Google

G

Guest

Hi
When I enter www.google.com in the address bar my browser comes back with a CPanel.com website. If I enter the IP address of google.com, then google comes up. When I check the IP Address of the CPanel.com site it comes back as 207.44.220.30 I have run Spybot, Adaware 6.0 and Norton Anti-virus. I have also cleared cache. Does anyone have any other suggestion?
 
M

Mike Burgess

Rich,
Most likely your HOSTS file has been hijacked .. (see below)

In the event you can not access a site and you believe it
may be due to an entry in the HOSTS file.

You can use a simple batch file to rename the HOSTS file "on-the-fly".
Download: RenHosts.bat
http://www.mvps.org/winhelp2002/hosts.htm
[more info]
Problems Using Internet Explorer with Incorrect Hosts File
http://support.microsoft.com/?kbid=219843
--
Go to: http://www.tomcoyote.org/hjt/
Download "Hijack This!" [freeware] or download direct (below):
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic", copy and paste hijackthis.log into your new message.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 11-08-03]
Please post replies to this Newsgroup, email address is invalid
--

Rich said:
Hi
When I enter www.google.com in the address bar my browser comes back with
a CPanel.com website. If I enter the IP address of google.com, then google
comes up. When I check the IP Address of the CPanel.com site it comes back
as 207.44.220.30 I have run Spybot, Adaware 6.0 and Norton Anti-virus. I
have also cleared cache. Does anyone have any other suggestion?
 
H

H Leboeuf

If you have problems with any other search engine then check this out.

Qhosts virus/trojan, ALERT!.

http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html
http://vil.nai.com/vil/content/v_100719.htm
http://www.sophos.com/virusinfo/analyses/trojqhosts1.html

Removal tools that have been used with success.
http://www.brown.edu/Facilities/CIS/Software_Services/virus/index.html
http://software.brown.edu/dist/w-cleanqhosts.html

Be sure that you install hotfix 828750 which fixes the exploit that this
virus uses:
http://www.microsoft.com/windows/ie/downloads/critical/828750/default.asp




Rich said:
Hi
When I enter www.google.com in the address bar my browser comes back with
a CPanel.com website. If I enter the IP address of google.com, then google
comes up. When I check the IP Address of the CPanel.com site it comes back
as 207.44.220.30 I have run Spybot, Adaware 6.0 and Norton Anti-virus. I
have also cleared cache. Does anyone have any other suggestion?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top