Search engine not working

  • Thread starter Thread starter paulD
  • Start date Start date
P

paulD

Does anyone have ny idea why my NO search engines are
working for me? I can access any sites through links, but
if I can't even get to google.com, or
altavista.com...etc. I can get the the Yahoo.com home
page as well as the msn.com page, but when i try to
search for ANYHTING i get "This page cannot be
displayed".
This is strange, indeed. EVERYTHING else works.
Any help would be great.
Thanks,
P.
 
paulD said:
Does anyone have ny idea why my NO search engines are
working for me? I can access any sites through links, but
if I can't even get to google.com, or
altavista.com...etc. I can get the the Yahoo.com home
page as well as the msn.com page, but when i try to
search for ANYHTING i get "This page cannot be
displayed".
This is strange, indeed. EVERYTHING else works.
Any help would be great.

It is a trojan called Delude or QHosts-1.
http://www.imilly.com/google.htm
http://www.europe.f-secure.com/v-descs/delude.shtml
http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html
 
Check this out.

http://www.f-secure.com/v-descs/delude.shtml

NAME: Delude
ALIAS: Trojan.BAT.Startpage.a
Delude is a trojan that is available on a web page. The web page contains a
code that uses a vulnerability in the Internet Explorer (MS03-032) to
execute.
More information about the vulnerability, including a fix, is available from
Microsoft at:
http://www.microsoft.com/security/security_bulletins/ms03-032.asp
VARIANT: Delude.A
The HTA code available on a web page downloads a file "partyboy.exe" from an
ftp site and runs it. This file is is packed with UPX. It is a batch file
which was compiled to executable binary (".exe") using a BatToExe tool.
When executed, it changes the Internet Explorer start page to find-now.info.
It prevents access to the most major search engines such as Google, Yahoo,
Lycos, MSN and AltaVista. To do this it replaces the following file:
 
Back
Top