Cannot use search engines

[maria]

Suddenly, I am unable to use any of the search engines in
IE (or Netscape for that matter). I cannot get to
Google.com (instead I get routed to com.net). I can get
to other pages with search engines (yahoo, excite, msn)
but cannot search - it appears to time out. When I try to
ping google.com from the cmd prompt - it times out.

Anyone who has any info - please email me at
(e-mail address removed)

I am stumped.

 

[Mike Burgess]

Maria,
Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder. It then
creates entries that redirects *all* major search engines to a website.
Note: this website has now been removed, thus the DNS errors.

Microsoft has released a cumulative patch for this vulnerability:
Simply go to Windows Update [hotfix 828750]
[more info]
http://www.microsoft.com/security/security_bulletins/ms03-040.asp

[manual removal method]
http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html
Note: not all machines are affected by the same Registry changes
but the user needs to verify in any case.

You can detect "Qhosts" via a new beta version of HijackThis
http://www.spywareinfo.com/~merijn/files/beta/hijackthis.zip
[more info]
http://forums.spywareinfo.com/index.php?showtopic=12127

For instruction on using HijackThis!
http://www.mvps.org/winhelp2002/unwanted.htm
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 10-07-03]
Please post replies to this Newsgroup, email address is invalid

 

[paul]

I have nearly the same problem can get to the search
engines by my fav list but can not do a search the web
facility on any of the engines i cant get to google in my
favourite list
But you can get to google if you type in there ip address
witch is 216.239.39.99 hope that helps

 

[Scott]

I have downloaded the Microsoft patch for this and I have
also installed and ran Hijackthis. I am still suffering
from the same symptoms. I'm not sure what else to do. Any
help would be appreciated. Thanks

-----Original Message-----
Maria,
Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder. It then
creates entries that redirects *all* major search engines to a website.
Note: this website has now been removed, thus the DNS errors.

Microsoft has released a cumulative patch for this vulnerability:
Simply go to Windows Update [hotfix 828750]
[more info]
http://www.microsoft.com/security/security_bulletins/ms03- 040.asp

[manual removal method]
http://securityresponse.symantec.com/avcenter/venc/data/tr ojan.qhosts.html
Note: not all machines are affected by the same Registry changes
but the user needs to verify in any case.

You can detect "Qhosts" via a new beta version of HijackThis

http://www.spywareinfo.com/~merijn/files/beta/hijackthis.z

ip
[more info]
http://forums.spywareinfo.com/index.php?showtopic=12127

For instruction on using HijackThis!
http://www.mvps.org/winhelp2002/unwanted.htm
__________________________________________________________ __
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 10-07- 03]
Please post replies to this Newsgroup, email address is invalid
--

Suddenly, I am unable to use any of the search engines in
IE (or Netscape for that matter). I cannot get to
Google.com (instead I get routed to com.net). I can get
to other pages with search engines (yahoo, excite, msn)
but cannot search - it appears to time out. When I try to
ping google.com from the cmd prompt - it times out.

Anyone who has any info - please email me at
(e-mail address removed)

I am stumped.

.

 

[Mike Burgess]

Scott,
You can detect "Qhosts" via a new beta version of HijackThis
http://www.spywareinfo.com/~merijn/files/beta/hijackthis.zip
[more info]
http://forums.spywareinfo.com/index.php?showtopic=12127

For instruction on using HijackThis!
http://www.mvps.org/winhelp2002/unwanted.htm
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 10-07-03]
Please post replies to this Newsgroup, email address is invalid
--

I have downloaded the Microsoft patch for this and I have
also installed and ran Hijackthis. I am still suffering
from the same symptoms. I'm not sure what else to do. Any
help would be appreciated. Thanks

-----Original Message-----
Maria,
Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder. It then
creates entries that redirects *all* major search engines to a website.
Note: this website has now been removed, thus the DNS errors.

Microsoft has released a cumulative patch for this vulnerability:
Simply go to Windows Update [hotfix 828750]
[more info]
http://www.microsoft.com/security/security_bulletins/ms03- 040.asp

[manual removal method]
http://securityresponse.symantec.com/avcenter/venc/data/tr ojan.qhosts.html
Note: not all machines are affected by the same Registry changes
but the user needs to verify in any case.

You can detect "Qhosts" via a new beta version of HijackThis

http://www.spywareinfo.com/~merijn/files/beta/hijackthis.z

ip
[more info]
http://forums.spywareinfo.com/index.php?showtopic=12127

For instruction on using HijackThis!
http://www.mvps.org/winhelp2002/unwanted.htm
__________________________________________________________ __
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 10-07- 03]
Please post replies to this Newsgroup, email address is invalid
--

Suddenly, I am unable to use any of the search engines in
IE (or Netscape for that matter). I cannot get to
Google.com (instead I get routed to com.net). I can get
to other pages with search engines (yahoo, excite, msn)
but cannot search - it appears to time out. When I try to
ping google.com from the cmd prompt - it times out.

Anyone who has any info - please email me at
(e-mail address removed)

I am stumped.

.