;/ Trojen or virus blocks search engines....
Saturday, October 4, 2003 by goodmorphing | Discussion: WinCustomize Talk
I had been having trouble typing in a search in the address bar and stumbled on this... http://groups.msn.com/communityfeedback/general.msnw?action=get_message&ID_Message=512442&ShowDelete=0&CDir=-2
...but a search of my host files doesn't show google at all. I am running an online scan, my regular friday Norton scan finished with no results.
:/ I did look up and install two new critical updates..
Has anyone here had troubles?
it seems like there is at least one new virus, or trojen, or worm every few days anymore..... ***Sigh***
Remember the good ol days when the internet was free and fun?
[Message Edited]
...but a search of my host files doesn't show google at all. I am running an online scan, my regular friday Norton scan finished with no results.
:/ I did look up and install two new critical updates..
Has anyone here had troubles?
it seems like there is at least one new virus, or trojen, or worm every few days anymore..... ***Sigh*** Remember the good ol days when the internet was free and fun?
[Message Edited]
EventHorizon
Reply #3 Saturday, October 4, 2003 1:22 AM
Reply #3 Saturday, October 4, 2003 1:22 AM
Yikes... The fake greeting card thingy mentioned in link #1 sounds scary.
goodmorphing
Reply #4 Saturday, October 4, 2003 1:23 AM
Reply #4 Saturday, October 4, 2003 1:23 AM
...hehe..... the one place Jafo can't put his little man......
I'm so bleary eyed from looking through my host files.... I had added a LOT of them, like thosands.
I'm so bleary eyed from looking through my host files.... I had added a LOT of them, like thosands.
EventHorizon
Reply #5 Saturday, October 4, 2003 1:25 AM
Grrr... The link in POST #1
Reply #5 Saturday, October 4, 2003 1:25 AM
| The fake greeting card thingy mentioned in link #1 sounds scary |
Grrr... The link in POST #1
EventHorizon
Reply #6 Saturday, October 4, 2003 1:27 AM
Reply #6 Saturday, October 4, 2003 1:27 AM
Perhaps you could try another search engine? (Alltheweb.com works well)
goodmorphing
Reply #7 Saturday, October 4, 2003 1:29 AM
Reply #7 Saturday, October 4, 2003 1:29 AM
Well, that application restored it. Apparently, some variants of the thing block ALL searches... and who knows what else.
[Message Edited]
[Message Edited]
goodmorphing
Reply #8 Saturday, October 4, 2003 1:31 AM
Reply #8 Saturday, October 4, 2003 1:31 AM
I can find the host files again. They were great.
goodmorphing
Reply #10 Saturday, October 4, 2003 1:37 AM
Reply #10 Saturday, October 4, 2003 1:37 AM
Honolulu, two blocks from Ala Moana, one block from the convention center. My lanai overlooks the Daiei parking lot, and to my left is BlockBuster video.
I was wondering about you.... Punahou student?
I was wondering about you.... Punahou student?
EventHorizon
Reply #11 Saturday, October 4, 2003 1:44 AM
Reply #11 Saturday, October 4, 2003 1:44 AM
Actually, Im homeschooled. 
We're up on Tantulus...
We're up on Tantulus...
goodmorphing
Reply #12 Saturday, October 4, 2003 1:48 AM
Reply #12 Saturday, October 4, 2003 1:48 AM
...ahhhh you are very lucky. I want to move back into Manoa or at least upper Makiki where it is green.
One time we were walking up there and the man who started "Shuman Carriage' or something like that gave us some water. So clean and good smelling up there. We found lots of passion fruit. and guava. (and also mosquito's)
One time we were walking up there and the man who started "Shuman Carriage' or something like that gave us some water. So clean and good smelling up there. We found lots of passion fruit. and guava. (and also mosquito's)
EventHorizon
Reply #13 Saturday, October 4, 2003 1:51 AM
Oh yes, LOTS of mosquitos.
Reply #13 Saturday, October 4, 2003 1:51 AM
| (and also mosquito's) |
Oh yes, LOTS of mosquitos.
goodmorphing
Reply #14 Saturday, October 4, 2003 1:59 AM
Reply #14 Saturday, October 4, 2003 1:59 AM
...I remember the news story a few years back of a house there on fire. The firetrucks were slow getting there and water was stored in towers on a dry summer. The home owners were flying back to Honolulu and were greeted in the air by the sight of their home ablaze!
You guys still using water towers up there?
You guys still using water towers up there?
goodmorphing
Reply #15 Saturday, October 4, 2003 2:30 AM
Reply #15 Saturday, October 4, 2003 2:30 AM
http://www.accs-net.com/hosts/benefits_restrictions.html
That is where I found my host files!
That is where I found my host files!
Chris
Reply #16 Saturday, October 4, 2003 4:34 AM
Reply #16 Saturday, October 4, 2003 4:34 AM
I got hit by this the other day. It creates a new hosts file C:\windows\help\host in which all whole bunch of search sites are mapped to some ip address of a server that has since been taken down.
It also screws with the default search engine address that's used when type in keywords in the address bar. It also tries to screw with your dns server settings
Getting rid of the host file is easy (just delete it), but the annoying part is that it messes up some of your registry settings that are used to do the above.
Norton's anti-virus has an update to correct the above. For the trojan itself, Microsoft doesn't have a fix for it yet (or rather they had one but supposedly it doesn't completely work, and needs further tweaking by them)
Symantec has a page describing what it does
http://www.symantec.com/avcenter/venc/data/trojan.qhosts.html
though I thougth this page had a more detailed description of the changes:
http://www3.ca.com/virusinfo/virus.aspx?ID=37191
It also screws with the default search engine address that's used when type in keywords in the address bar. It also tries to screw with your dns server settings
Getting rid of the host file is easy (just delete it), but the annoying part is that it messes up some of your registry settings that are used to do the above.
Norton's anti-virus has an update to correct the above. For the trojan itself, Microsoft doesn't have a fix for it yet (or rather they had one but supposedly it doesn't completely work, and needs further tweaking by them)
Symantec has a page describing what it does
http://www.symantec.com/avcenter/venc/data/trojan.qhosts.html
though I thougth this page had a more detailed description of the changes:
http://www3.ca.com/virusinfo/virus.aspx?ID=37191
EventHorizon
Reply #17 Saturday, October 4, 2003 9:41 AM
Nope, the city water pipes only go so far up the mountain...After that, the houses stop for a while 'till it gets more green and lush.
If you're above that point, all of your water comes from your roof. (Then goes into a cistern and is filtered before your drink it/shower with it etc.) Which is great, 'coz you dont have to pay a water bill.
It usually rains a few times a week up here, so you almost never run out. (And if you do, you can call to have them truck it in)
Reply #17 Saturday, October 4, 2003 9:41 AM
| Response to 14 |
Nope, the city water pipes only go so far up the mountain...After that, the houses stop for a while 'till it gets more green and lush.
If you're above that point, all of your water comes from your roof. (Then goes into a cistern and is filtered before your drink it/shower with it etc.) Which is great, 'coz you dont have to pay a water bill.
It usually rains a few times a week up here, so you almost never run out. (And if you do, you can call to have them truck it in)
ama02
Reply #18 Saturday, October 4, 2003 12:34 PM
Reply #18 Saturday, October 4, 2003 12:34 PM
OT...
I grew up on the windward side...where there's more than enough water. 
I grew up on the windward side...where there's more than enough water. 
goodmorphing
Reply #19 Saturday, October 4, 2003 4:10 PM
Reply #19 Saturday, October 4, 2003 4:10 PM
Removal tool:
http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.removal.tool.html
http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.removal.tool.html
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
Reply #1 Saturday, October 4, 2003 1:20 AM
I couldn't find anything. http://www.spywareinfo.com/newsletter/archives/0903/30.php
this page has an application about a third of the way down Under the section "are you trying to find Google?" I ran it and asked it to reset host files to defaults (negating all the host files I have added). It worked. I will have to rebuild my host files though, my custom ones.
[Message Edited]