users\/[^/]+/~/g ' ' s/^ +//;5p;6p;8p;12p;' ' {sub(/^ +/,"")};NR==6;NR==13&&$2<'${p[10]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: [^EO]|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[11]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' $0&&!/ / { n++;print;} END { if(n<200) print "com.apple.";} ' ' $3~/[0-9]:[0-9]{2}$/ { gsub(/:[0-9:a-f]{14}/,"");} { print|"tail -n'${p[12]}'";} ' ' NR==2&&$4<='${p[13]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR!=2{next}'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p' '/\.kext\/(Contents\/)?Info\.plist$/p' 's/^.{52}(.+) <.+/\1/p' ' /Launch[AD].+\.plist$/ { n++;print;} END { print "'${p[41]}'";if(n<200) print "/System/";} ' '/\.xpc\/(Contents\/)?Info\.plist$/p' ' NR>1&&!/0x|\.[0-9]+$|com\.apple\.launchctl\.(Aqua|Background|System)$|'${p[41]}'/ { print $3;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:[^:]+//p ' '/root/p' ' !/\/Contents\/.+\/Contents|Applic|Autom|Frameworks/&&/Lib.+\/Info.plist$/ { n++;print;} END { if(n<1000) print "/System/";} ' '/^\/usr\/lib\/.+dylib$/p' ' /Temp|emac/ { next;} /(etc|Preferences|Launch[AD].+)\// { sub(".(/private)?","");n++;print;} END { print "'${p[41]}'.plist\t'${p[42]}'";if(n<500) print "Launch";} ' ' /\/(Contents\/.+\/Contents|Frameworks)\/|\.wdgt\/.+\.([bw]|plu)/d;p;' 's/\/(Contents\/)?Info.plist$//;p' ' { gsub("^| |\n","\\|\\|kMDItem'${p[35]}'=");sub("^...."," ") };1 ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[9]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/ { next;} /%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/ )||(/v6:/&&$2!~/A/ ) ' ' $1~"lR"&&$2<='${p[25]}';$1~"li"&&$3!~"wpa2";' ' BEGIN { FS=":";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]" "$1;b=b$1;} END { if(b) print("\n\t* Code injection");} ' ' NR!=4{next} {$NF/=10240} '"`S0 27 14`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n  "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n  [N/A]";"file -b "F|getline T;if(T!~/^(AS.+ (En.+ )?text$|POSIX sh.+ text ex)/) F=F" ("T")";printf("\nContents of %s\n%s\n",F,f);if(l>L) printf("\n  ...and %s more line(s)\n",l-L);} ' ' /^ +[NP].+ =/h;/^( +D.+[{]|[}])/{ g;s/.+= //p;};' ' /^ +B/{ s/.+= |(-[0-9]+)?\.s.+//g;p;} ' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' / / { print "'"${p[28]}"'";exit;};1;' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9;} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?Info\.plist$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' 's/0/Off/p' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps sudo\ crontab sudo\ iotop top pkgutil PlistBuddy whoami cksum kextstat launchctl sudo\ launchctl crontab 'sudo defaults read' stat lsbom mdfind ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' defaults\ read scutil sudo\ dtrace sudo\ profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil sudo\ lsof test );c2=(com.apple.loginwindow\ LoginHook '-c Print /L*/P*/loginw*' '-c Print L*/P*/*loginit*' '-c Print L*/Saf*/*/E*.plist' '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' '.??* -path .Trash -prune -o -type d -name *.app -print -prune' '-c Print\ :'${p[35]}' 2>&1' '-c Print\ :Label 2>&1' '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message Req 'bad |Beac|caug|dead[^bl]|FAIL|fail|GPU |hfs: Ru|inval|jnl:|last value [1-9]|n Cause: -|NVDA\(|pagin|proc: t|Roamed|rror|ssert|Thrott|tim(ed? ?|ing )o|WARN' -k Message Rne 'Goog|ksadm|SMC:' -o -k Sender fseventsd -k Message Req 'SL' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/r*/com.apple.*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cgh] ! -name *ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '-L {/{S*/,},}L*/Lau* -type f' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' '-L /S*/L*/{C*/Sec*A,E}* {/,}L*/{A*d,Ca*/*/Ex,Compon,Ex,In,iTu,Keyb,Mail/B,P*P,Qu*T,Scripti,Sec,Servi,Spo,Widg}* -type f -name Info.plist' '/usr/lib -type f -name *.dylib' `awk "${s[31]}"<<<${p[23]}` "/e*/{auto,{cron,fs}tab,hosts,{[lp],sy}*.conf,pam.d/*,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t /S*/L*/Lau*/*t .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -getdnsservers\ "${p[N5]}" -getinfo\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --only-files --files com.apple.pkg.*|sort|uniq' -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' -i4TCP:0-1023 com.apple.dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' '-app Safari WebKitDNSPrefetchingEnabled' );N1=${#c2[@]};for j in {0..8};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n ' syscall::'${p[33+j]}':return { @out[execname,uid]=sum(arg0) } tick-10sec { trunc(@out,1);exit(0);} '";done;l=(Restricted\ files Hidden\ apps 'Elapsed time (s)' POST Battery Safari\ extensions Bad\ plists 'High file counts' User Heat System\ load boot\ args FileVault Diagnostic\ reports Log 'Free space (MiB)' 'Swap (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports kexts Daemons Agents launchd Startup\ items Admin\ access Root\ access Bundles dylibs Apps Font\ issues Inserted\ dylibs Firewall Proxies DNS TCP/IP Wi-Fi Profiles Root\ crontab User\ crontab 'Global login items' 'User login items' Spotlight Memory Listeners Widgets Parental\ Controls Prefetching );N3=${#l[@]};for i in 0 1 2;do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { id -G|grep -qw 80;v[1]=$?;((v[1]==0))&&sudo true;v[2]=$?;v[3]=`date +%s`;clear >&-;date '+Start time: %T %D%n';};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};';done;A7(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=;((v['$((i+1))']==0))||{ v=No;false;};};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Fv "${v[$1]}"<<<"$v"`;};C0(){ [[ "$v" ]]&&echo "$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "$s"<<<"$v"`&&C1 1 $1;};for i in 1 2;do for j in 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;{ A0;A2 0 $((N1+1)) 2;C0;A1 0 $N1 1;C0;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 8;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 1 10 7 9;D13 1 11 8 10;D22 2 12 9 11;D12 3 13 10 12;D23 4 19 44 13;D23 5 14 12 14;D22 6 36 13 15;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;B1&&{ D22 11 17 17 20;for i in 0 1;do D22 28 $((N2+i)) 45 $((N4+i));done;};D22 12 44 54 45;D22 12 39 15 21;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 32 0;B4 0 5 11;A1 17 41 20;B7 5;C3 22;B4 4 6 21;A3 14 7 32 6;B4 0 7 11;B3 4 0 22;A3 14 6 32 0;B4 0 8 11;B5 7 8;B1&&{ A2 19 26 23;B7 7;C3 23;};A2 18 26 23;B7 7;C3 24;A2 4 20 21;B7 6;B2 9;A4 14 7 52 9;B2 10;B6 9 10 4;C3 25;D13 4 21 24 26;B4 4 12 26;B3 4 13 27;A1 4 22 29;B7 12;B2 14;A4 14 6 52 14;B2 15;B6 14 15 4;B3 0 0 30;C3 29;A1 4 23 27;B7 13;C3 30;D13 24 24 32 31;D13 25 37 32 33;A2 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&{ D13 21 0 32 19;D13 10 42 32 40;D22 29 35 46 39;};D13 14 1 48 42;D12 34 43 53 44;D22 0 $((N1+8)) 51 32;D13 4 8 41 6;D12 26 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 33 34 42 37;B1&&D23 35 45 55 46;D23 32 31 43 38;D12 36 47 32 48;D13 20 42 32 41;D13 14 2 48 43;D13 4 5 32 1;D22 4 4 50 0;D13 14 3 49 5;D12 26 48 59 49;B3 4 22 57;A1 26 46 56;B7 22;B3 0 0 58;C3 47;D23 22 9 37 7;A7;C2 2;} 2>/dev/null|pbcopy;exit 2>&-
    Copy the selected text to the Clipboard by pressing the key combination command-C.
    7. Launch the built-in Terminal application in any of the following ways:
    Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    Open LaunchPad. Click Utilities, then Terminal in the icon grid.
    Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.
    8. If you see an error message in the Terminal window such as "syntax error," enter
    exec bash
    and press return. Then paste the script again.
    9. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, press the key combination control-C or just press return three times at the password prompt. Again, the script will still run.
    If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.
    10. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be nothing in the Terminal window and no indication of progress. Wait for the line
    [Process completed]
    to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, close the Terminal window and report the results. No harm will be done.
    11. When the test is complete, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.
    At the top of the results, there will be a line that begins with the words "Start Time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.
    If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.
    12. When you post the results, you might see the message, "You have included content in your post that is not permitted." It means that the forum software has misidentified something in the post as a violation of the rules. If that happens, please post the test results on Pastebin, then post a link here to the page you created.
    Note: This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.
    Copyright © 2014 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

  • Mac suddenly won't open some websites, only on safe mode

    Hi I need some help    
    Mac  stop showing  some websites  in my particular case  (www.globo.com) . I'm trying for almost  5 days and nothing. Just today by morning  the website enters but for few moments after the connections with thw websites don't  work.  The only way  to works s in safe mode. I don't know what to do to solve this.Don't know  if i have to change  DNS or not , because other device in my network works fine, but the mac don't.

    Similar thing here.. I updated my mac mini to Yosemite 10.10.3 a few weeks ago, ever since certain websites won't open on the devices that are connected through my shared internet from the mini (iPad, iPhone and Samsung mobile). Although those same sites open on the mini itself..
    - Z

Maybe you are looking for