D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DGL-4500 => Topic started by: andrey on August 21, 2009, 08:48:34 AM

Title: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: andrey on August 21, 2009, 08:48:34 AM
Why with this DGL-4500 router, when I do a search from the toolbar in IE, I get to http://www1.dlinksearch.com/ with its own lousy results? I never gave permission to d-link to do that and there is no way that I can see to turn this stupid feature off.

How can I change this and use my own search preferences instead of d-link?
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Lycan on August 21, 2009, 09:13:05 AM
In the routers settings is advanced DNS enabled?
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: andrey on August 21, 2009, 09:19:15 AM
Where is "Advanced DNS" located?

The closest I can find is Basic >> Network Settings >> "Enable DNS Relay". That one is checked.
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Reinvented on August 21, 2009, 04:22:58 PM
Where is "Advanced DNS" located?

The closest I can find is Basic >> Network Settings >> "Enable DNS Relay". That one is checked.

What firmware version are you using?

The Advanced DNS feature did not appear until 1.20.

But...it would be located under Basic -> Internet -> Manual Configure
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: andrey on August 21, 2009, 04:25:33 PM
I'm using firmware 1.12 on hardware revision A2.
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Reinvented on August 22, 2009, 01:08:29 AM
I'm using firmware 1.12 on hardware revision A2.

Then you won't see it.
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: andrey on August 22, 2009, 01:48:06 AM
Then you won't see it.

The problem is not whether I see "advanced dns", but with the d-link hijacking the browser toolbar.
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Puffnstuff on August 22, 2009, 05:45:08 AM
What are your search settings for ie under the tools-internet options?  What is your default search engine?  The browser is responsible for the actions you describe not the router.
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Reinvented on August 22, 2009, 10:51:09 AM
The problem is not whether I see "advanced dns", but with the d-link hijacking the browser toolbar.

The Advanced DNS option could be responsible for you seeing the redirect.  However, since you do not have the updated firmware, which results in not having that option - then you won't see it. 

As Puff mentioned, it is more than likely a browser setting from IE.
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: andrey on August 22, 2009, 11:04:37 AM
Browser settings are at default on all 4 PC that are connected to DGL-4500 and one machine Windows 7 was installed just a day before. Nothing has changed on that machine. It is clear the router is doing this.
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Puffnstuff on August 22, 2009, 12:43:26 PM
What about these settings from your basic network settings page?
Enable DHCP Server:   

DHCP IP Address Range:  to 

DHCP Lease Time:  (minutes)

Always broadcast:   (compatibility for some DHCP Clients)

NetBIOS announcement:   

Learn NetBIOS from WAN:   
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: andrey on August 23, 2009, 01:09:26 AM
What about these settings from your basic network settings page?
Enable DHCP Server:   

DHCP IP Address Range:  to 

DHCP Lease Time:  (minutes)

Always broadcast:   (compatibility for some DHCP Clients)

NetBIOS announcement:   

Learn NetBIOS from WAN:   


Enable DHCP Server:   checked
DHCP IP Address Range:  10.0.0.100 to 10.0.0.199
DHCP Lease Time:  1440
Always broadcast:   checked
NetBIOS announcement:   (not checked)
Learn NetBIOS from WAN: (not checked)
NetBIOS Scope: (empty, grayed out)
Learn NetBIOS from WAN:  (mixed-mode, grayed out)
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Puffnstuff on August 23, 2009, 06:29:48 AM
Try enabling netbios announcement and learn netbios from lan and see what happens.  I've never experienced the problem you describe so I'm somewhat puzzled by it especially since all browsers are affected unless you use opendns servers and have not setup your account properly.
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: V@no on August 23, 2009, 07:45:04 PM
can you confirm that if you plug your computer directly to the modem (bypass the router) you don't get the same result?
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Puffnstuff on August 23, 2009, 08:02:01 PM
Have you tried a hard reset of your router?  Have you reset your modem or at least power cycled it?  Are you machines free of spyware?  Have a look at this thread http://support.mozilla.com/tiki-view_forum_thread.php?comments_parentId=395657&forumId=1 he's got the same problem.
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: andrey on August 23, 2009, 09:48:52 PM
can you confirm that if you plug your computer directly to the modem (bypass the router) you don't get the same result?

Yes, plugging PC directly into modem resolves the problem. As I mentioned above, this is something within the router that causes this. The router is brand new, rev A2 hardware.

I just don't understand why D-Link does that and moreover, doesnt' allow users to change that behavior.
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Puffnstuff on August 23, 2009, 10:53:48 PM
Well that isn't standard behavior for the router.  What dns servers you do use?
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: andrey on August 24, 2009, 11:00:32 AM
Using standard cox.net DNS servers

Default Gateway : 68.230.52.1
Primary DNS Server : 204.194.232.200
Secondary DNS Server : 204.194.234.200

By the way, looks like another user with d-link router has the same issue:

http://support.mozilla.com/tiki-view_forum_thread.php?comments_parentId=395657&forumId=1
http://forums.techguy.org/networking/766363-d-link-dir-655-firmware.html

Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Lycan on August 24, 2009, 11:23:42 AM
try changing the DNS servers manually to use 4.2.2.2 and 4.2.2.3 and tell me if the behavior continues.
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: andrey on August 24, 2009, 11:34:30 AM
try changing the DNS servers manually to use 4.2.2.2 and 4.2.2.3 and tell me if the behavior continues.


Yes, that made it work and I do get to the correct site now.

Question, why was this "feature" implemented in the router with zero information from d-link?

Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Lycan on August 24, 2009, 12:07:12 PM
it's not a feature
there's nothing in the router thats doing that.
Only a DNS server can do that. If it was the router it would do it no matter what server you used.

Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Puffnstuff on August 24, 2009, 12:43:47 PM
Most isp, especially cable providers have a new dns redirect feature that you have to opt out of.  The behaviour you describe sounds like a dns redirect from the isp.
Title: Re: Browser Toolbar Hijack: http://www1.dlinksearch.com/
Post by: Lycan on August 24, 2009, 01:39:09 PM
odd that it goes to Dlink, but we may have some deal that allows for our routers to be redirected using their DNS servers based on MAC addresses. I bet if you clone the MAC it would stop too.

Try turning OFF Advanced DNS Service.