Unable to open search pages

  • Thread starter Thread starter Paul
  • Start date Start date
P

Paul

We can access most web pages, but all search pages
(google, altavista, msn, etc) do not open
 
this must be new virus because lots of people see this.
all are working from my computer.
no problems searching here.
 
Your problems lies with the HOSTS file in the
C:\WINDOWS\Help directory. Rename, move, or delete this
file to fix your problem. If you are using netscape, you
may need to close and reopen before the change is accepted.
 
http://www.f-secure.com/v-descs/delude.shtml

NAME: Delude
ALIAS: Trojan.BAT.Startpage.a
Delude is a trojan that is available on a web page. The web page contains a
code that uses a vulnerability in the Internet Explorer (MS03-032) to
execute.
More information about the vulnerability, including a fix, is available from
Microsoft at:
http://www.microsoft.com/security/security_bulletins/ms03-032.asp
VARIANT: Delude.A
The HTA code available on a web page downloads a file "partyboy.exe" from an
ftp site and runs it. This file is is packed with UPX. It is a batch file
which was compiled to executable binary (".exe") using a BatToExe tool.
When executed, it changes the Internet Explorer start page to find-now.info.
It prevents access to the most major search engines such as Google, Yahoo,
Lycos, MSN and AltaVista. To do this it replaces the following file:



http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html
 
Back
Top