Still IE Problem

[Mike]

I ran the symantec fix tool, but I still have the
problem. I followed the instructions and it did find the
virus, but after the tool ran, re-start, and re-running
of the tool, my searches still do not go through. Any
other suggestions? Thanks!

************************
Hi,

It sounds like you've been infected with the Trojan.Qhost
bug.
The new Qhosts bug exploits the unpatched residual
vulnerability in
MS03-032.

Information regarding this can be found here.
http://vil.nai.com/vil/content/v_100719.htm and
http://securityresponse.symantec.com/avcenter/venc/data/tr
ojan.qhosts.html

The removal tool for this trojan is available here:
http://securityresponse.symantec.com/avcenter/venc/data/tr
ojan.qhosts.removal.tool.html

The bug sets all search values to google. You may wish to
change your
configuration on your Internet
Explorer search settings as desired, if you don't want
google.

To prevent this exploit, install the critical update
described by
bulletin MS03-040 and KB828750. To test your browser
vulnerability to
this exploit, see http://www.secunia.com/MS03-032/.



--
Gary Tsang
Microsoft MVP - Windows XP Shell/User

Hey,

I'm not sure if this is the right group, most of the
groups said they are not available when I tried to load
them, but here's my problem. Recently, when I am at a
search page (yahoo, msn, google) and I try to search
something, I get an error that the page cannot be found.
It only happens when I'm at a search page trying to
search for something. Does anyone know how to fix this?
I don't recall changing any settings on my computer.

..

 

[Mike]

I found the problem. Apparently is was all caused by the
virus. I was looking at the manual removal and noticed
it said to check the hosts file on my computer for
certian entries (which are at the symantec site). I
guess the tool doesn't remove them, or at least didn't
for me.

 

[aravind]

If you have a fix on the issue do kindly share in detail the procedure involved.

You have mentioned in a different ng also that you have fixed it without any
details

cheers.