Google where is it?And Yahoo search?

**Maggy** · 06-10-2003, 00:51

The only search site that is working is Ask Jeeves.It's been like this for 3 days now.Can anyone shed any light on this?The only Google I can get is Images search and that's through Ask Jeeves.Otherwise all I get is The Page Cannot be Displayed page.Yes I know Ask is ok but it's not as thorough as Google.

Has anyone else got this problem?

Incog.

imback · 06-10-2003, 00:53

Quote:

Originally Posted by Incognitas

The only search site that is working is Ask Jeeves.It's been like this for 3 days now.Can anyone shed any light on this?The only Google I can get is Images search and that's through Ask Jeeves.Otherwise all I get is The Page Cannot be Displayed page.Yes I know Ask is ok but it's not as thorough as Google.

Has anyone else got this problem?

Incog.

I can use them both fine, have heard someone else say the same thing about google, something to do with NTL's DNS problem maybe?

As a side note, I heard someone mention today there is some virus or worm that is specify odd dns servers on MS machines? Anyone got any more info on this?

keithwalton · 06-10-2003, 02:09

it could be a dns problem with ntl, or you could of caught the recent virus which messes with dns settings, one of my housemates caught it the other day and it caused a fair amount of nusance trying to work out what it was, as it couldnt get to most sites they were resolving wrong even though we have a dns server on our house network which my computer was using fine.

hth

K

**Maggy** · 06-10-2003, 09:41

Quote:

Originally Posted by keithwalton

it could be a dns problem with ntl, or you could of caught the recent virus which messes with dns settings, one of my housemates caught it the other day and it caused a fair amount of nusance trying to work out what it was, as it couldnt get to most sites they were resolving wrong even though we have a dns server on our house network which my computer was using fine.

hth

K

So how would one know if one had this virus?What would be the solution?

I doubt that I do have it though as I can get to all other sites with no problems.

Incog.

iadom · 06-10-2003, 12:37

Quote:

Originally Posted by Incognitas

So how would one know if one had this virus?What would be the solution?

I doubt that I do have it though as I can get to all other sites with no problems.

Incog.

This is the virus being referred to,
http://forum.nthellworld.co.uk/showthread.php?t=3141

**Maggy** · 06-10-2003, 13:07

Quote:

Originally Posted by iadom

This is the virus being referred to,
http://forum.nthellworld.co.uk/showthread.php?t=3141

Well none of the info is of any use to me because that gives advice for XP and I'm ME.

However if I ping google I get

C:\WINDOWS> ping www.google.com

Pinging www.google.com [207.44.220.30] with 32 bytes of data

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 207.44.220.30:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\WINDOWS>

So maybe I do have it as I note the [207.44.220.30] is the same as in
MovedGoalPosts posting in that thread.Hmm!

**My AV supplier www.pandasoftware.co.uk doesnt list that name. They do however show a similar effect virus detected a few days ago

Trojan:HATOY.A

It too changes the DNS settings although the address given is different: 207.44.220.30**

I wonder what to do now.

Incog.Off to run AV.

imback · 06-10-2003, 13:14

Have you tried specifying a proxy server?

**Maggy** · 06-10-2003, 13:41

Quote:

Originally Posted by imback

Have you tried specifying a proxy server?

No.
I was having problems last week because my browser couldn't detect proxy settings for any site over 3 minutes so I was advised to untick the automatically detect settings box after which I was able to connect straight away.However even reticking the box doesn't sort the problem.

And my AV has fouind nothing.

Incog.

Paul K · 06-10-2003, 13:56

Did you update your virus definitions before running your AV scan Incog and what AV are you running?

Paul K · 06-10-2003, 14:03

http://securityresponse.symantec.com...oval.tool.html might help you out if it is the QHost virus

**Maggy** · 06-10-2003, 14:04

Quote:

Originally Posted by Paul

Did you update your virus definitions before running your AV scan Incog and what AV are you running?

Yes I did.I update every 4 hours if I'm online and once every day if I'm not.

I'm using Esets Nod32.It's caught everything so far.

http://www.esetsoftware.co.uk/

Incog.

Paul K · 06-10-2003, 14:12

Did you try that removal tool just in case? Don't forget to turn off system restore before you run it or the virus may stay in your restore files.

**Maggy** · 06-10-2003, 14:32

Quote:

Originally Posted by Paul

Did you try that removal tool just in case? Don't forget to turn off system restore before you run it or the virus may stay in your restore files.

Yes and it wasn't on my system.Thank you anyway.

Back to the drawing board.

Incog.

**Maggy** · 06-10-2003, 20:41

Well after a Spybot seach and destroy session I have Yahoo back but not Google.Found two bots that were redirecting .One was for MSN search and the other was for Google search .Sorting them out hasn't really resolved anything much apart from Yahoo.

The thing is I'm not sure that it is a DNS trojan as identified in that other thread.After those are supposed to redirect the browser to another page but all I get is the Page not found.

Weird.Never mind I can live without Google if I still have Lycos or Yahoo.

Thank you to everyone who tried to help.

Incog.

Paul K · 06-10-2003, 23:59

Some trojans redirect to a page some are coded to redirect to a non-existant page or one that has since been closed down.
Only thing I can sugest is to make sure your spybot is fully updated, if it found them it should have removed them. There is one that re-installs itself if not fully removed properly, have posted this in your thread on .com
Try a search for bootconf.exe on your PC if you have it you need a tool to rip it out as it re-installs the trojan.