can't access Google

[ROBERT MANN]

This has me so frustrated. For the past few days I have
been unable to got to Google's page. I get the "Internet
Explorer could not open search page" message. I emptied
the cache, restored defaults, rebooted, deleted cookies---
nothing works. It keeps timing out. Also, although I
can get to Yahoo, it won't allow me to search. I just
get the "Page cannot be found" page. Any ideas?

 

[Arnold]

-----Original Message-----
This has me so frustrated. For the past few days I have
been unable to got to Google's page. I get the "Internet
Explorer could not open search page" message. I emptied
the cache, restored defaults, rebooted, deleted cookies---
nothing works. It keeps timing out. Also, although I
can get to Yahoo, it won't allow me to search. I just
get the "Page cannot be found" page. Any ideas?
.

Yes,a Trojan
http://vil.nai.com/vil/content/v_100719.htm
http://www.microsoft.com/windows/ie/downloads/critical/8287
50/default.asp

 

[Mike Burgess]

Robert,
Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder. It then
creates entries that redirects *all* major search engines to a website.
Note: this website has now been removed, thus the DNS errors.
[more info]
http://www.mvps.org/winhelp2002/hosts.htm (bottom of page)

Microsoft has released a cumulative patch for this vulnerability:
Simply go to Windows Update [hotfix 828750]
[more info]
http://www.microsoft.com/security/security_bulletins/ms03-040.asp

If your AV did not detect or you simply don't have an AV (bad idea)
Free Removal Tool:
http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.removal.tool.html

AVG AntiVirus 6.0 [freeware] http://www.grisoft.com/
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid

 

[Darrell]

I have the same issue.. None of the search engines are
working for me. Do we have a virus?

Help!!

 

[ROBERT MANN]

I downloaded and used the FixQhost tool, but the Trojan
Qhost isn't in my system. Damn. Can't figure out what
this could be.

-----Original Message-----
Robert,
Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder. It then
creates entries that redirects *all* major search engines to a website.
Note: this website has now been removed, thus the DNS errors.
[more info]
http://www.mvps.org/winhelp2002/hosts.htm (bottom of page)

Microsoft has released a cumulative patch for this vulnerability:
Simply go to Windows Update [hotfix 828750]
[more info]
http://www.microsoft.com/security/security_bulletins/ms03 -040.asp

If your AV did not detect or you simply don't have an AV (bad idea)
Free Removal Tool:
http://securityresponse.symantec.com/avcenter/venc/data/t rojan.qhosts.removal.tool.html

AVG AntiVirus 6.0 [freeware] http://www.grisoft.com/
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30- 03]
Please post replies to this Newsgroup, email address is invalid
--

This has me so frustrated. For the past few days I have
been unable to got to Google's page. I get the "Internet
Explorer could not open search page" message. I emptied
the cache, restored defaults, rebooted, deleted cookies---
nothing works. It keeps timing out. Also, although I
can get to Yahoo, it won't allow me to search. I just
get the "Page cannot be found" page. Any ideas?

.

 

[Mike Burgess]

Darrell,
Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder. It then
creates entries that redirects *all* major search engines to a website.
Note: this website has now been removed, thus the DNS errors.
[more info]
http://www.mvps.org/winhelp2002/hosts.htm (bottom of page)

Microsoft has released a cumulative patch for this vulnerability:
Simply go to Windows Update [hotfix 828750]
[more info]
http://www.microsoft.com/security/security_bulletins/ms03-040.asp

If your AV did not detect or you simply don't have an AV (bad idea)
Free Removal Tool:
http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.removal.tool.html

AVG AntiVirus 6.0 [freeware] http://www.grisoft.com/
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid
--

 

[Mike Burgess]

Robert,
Does a HOSTS file exist in Windows\Help?
Did you run the beta version of HijackThis and post your log file on their
Forum?
All the needed info and links are on my Hosts page near the bottom.
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid
--

I downloaded and used the FixQhost tool, but the Trojan
Qhost isn't in my system. Damn. Can't figure out what
this could be.

-----Original Message-----
Robert,
Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder. It then
creates entries that redirects *all* major search engines to a website.
Note: this website has now been removed, thus the DNS errors.
[more info]
http://www.mvps.org/winhelp2002/hosts.htm (bottom of page)

Microsoft has released a cumulative patch for this vulnerability:
Simply go to Windows Update [hotfix 828750]
[more info]
http://www.microsoft.com/security/security_bulletins/ms03 -040.asp

If your AV did not detect or you simply don't have an AV (bad idea)
Free Removal Tool:
http://securityresponse.symantec.com/avcenter/venc/data/t rojan.qhosts.removal.tool.html

AVG AntiVirus 6.0 [freeware] http://www.grisoft.com/
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30- 03]
Please post replies to this Newsgroup, email address is invalid
--

This has me so frustrated. For the past few days I have
been unable to got to Google's page. I get the "Internet
Explorer could not open search page" message. I emptied
the cache, restored defaults, rebooted, deleted cookies---
nothing works. It keeps timing out. Also, although I
can get to Yahoo, it won't allow me to search. I just
get the "Page cannot be found" page. Any ideas?

.

 

[siljaline]

I have the same issue.. None of the search engines are
working for me. Do we have a virus?

Help!!

http://www.sarc.com/avcenter/venc/data/trojan.qhosts.html

<quote / unquote Mike Burgess>
Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder.

See: http://www.mvps.org/winhelp2002/hosts.htm
Download: either "RenHelpHostXP.bat" or RenHelpHostME.bat"
Follow up with the link provided instructions .......
</snip>

If no joy, run the Beta "Hijack This" utility which detects the HOSTS file that has been taken over.
http://www.spywareinfo.com/~merijn/files/beta/hijackthis.zip
Hijack This, How-to: http://mvps.org/winhelp2002/unwanted.htm

More info: http://www.spywareinfo.com/newsletter/archives/0903/30.php

HTH
--

siljaline MS MVP IE/OE

(Please reply to group, as reply address is invalid, so that we can all benefit)


"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

 

[ROBERT MANN]

Well, I did another scan and it turns out that I did have
the Trojan virus. I had the AV delete the virus--but I
STILL can't access Google! WTF???

-----Original Message-----
I downloaded and used the FixQhost tool, but the Trojan
Qhost isn't in my system. Damn. Can't figure out what
this could be.

-----Original Message-----
Robert,
Trojan Qhosts hijacks the HOSTS file, however unlike normal redirectors,
this one hides the HOSTS file in the "Windows\Help" folder. It then
creates entries that redirects *all* major search engines to a website.
Note: this website has now been removed, thus the DNS errors.
[more info]
http://www.mvps.org/winhelp2002/hosts.htm (bottom of page)

Microsoft has released a cumulative patch for this vulnerability:
Simply go to Windows Update [hotfix 828750]
[more info]
http://www.microsoft.com/security/security_bulletins/ms0

3

-040.asp

If your AV did not detect or you simply don't have an

AV
(bad idea)

Free Removal Tool:
http://securityresponse.symantec.com/avcenter/venc/data/

t

rojan.qhosts.removal.tool.html

AVG AntiVirus 6.0 [freeware] http://www.grisoft.com/
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers,

Trojans,
with a HOSTS file

http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30- 03]
Please post replies to this Newsgroup, email address is invalid
--

This has me so frustrated. For the past few days I have
been unable to got to Google's page. I get the "Internet
Explorer could not open search page" message. I emptied
the cache, restored defaults, rebooted, deleted cookies---
nothing works. It keeps timing out. Also, although I
can get to Yahoo, it won't allow me to search. I just
get the "Page cannot be found" page. Any ideas?

.

.

 

[siljaline]

Well, I did another scan and it turns out that I did have
the Trojan virus. I had the AV delete the virus--but I
STILL can't access Google! WTF???

Did you run the removal too? http://www.sarc.com/avcenter/venc/data/trojan.qhosts.removal.tool.html

Download and install a 'Lock HOSTS' batch file, please choose appropriate O/S.
http://mvps.org/winhelp2002/hosts.htm At bottom of page.

Run "Hijack This" (Beta) that scans for the hijacked HOSTS file.
Link: http://www.spywareinfo.com/~merijn/files/beta/hijackthis.zip
Follow the instructions on running Hijack This, here: http://mvps.org/winhelp2002/unwanted.htm

Install the latest Windows Updates!
http://v4.windowsupdate.microsoft.com/en/default.asp

HTH


--

siljaline MS MVP IE/OE

(Please reply to group, as reply address is invalid, so that we can all benefit)


"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

 

[ROBERT MANN]

Yeah, I downloaded and ran the removal tool. However it
says that it couldn't find the Trojan. But when I ran a
scan with my AV, it said I did. I just ran the removal
tool again and it says still that it could not find any
Trojan. What else could it possibly be? My computer has
all the symptoms of the virus, my AV said I had the
virus..............what gives?

 

[siljaline]

Yeah, I downloaded and ran the removal tool. However it
says that it couldn't find the Trojan. But when I ran a
scan with my AV, it said I did. I just ran the removal
tool again and it says still that it could not find any
Trojan. What else could it possibly be? My computer has
all the symptoms of the virus, my AV said I had the
virus..............what gives?

Mike Burgess asked... !
<snip>
Robert,
Does a HOSTS file exist in Windows\Help?
Did you run the beta version of HijackThis and post your log file on their
Forum?
All the needed info and links are on my Hosts page near the bottom.
http://mvps.org/winhelp2002/hosts.htm
</snip>

Please follow the above instructions, thanks... we will get it sorted for you.


--

siljaline MS MVP IE/OE

(Please reply to group, as reply address is invalid, so that we can all benefit)


"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_