Search Engine Troubles

J

Jose

Ok, here's the deal, I've been aware of the trojan that
has been going around, I searched for it with my
Norton2k03 and it turned up no results. I had just
updated my definitions today so,I ran it again with new
definitions and it turned up nothing. The I installed the
windows patches and I still have the same problem, I cant
go to google,altavista,msn,I can access Yahoo but i
cannot search anything. I looked for the trojan files in
my directory but found none of its command lines. I've
tried everything from the Norton new detect ghost to
Windows Update and nothing has worked. Can someone please
help me out as soon as possible, Thanks
 
J

Jim Byrd

Hi Jose - Courtesy of Jim Eshelman:

"IE6 doesn't block this -- but there's some sort of malware going around
that
does! It works by modifying the HOSTS file on your computer. Download the
Hosts File Reader:
http://members.shaw.ca/techcd/VB_Projects/HostsFileReader.exe
Run the program, click the "Read Hosts File" button, click the button
labeled "Reset Defaults" and click "Save Changes."

This fix is compliments of Spyware Weekly Newsletter:
http://www.spywareinfo.com/

--
Jim Eshelman, MS-MVP Windows
http://aumha.org/
http://WinSupportCenter.com/"


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
 
J

Jose

-----Original Message-----
Ok, here's the deal, I've been aware of the trojan that
has been going around, I searched for it with my
Norton2k03 and it turned up no results. I had just
updated my definitions today so,I ran it again with new
definitions and it turned up nothing. The I installed the
windows patches and I still have the same problem, I cant
go to google,altavista,msn,I can access Yahoo but i
cannot search anything. I looked for the trojan files in
my directory but found none of its command lines. I've
tried everything from the Norton new detect ghost to
Windows Update and nothing has worked. Can someone please
help me out as soon as possible, Thanks
.
Click to expand...

Ok So i got that program you suggested but the problem is
that I have previously already deleted the HOST file from
my drivers page in System32, what do i do know? Just get
a friend to send me a copy of that file?
 
M

Mike Burgess

Jim,
FYI: "The Hosts Reader can only read the 'expected' location"
http://forums.spywareinfo.com/index.php?showtopic=12127

In other words it can not read or locate the HOSTS file if it exists in
Windows\Help.

See: http://www.mvps.org/winhelp2002/hosts.htm
Download: either "RenHelpHostXP.bat" or RenHelpHostME.bat"
Follow up with the link provided instructions .......
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid
--
 
J

Jose

Ok forget what i just said cause I got the Host file, now
after I reset it to default what do i do? Run the
symantec virus remover?
 
J

Jose

J

Jim Byrd

Thanks Mike.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
Mike Burgess said:
Jim,
FYI: "The Hosts Reader can only read the 'expected' location"
http://forums.spywareinfo.com/index.php?showtopic=12127

In other words it can not read or locate the HOSTS file if it exists
in Windows\Help.

See: http://www.mvps.org/winhelp2002/hosts.htm
Download: either "RenHelpHostXP.bat" or RenHelpHostME.bat"
Follow up with the link provided instructions .......
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS
file http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid

Jim Byrd said:
Hi Jose - Courtesy of Jim Eshelman:

"IE6 doesn't block this -- but there's some sort of malware going
around that
does! It works by modifying the HOSTS file on your computer.
Download the Hosts File Reader:
http://members.shaw.ca/techcd/VB_Projects/HostsFileReader.exe
Run the program, click the "Read Hosts File" button, click the button
labeled "Reset Defaults" and click "Save Changes."

This fix is compliments of Spyware Weekly Newsletter:
http://www.spywareinfo.com/

--
Jim Eshelman, MS-MVP Windows
http://aumha.org/
http://WinSupportCenter.com/"


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
Click to expand...
Click to expand...
 
J

Jim Byrd

Mike - Symantec now has a removal tool available:
http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.removal.tool.html

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
Mike Burgess said:
Jim,
FYI: "The Hosts Reader can only read the 'expected' location"
http://forums.spywareinfo.com/index.php?showtopic=12127

In other words it can not read or locate the HOSTS file if it exists
in Windows\Help.

See: http://www.mvps.org/winhelp2002/hosts.htm
Download: either "RenHelpHostXP.bat" or RenHelpHostME.bat"
Follow up with the link provided instructions .......
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS
file http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid

Jim Byrd said:
Hi Jose - Courtesy of Jim Eshelman:

"IE6 doesn't block this -- but there's some sort of malware going
around that
does! It works by modifying the HOSTS file on your computer.
Download the Hosts File Reader:
http://members.shaw.ca/techcd/VB_Projects/HostsFileReader.exe
Run the program, click the "Read Hosts File" button, click the button
labeled "Reset Defaults" and click "Save Changes."

This fix is compliments of Spyware Weekly Newsletter:
http://www.spywareinfo.com/

--
Jim Eshelman, MS-MVP Windows
http://aumha.org/
http://WinSupportCenter.com/"


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
Click to expand...
Click to expand...
 
M

Mike

I have seem to have the same search engine problem as the
rest of you in that I cannot connect to one and have
downloaded the new HOSTS file that Mr. Burgess posted
about, but it doesn't seem to work. If anyone else comes
up with another solution, your input would greatly be
appreciated.

Thanks.

-----Original Message-----
Jose,
You can get a fresh HOSTS file from (see below)
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30- 03]
Please post replies to this Newsgroup, email address is invalid
--



Ok So i got that program you suggested but the problem is
that I have previously already deleted the HOST file from
my drivers page in System32, what do i do know? Just get
a friend to send me a copy of that file?
Click to expand...


.
Click to expand...
 
M

Mike

Nevermind, I got it cured. I replaced the HOSTS file in
the C:\WINDOWS\SYSTEM32\DRIVERS\etc folder with the one
that I dl'ed from the link that Mike Burgess was kind
enough to post (Thanks) and deleted it's evil twin in the
C:\WINDOWS\HELP folder. When I deleted the HOSTS file in
the HELP folder, it sent it to the Recycle Bin and
wouldn't delete it from there (even though the icon
vanished). It took a system restore to get it to delete
fully from the R.Bin, but it's gone now. Thanks to all
that have posted about this problem, your help is
appreciated.
 
M

Mike Burgess

Jim,
Mike - Symantec now has a removal tool available:
Click to expand...
Yes, I know .... the below link is on my HOSTS page
http://www.sarc.com/avcenter/venc/data/trojan.qhosts.html

There is also a link to the "beta" version of HijackThis to detect the same.
In a few cases the "QHosts" Hosts file has been marked "read only" and
"system file"
so that the user can't delete or edit = file in use, etc.
Thus - RenHelpHostsXP.bat = unlocks and renames (if exists)
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid
--

Jim Byrd said:
Mike - Symantec now has a removal tool available:
http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.removal.tool.html

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
Mike Burgess said:
Jim,
FYI: "The Hosts Reader can only read the 'expected' location"
http://forums.spywareinfo.com/index.php?showtopic=12127

In other words it can not read or locate the HOSTS file if it exists
in Windows\Help.

See: http://www.mvps.org/winhelp2002/hosts.htm
Download: either "RenHelpHostXP.bat" or RenHelpHostME.bat"
Follow up with the link provided instructions .......
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS
file http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid

Jim Byrd said:
Hi Jose - Courtesy of Jim Eshelman:

"IE6 doesn't block this -- but there's some sort of malware going
around that
does! It works by modifying the HOSTS file on your computer.
Download the Hosts File Reader:
http://members.shaw.ca/techcd/VB_Projects/HostsFileReader.exe
Run the program, click the "Read Hosts File" button, click the button
labeled "Reset Defaults" and click "Save Changes."

This fix is compliments of Spyware Weekly Newsletter:
http://www.spywareinfo.com/

--
Jim Eshelman, MS-MVP Windows
http://aumha.org/
http://WinSupportCenter.com/"


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In Jose <[email protected]> typed:
Ok, here's the deal, I've been aware of the trojan that
has been going around, I searched for it with my
Norton2k03 and it turned up no results. I had just
updated my definitions today so,I ran it again with new
definitions and it turned up nothing. The I installed the
windows patches and I still have the same problem, I cant
go to google,altavista,msn,I can access Yahoo but i
cannot search anything. I looked for the trojan files in
my directory but found none of its command lines. I've
tried everything from the Norton new detect ghost to
Windows Update and nothing has worked. Can someone please
help me out as soon as possible, Thanks
Click to expand...
Click to expand...
Click to expand...
 
M

medgirl

Mike Burgess said:
Jim,
FYI: "The Hosts Reader can only read the 'expected' location"
http://forums.spywareinfo.com/index.php?showtopic=12127

In other words it can not read or locate the HOSTS file if it exists in
Windows\Help.
Click to expand...

Or just fix it yourself. Search your files for "hosts" to turn up files
located in unexpected places, such as Windows/Help. Open with notepad. If
it has a list of search engines, that's the culprit file. Rename or delete
it.
 
J

Jose

Good for you mike, i tried the exact same thing but
unfortunately i still cant search, I found the file in
the Windows/Help Folder deleted it and then deleted it
again in my recylcing bin without a problem. I cannot
search however even after several scans of my computer.
Please continue give me advice
 
J

Jose

Ok forget what I just said again, I figured out the
problem, i had to restart my computer for the delete to
take effect, now my search engine is working perfectly
and there isnt a darn thing wrong. Thanks for your help
everyone, Medgirl I'd ask for your hand in marriage but
we only just met ^_^ Thanks everyone you guys are the
best.
 
M

medgirl

Jose said:
Ok forget what I just said again, I figured out the
problem, i had to restart my computer for the delete to
take effect, now my search engine is working perfectly
and there isnt a darn thing wrong. Thanks for your help
everyone, Medgirl I'd ask for your hand in marriage but
we only just met ^_^ Thanks everyone you guys are the
best.
Click to expand...

Glad to be of help, Jose. :)
 
D

Deb

Jim,
I ran the symantec removal tool and nothing changed.I
still cannot access search engines. What Now? I installed
and ran Ad-Aware. Nothing changed. I am a computer user,
not a fixer so I do not know what to do next. I have read
about finding the bad host files and fixing them but that
is kinda scary for someone that does not have those
advanced user skills. Could I get rid of it by
reinstalling my operating system (Windows 2000)?
Thanks
Deb
-----Original Message-----
Mike - Symantec now has a removal tool available:
http://securityresponse.symantec.com/avcenter/venc/data/tr ojan.qhosts.removal.tool.html

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
Mike Burgess said:
Jim,
FYI: "The Hosts Reader can only read the 'expected' location"
http://forums.spywareinfo.com/index.php?showtopic=12127

In other words it can not read or locate the HOSTS file if it exists
in Windows\Help.

See: http://www.mvps.org/winhelp2002/hosts.htm
Download: either "RenHelpHostXP.bat" or RenHelpHostME.bat"
Follow up with the link provided instructions .......
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS
file http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid

Jim Byrd said:
Hi Jose - Courtesy of Jim Eshelman:

"IE6 doesn't block this -- but there's some sort of malware going
around that
does! It works by modifying the HOSTS file on your computer.
Download the Hosts File Reader:
Click to expand...
Click to expand...
http://members.shaw.ca/techcd/VB_Projects/HostsFileReader.e
xe

.
Click to expand...
 
D

Deb

Can I use the renhelphostsxp.bat or the other one if I am
running windows 2000? I guess you can tell I do not know
much about this kind of stuff.
Deb
-----Original Message-----
Jim,
Mike - Symantec now has a removal tool available:
Click to expand...
Yes, I know .... the below link is on my HOSTS page
http://www.sarc.com/avcenter/venc/data/trojan.qhosts.html

There is also a link to the "beta" version of HijackThis to detect the same.
In a few cases the "QHosts" Hosts file has been marked "read only" and
"system file"
so that the user can't delete or edit = file in use, etc.
Thus - RenHelpHostsXP.bat = unlocks and renames (if exists)
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30- 03]
Please post replies to this Newsgroup, email address is invalid
--

Jim Byrd said:
Mike - Symantec now has a removal tool available:
http://securityresponse.symantec.com/avcenter/venc/data/tr ojan.qhosts.removal.tool.html

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
Mike Burgess said:
Jim,
FYI: "The Hosts Reader can only read the 'expected' location"
http://forums.spywareinfo.com/index.php? showtopic=12127

In other words it can not read or locate the HOSTS file if it exists
in Windows\Help.

See: http://www.mvps.org/winhelp2002/hosts.htm
Download: either "RenHelpHostXP.bat" or RenHelpHostME.bat"
Follow up with the link provided instructions .......
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS
file http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid

Hi Jose - Courtesy of Jim Eshelman:

"IE6 doesn't block this -- but there's some sort of malware going
around that
does! It works by modifying the HOSTS file on your computer.
Download the Hosts File Reader:
Click to expand...
Click to expand...
http://members.shaw.ca/techcd/VB_Projects/HostsFileReader.e
xe

.
Click to expand...
 
M

medgirl

Deb said:
Jim,
I ran the symantec removal tool and nothing changed.I
still cannot access search engines. What Now? I installed
and ran Ad-Aware. Nothing changed. I am a computer user,
not a fixer so I do not know what to do next. I have read
about finding the bad host files and fixing them but that
is kinda scary for someone that does not have those
advanced user skills. Could I get rid of it by
reinstalling my operating system (Windows 2000)?
Click to expand...

You probably do not have to do anything so drastic as reinstalling the OS.

1. Go to Start/Find/Files and Folders (or whatever the equivalent of this
is in Win 2000. I have Win98).
2. Find hosts.
3. Several entries will probably come up.
4. Right click on the file and select "Open with"
5. Scroll down and select "notepad." Uncheck "always use this program to
open this type of tile"
6. Look at the text. If there are a lot of search engines listed, that's
your culprit.
7. Check all the hosts files until you find the culprit in the manner
listed above.
8. When you find the affected file, right click on it from the Find window.
9. Rename to hostsold (or if you're brave, delete it)
10. Restart computer.
11. This should fix it.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

privacy outpost / a search engine lock out 3
Browser fails to connect to Search Engine Sites 1
search engine problem 1
I also cannot open certain websites such as any search engine sites 7
Default search engine 1
Problem changing address bar search engine 5
Default search engine 1
Can't access search engines 1

Top