Welcome to Emulationworld

Forum Index | FAQ | New User | Login | Search

Make a New PostPrevious ThreadView All ThreadsNext Thread*Show in Threaded Mode


SubjectI can't access Google anymore. Reply to this message
Posted byTheFett
Posted on09/02/04 07:33 PM



I have a problem. For the past 6 months, whenever I tried to access google through it's main site at google.com, I've always been taken to a page telling me that my comp has been infected with a virus called "QHosts" that redirects my DNS server to that specific webpage, and that I should install the Microsoft cumulative patch.

I've tried to install their patch, but I don't have IE anymore. Technically, the problem should be gone-- I've been upgrading the computer with new downloads and everything and I use Opera... and before you ask, YES I'VE RUN AN ANTIVIRUS PROGRAM. But it doesn't work. It doesn't seem like a very good prog-- someone gave it to me on a disk one time. It's Symantec Corporate Edition... I've updated its definitions and everything but... well, I think the program sucks, frankly. It won't delete viruses, only quarantines them, saying "Could not delete." I think it's working in concert with the viruses like the police in league with a narcotics ring. Every so often it'll pop up saying it found a virus, but it couldn't delete it. Fucker.

Not only Google, but Altavista is blocked. I can't search for anything on MSN or Yahoo! either. And it's been like that for six months now. The only reason I'm telling you this NOW is because I used to use google's alternative numbered URL (http://216.239.37.99/) and that would work, but recently they must have changed it, so now it only directs me to google.com, which, as I said, I cannot use.

If you have a suggestion, let me know.

NOTE: I'm not spending money on an antivirus suite, so forget that.



Fett seal of approval™


SubjectRe: I can't access Google anymore. new Reply to this message
Posted byfuuma30
Posted on09/02/04 09:13 PM



> I have a problem. For the past 6 months, whenever I tried to access google
> through it's main site at google.com, I've always been taken to a page telling
> me that my comp has been infected with a virus called "QHosts" that redirects my
> DNS server to that specific webpage, and that I should install the Microsoft
> cumulative patch.
>
> I've tried to install their patch, but I don't have IE anymore. Technically, the
> problem should be gone-- I've been upgrading the computer with new downloads and
> everything and I use Opera... and before you ask, YES I'VE RUN AN ANTIVIRUS
> PROGRAM. But it doesn't work. It doesn't seem like a very good prog-- someone
> gave it to me on a disk one time. It's Symantec Corporate Edition... I've
> updated its definitions and everything but... well, I think the program sucks,
> frankly. It won't delete viruses, only quarantines them, saying "Could not
> delete." I think it's working in concert with the viruses like the police in
> league with a narcotics ring. Every so often it'll pop up saying it found a
> virus, but it couldn't delete it. Fucker.
>
> Not only Google, but Altavista is blocked. I can't search for anything on MSN or
> Yahoo! either. And it's been like that for six months now. The only reason I'm
> telling you this NOW is because I used to use google's alternative numbered URL
> (http://216.239.37.99/) and that would work, but recently they must have changed
> it, so now it only directs me to google.com, which, as I said, I cannot use.
>
> If you have a suggestion, let me know.
>
> NOTE: I'm not spending money on an antivirus suite, so forget that.
>
>
>
> Fett seal of approval™
>

I'd have to disagree with you there, Norton Antivirus is the highest rated AV program, and has been around for quite a while. The corporate edition is the best version of the program you can get, I believe. It sounds like the virus took its tool before you installed AV counter-measures, I don't know what to tell you - you could try Trend's Housecall Online virus scan(http://housecall.trendmicro.com/), see if that is any more succeshttp://housecall.trendmicro.com/sful at removing the virus. Also, this may be way off base, but have you bothered to run a Spyware check lately? You should run both Ad-Aware and Spybot Search and Destroy and see what they turn up. Also, check out http://securitytango.com/ - this could be helpful. I hope my advice assists you in some capacity


SubjectStill 216.239.37.99 new Reply to this message
Posted byHalcyon
Posted on09/02/04 11:39 PM



Whenever you're not sure of the IP just go to netcraft.com and look up the web site.




SubjectRe: I can't access Google anymore. new Reply to this message
Posted bywildcat
Posted on09/03/04 00:50 AM



> I have a problem. For the past 6 months, whenever I tried to access google
> through it's main site at google.com, I've always been taken to a page telling
> me that my comp has been infected with a virus called "QHosts" that redirects my
> DNS server to that specific webpage, and that I should install the Microsoft
> cumulative patch.

Trojan.Qhosts

and a removal tool

> I've tried to install their patch, but I don't have IE anymore. Technically, the
> problem should be gone-- I've been upgrading the computer with new downloads and
> everything and I use Opera... and before you ask, YES I'VE RUN AN ANTIVIRUS
> PROGRAM. But it doesn't work. It doesn't seem like a very good prog-- someone
> gave it to me on a disk one time. It's Symantec Corporate Edition... I've
> updated its definitions and everything but... well, I think the program sucks,
> frankly. It won't delete viruses, only quarantines them, saying "Could not
> delete." I think it's working in concert with the viruses like the police in
> league with a narcotics ring. Every so often it'll pop up saying it found a
> virus, but it couldn't delete it. Fucker.

Some viruses fuck around with the antivirus software (Trojan.Qhosts doesn't, but some do). Usually they block the proper installation of the AV software, but I wouldn't be surprised if some patch or replace the AV program, preventing it from deleting viruses. NAV has a way to scan and destroy before you even install it (boot with the NAV CD), and since the .exe is on the (non-writable) CD, viruses can't fuck with it beforehand. The only downside is that you'll be stuck with the supplied definitions (no updates), so a fairly recent virus might not be detected. Try it out (after the removal tool).

> Not only Google, but Altavista is blocked. I can't search for anything on MSN or
> Yahoo! either. And it's been like that for six months now. The only reason I'm
> telling you this NOW is because I used to use google's alternative numbered URL
> (http://216.239.37.99/) and that would work, but recently they must have changed
> it, so now it only directs me to google.com, which, as I said, I cannot use.
>
> If you have a suggestion, let me know.
>
> NOTE: I'm not spending money on an antivirus suite, so forget that.
>
>
>
> Fett seal of approval™

And everything fuuma30 said.




Subjectand if everything fails... new Reply to this message
Posted byTerry Bogard
Posted on09/03/04 05:33 AM



...reinstall the OS, 'cause yours is about to fall to pieces.

This time install another AV such as AVG (NAV sucks and makes your pc run like a 286), a software personal firewall, and regularly scan your pc for viruses, spy/ad-ware, browser hijacks, etc.

As a temporary fix, there should be a "hosts" file somewhere on your pc, open it in notepad and delete every line different from "localhost 127.0.0.1". Some spyware will probably fill it with shit again, but maybe it will work until you reboot.

OKKAY!


SubjectDidn't he just upgrade/reinstall? -nt- new Reply to this message
Posted byHalcyon
Posted on09/03/04 09:22 AM



> ...reinstall the OS, 'cause yours is about to fall to pieces.




SubjectYes, his desktop new Reply to this message
Posted bywildcat
Posted on09/03/04 11:14 AM



> > ...reinstall the OS, 'cause yours is about to fall to pieces.
>

I think he's talking about his notebook here.




Subjectit doesn't matter new Reply to this message
Posted byTerry Bogard
Posted on09/03/04 11:27 AM



> I think he's talking about his notebook here.

A friend of mine that was on 56K (and lived happily) got a DSL, and her computer was infected, trojaned and fucked in 1 (ONE) day. I spent some hours cleaning the beast and training the girl, showing her the wonders of software condoms, and now she enjoys her new, protected life.

OKKAY!


SubjectRe: I can't access Google anymore. new Reply to this message
Posted bysmf
Posted on09/03/04 11:50 AM



I was infected when the site was down. The virus puts a hosts file on your machine which pre-empts a dns lookup.

search for a file called "hosts" on your machine and either delete the whole file or just the lines that refer to google. On windows xp the hosts file should only be in the c:\windows\system32\drivers\etc\hosts, but IIRC there are a couple of other places you can put it & windows will find it. This is usually where the virus puts the hosts file so you probably should be able to delete it safely.

smf





SubjectGoogle works now! new Reply to this message
Posted byTheFett
Posted on09/03/04 06:19 PM



Huzzah! Reinstalled the OS, I can get to Google now. Woot.

Thanks for your help, guys. Much love and all that.

> I have a problem. For the past 6 months, whenever I tried to access google
> through it's main site at google.com, I've always been taken to a page telling
> me that my comp has been infected with a virus called "QHosts" that redirects my
> DNS server to that specific webpage, and that I should install the Microsoft
> cumulative patch.
>
> I've tried to install their patch, but I don't have IE anymore. Technically, the
> problem should be gone-- I've been upgrading the computer with new downloads and
> everything and I use Opera... and before you ask, YES I'VE RUN AN ANTIVIRUS
> PROGRAM. But it doesn't work. It doesn't seem like a very good prog-- someone
> gave it to me on a disk one time. It's Symantec Corporate Edition... I've
> updated its definitions and everything but... well, I think the program sucks,
> frankly. It won't delete viruses, only quarantines them, saying "Could not
> delete." I think it's working in concert with the viruses like the police in
> league with a narcotics ring. Every so often it'll pop up saying it found a
> virus, but it couldn't delete it. Fucker.
>
> Not only Google, but Altavista is blocked. I can't search for anything on MSN or
> Yahoo! either. And it's been like that for six months now. The only reason I'm
> telling you this NOW is because I used to use google's alternative numbered URL
> (http://216.239.37.99/) and that would work, but recently they must have changed
> it, so now it only directs me to google.com, which, as I said, I cannot use.
>
> If you have a suggestion, let me know.
>
> NOTE: I'm not spending money on an antivirus suite, so forget that.
>
>
>
> Fett seal of approval™
>



Fett seal of approval™


Previous ThreadView All ThreadsNext Thread*Show in Threaded Mode