rr.com appended to URL and I don't know why

1

I've been having some pretty bad and intermittent internet connectivity issues. I keep getting timeouts on my browsers, or what appears to be timeouts on my browsers. In Chrome it's generally error 21. FF it times out. And so on.

While this is happening, I can go into the command line and ping or traceroute the same domain and it works fine. I use my cellphone on the same network and it's fine connecting to the same domain. And when it fails, it's all domains that are down in all browsers, chrome, FF, etc.

I also noticed that when I try to connect to 192.168.1.1 it says in chrome did you mean www.192.168.1.1rr.com but when I enter https://192.168.1.1 it's fine. It only seems to do this in Chrome. This is making me think I have a virus. I did some researching about something called road runner, but I can't find any related traces. I also ran a full virus scan using nod32 (eset) and nothing.

Any suggestion or help would be greatly appreciated. The intermittent loss of total internet access is really annoying and I'm worried about why it's trying to append the rr.com domain in Chrome. I suspect I'm dealing with two different issues, but you never know.

Also for the DNS I'm using Google's DNS servers, the famous 8.8.8.8 and 8.8.8.4

Steph

Posted 2013-06-25T03:24:55.173

Reputation: 225

For a second I thought the title of this question was "why". – Louis – 2013-06-25T03:34:22.160

I noticed the weird formatting too. I don't know why that is... – Steph – 2013-06-25T03:39:19.463

They've been screwing with the site CSS again... – Ignacio Vazquez-Abrams – 2013-06-25T03:42:19.350

there is a hijack that uses this rr.com thing , from some of the (gobs) of messes I was scanning over on the web it probably is part of a "package" of junk (likely to be more to it like your saying). Here is one web link http://forums.anvisoft.com/viewtopic-53-3029-0.html (use at your own risk which means dont blindly hit download buttons etc)

– Psycogeek – 2013-06-25T04:34:07.943

I did use hijack this and went through every entry in detail. I did clean up some little things, but there was nothing obvious :( – Steph – 2013-06-25T05:19:26.840

and the hosts file? and the accelerators and search add-ons, and extentions (or by whatever name they want to call the browser plug-in type things? And dont forget the stickey DNS cache if you fix a hosts file. – Psycogeek – 2013-06-25T05:43:06.273

If you have a router verify the DNS servers are configured there. This isn't a "virus". Please verify who your ISP is. Your ISP provider is to blame for this behavior. – Ramhound – 2013-06-25T11:24:06.340

I also checked the host file right away. That was my first thought. Browser extensions, add-ons, you name it. – Steph – 2013-06-25T17:52:27.683

For the DNS server, it's hardcoded on the computer itself. The IP address and DNS server are manually entered. – Steph – 2013-06-25T17:53:08.217

No answers