Go Back   PCMech Forums > Help & Discussion > Software Discussion & Support

Need Some Help? Type Your Keywords Here:

Reply
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
Old 10-27-2003, 09:52 AM   #1
Member (5 bit)
 
Join Date: Sep 2002
Posts: 24
Question Hemorrhoids

Need help with a virus/malicious program problem.

I can't connect to any search engines. Try to go to google for example and explorer just dumps me to page unavailable message. Same for Yahoo, etc. Everything else seems to be fine.

Norton antivirus came up clean but it's about a year old.

Is this a common problem that anyone recognizes.

Any help on this one?

Thx.
VolatileAgent is offline   Reply With Quote
Old 10-27-2003, 10:05 AM   #2
Member (8 bit)
 
SimonFF's Avatar
 
Join Date: Mar 2003
Location: Edinburgh, UK
Posts: 167
Send a message via AIM to SimonFF Send a message via MSN to SimonFF
Try using this to scan your PC for a virus.

http://housecall.trendmicro.com/hous...start_corp.asp
__________________

AMD Athlon 64 X2 Dual-Core 4800 | Asus A8N32-SLi Deluxe | Corsair 2GB DDR XMS3500LL Pro TwinX
XFX GeForce 7950 GX2 M570 1GB DDR3 XXX | Seasonic S12 600W Silent ATX2.0
Windows Vista Ultimate
SimonFF is offline   Reply With Quote
Old 10-27-2003, 10:17 AM   #3
Member (12 bit)
 
Mr N8's Avatar
 
Join Date: Sep 2001
Location: Racine, WI
Posts: 2,094
Send a message via AIM to Mr N8 Send a message via Yahoo to Mr N8
It sounds like there is a problem with your hosts file.

Go to C:/Windows/system32/drivers/etc

Open the hosts file with Wordpad.

Make sure that you don't have any entries in there that indicate any search engines. IE - www.google.com should have either no entry or something like this:

216.239.37.99 google.com


If it has 127.0.0.1 for the search engine addresses, then it is pointing everything back to your machine.
Mr N8 is offline   Reply With Quote
Old 10-27-2003, 01:05 PM   #4
Member (5 bit)
 
Join Date: Sep 2002
Posts: 24
OK, thanks for the responses, here'e what I know so far.

I did the trendmicro virus scan and it said no virus detected.

Next I followed Mr N8's instructions.
This is what I got.

127.0.0.1 localhost
127.127.127.127 elite
207.44.194.56 www.google.com
207.44.194.56 google.com
207.44.194.56 www.altavista.com
207.44.194.56 altavista.com
207.44.194.56 search.yahoo.com
207.44.194.56 uk.search.yahoo.com
207.44.194.56 ca.search.yahoo.com
207.44.194.56 jp.search.yahoo.com
207.44.194.56 au.search.yahoo.com
207.44.194.56 de.search.yahoo.com
207.44.194.56 search.yahoo.co.jp
207.44.194.56 www.lycos.de
207.44.194.56 www.lycos.ca
207.44.194.56 www.lycos.jp
207.44.194.56 www.lycos.co.jp
207.44.194.56 alltheweb.com
207.44.194.56 web.ask.com
207.44.194.56 ask.com
207.44.194.56 www.ask.com
207.44.194.56 www.teoma.com
207.44.194.56 search.aol.com
207.44.194.56 www.looksmart.com
207.44.194.56 search.msn.com
207.44.194.56 ca.search.msn.com
207.44.194.56 fr.ca.search.msn.com
207.44.194.56 search.fr.msn.be
207.44.194.56 search.fr.msn.ch
207.44.194.56 search.latam.yupimsn.com
207.44.194.56 search.msn.at
207.44.194.56 search.msn.be
207.44.194.56 search.msn.ch
207.44.194.56 search.msn.co.in
207.44.194.56 search.msn.co.jp
207.44.194.56 search.msn.co.kr
207.44.194.56 search.msn.com.br
207.44.194.56 search.msn.com.hk
207.44.194.56 search.msn.com.my
207.44.194.56 search.msn.com.sg
207.44.194.56 search.msn.com.tw
207.44.194.56 search.msn.co.za
207.44.194.56 search.msn.de
207.44.194.56 search.msn.dk
207.44.194.56 search.msn.es
207.44.194.56 search.msn.fi
207.44.194.56 search.msn.fr
207.44.194.56 search.msn.it
207.44.194.56 search.msn.nl
207.44.194.56 search.msn.no
207.44.194.56 search.msn.se
207.44.194.56 search.ninemsn.com.au
207.44.194.56 search.t1msn.com.mx
207.44.194.56 search.xtramsn.co.nz
207.44.194.56 search.yupimsn.com
207.44.194.56 uk.search.msn.com
207.44.194.56 search.lycos.com
207.44.194.56 www.lycos.com
207.44.194.56 www.google.ca
207.44.194.56 google.ca
207.44.194.56 www.google.uk
207.44.194.56 www.google.co.uk
207.44.194.56 www.google.com.au
207.44.194.56 www.google.co.jp
207.44.194.56 www.google.jp
207.44.194.56 www.google.at
207.44.194.56 www.google.be
207.44.194.56 www.google.ch
207.44.194.56 www.google.de
207.44.194.56 www.google.dk
207.44.194.56 www.google.fi
207.44.194.56 www.google.fr
207.44.194.56 www.google.com.gr
207.44.194.56 www.google.com.hk
207.44.194.56 www.google.ie
207.44.194.56 www.google.co.il
207.44.194.56 www.google.it
207.44.194.56 www.google.co.kr
207.44.194.56 www.google.com.mx
207.44.194.56 www.google.nl
207.44.194.56 www.google.co.nz
207.44.194.56 www.google.pl
207.44.194.56 www.google.pt
207.44.194.56 www.google.com.ru
207.44.194.56 www.google.com.sg
207.44.194.56 www.google.co.th
207.44.194.56 www.google.com.tr
207.44.194.56 www.google.com.tw
207.44.194.56 google.at
207.44.194.56 google.be
207.44.194.56 google.de
207.44.194.56 google.dk
207.44.194.56 google.fi
207.44.194.56 google.fr
207.44.194.56 google.com.hk
207.44.194.56 google.ie
207.44.194.56 google.co.il
207.44.194.56 google.it
207.44.194.56 google.co.kr
207.44.194.56 google.com.mx
207.44.194.56 google.nl
207.44.194.56 google.co.nz
207.44.194.56 google.pl
207.44.194.56 google.com.ru
207.44.194.56 google.com.sg
207.44.194.56 www.hotbot.com
207.44.194.56 hotbot.com

Every search engine has the same address.

Any thoughts on how this happened and how to correct it?

Thx
VolatileAgent is offline   Reply With Quote
Old 10-27-2003, 01:09 PM   #5
Member (8 bit)
 
SimonFF's Avatar
 
Join Date: Mar 2003
Location: Edinburgh, UK
Posts: 167
Send a message via AIM to SimonFF Send a message via MSN to SimonFF
Looks a bit strange! If I was you I would just delete them all, keep the one at the top the local host, and make sure you put a few returns in after the local host address, it needs spaces after it for some reason!
SimonFF is offline   Reply With Quote
Old 10-27-2003, 01:23 PM   #6
Member (12 bit)
 
Mr N8's Avatar
 
Join Date: Sep 2001
Location: Racine, WI
Posts: 2,094
Send a message via AIM to Mr N8 Send a message via Yahoo to Mr N8
Yes, just delete all of the entries for the search engines. Delete everything underneath the 127.0.0.1 localhost. The other entries were made by a spyware app, most likely.

Run a scan for spyware with either ad-aware or spybot search and destroy. Run both if you feel inclined to.
Mr N8 is offline   Reply With Quote
Old 10-27-2003, 02:52 PM   #7
Member (5 bit)
 
Join Date: Sep 2002
Posts: 24
Success!!!

Thanks for the help.

Spybot cured the problem.

Regards!!
VolatileAgent is offline   Reply With Quote
Old 10-27-2003, 03:10 PM   #8
Member (12 bit)
 
Mr N8's Avatar
 
Join Date: Sep 2001
Location: Racine, WI
Posts: 2,094
Send a message via AIM to Mr N8 Send a message via Yahoo to Mr N8
Good to hear.

If you ever come across weird occurances that seem to be internet related, just run spybot. I install it on all of the computers I build for friends and family, and most of them run it monthly just a as a maintenance step.
Mr N8 is offline   Reply With Quote
Reply

Bookmarks

Still Need Help? Type Your Keywords Here:


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 05:18 PM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 PL2