I also cannot open certain websites such as any search engine sites

  • Thread starter Thread starter Fiona
  • Start date Start date
F

Fiona

Earlier in the night I put this problem to one of the
microsoft chat rooms and a guy named David thought it
might be a trojan and recommended a certain free virus
scanner on the net. I installed and ran it but the problem
is still there.

I contacted my ISP today and they were open to open Google
with no problems but I haven't been open to open Google,
Altavista or any other search engine site for a couple of
days whereas I can go to other internet sites.

Anyone got anymore ideas?
 
I just started having the same problem. My anti-virus
found no proplems. Still looking for solution....
 
Just the last two days, I've not been able to use the IE
Search Engine. Checked for virus...none. Downloaded
Version 6 with SP1...no change. Unable to open Google.
 
Did you happen to install the Google toolbar application
recently? I did and was wondering if it might be
related? I still can't access google or any search
engine directly from my browser. If I go to yahoo or aol
however, using the search feaure witin the web site seems
to work. Please let me know if you find a solution to
this.
 
New trojan.

http://www.f-secure.com/v-descs/delude.shtml

NAME: Delude
ALIAS: Trojan.BAT.Startpage.a
Delude is a trojan that is available on a web page. The web page contains a
code that uses a vulnerability in the Internet Explorer (MS03-032) to
execute.
More information about the vulnerability, including a fix, is available from
Microsoft at:
http://www.microsoft.com/security/security_bulletins/ms03-032.asp
VARIANT: Delude.A
The HTA code available on a web page downloads a file "partyboy.exe" from an
ftp site and runs it. This file is is packed with UPX. It is a batch file
which was compiled to executable binary (".exe") using a BatToExe tool.
When executed, it changes the Internet Explorer start page to find-now.info.
It prevents access to the most major search engines such as Google, Yahoo,
Lycos, MSN and AltaVista. To do this it replaces the following file:

More:

http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html
http://vil.nai.com/vil/content/v_100719.htm
http://www.sophos.com/virusinfo/analyses/trojqhosts1.html
 
Fiona said:
Earlier in the night I put this problem to one of the
microsoft chat rooms and a guy named David thought it
might be a trojan and recommended a certain free virus
scanner on the net. I installed and ran it but the problem
is still there.

I contacted my ISP today and they were open to open Google
with no problems but I haven't been open to open Google,
Altavista or any other search engine site for a couple of
days whereas I can go to other internet sites.
Click to expand...

There have been lots of posts on this topic in this group. It appears to be
a trojan. For me, my updated Norton Antivirus and Spybot Search and Destroy
were not enough to fix it. You also have to fix your "hosts" files. This
website explains more:
http://www.mvps.org/inetexplorer/answers4.htm#search_engine
Keep looking through this newsgroup - there have been lots of posts with
good links to help you solve the problem.
 
New trojan.

http://www.f-secure.com/v-descs/delude.shtml

NAME: Delude
ALIAS: Trojan.BAT.Startpage.a
Delude is a trojan that is available on a web page. The web page contains a
code that uses a vulnerability in the Internet Explorer (MS03-032) to
execute.
More information about the vulnerability, including a fix, is available from
Microsoft at:
http://www.microsoft.com/security/security_bulletins/ms03-032.asp
VARIANT: Delude.A
The HTA code available on a web page downloads a file "partyboy.exe" from an
ftp site and runs it. This file is is packed with UPX. It is a batch file
which was compiled to executable binary (".exe") using a BatToExe tool.
When executed, it changes the Internet Explorer start page to find-now.info.
It prevents access to the most major search engines such as Google, Yahoo,
Lycos, MSN and AltaVista. To do this it replaces the following file:

More:

http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html
http://vil.nai.com/vil/content/v_100719.htm
http://www.sophos.com/virusinfo/analyses/trojqhosts1.html
 
check for the Qhosts trojan on your PC ....

do you have a folder called bdtmp atthe root of you system drive....

or have a file called 'hosts' in windows\help

if so ....
 
Back
Top