Google Not Working

[RedRival]

Not my day today :( .

first, mirc doesn't dcc, then messenger doesn't log in, and now I can't get to google.com (any search engine doesn't work for that matter).


is there a reason behind why google.com and other search engines don't work all of a sudden??

i used anti-trojan and found that 1 port has been affected by netspy.

is that the reason why i cant access search engines??

[sharedholder]

I think your pc is already infected (http://www.klboard.ath.cx/index.php?showtopic=71406)

[RedRival]

i have an infected port

"port 1033 open. Possible trojan. NetSpy"
as stated on a search on anti-trojan.

however, anti-trojan just informs me about it, how do I fix this problem?

my problem again:

can't access google.com, yahoo.com works but when I try searching something it always freezes and evetually leads to a 'page not found' error.

[toddiscool]

Originally posted by RedRival@3 October 2003 - 03:58
i have an infected port

"port 1033 open. Possible trojan. NetSpy"
as stated on a search on anti-trojan.

however, anti-trojan just informs me about it, how do I fix this problem?

my problem again:

can't access google.com, yahoo.com works but when I try searching something it always freezes and evetually leads to a 'page not found' error.
Just change your DNS settings back to automatic.

[sharedholder]

Try this search engines (http://www.klboard.ath.cx/index.php?showtopic=66682&hl=)

[RedRival]

both of those search engines work, thanks.

google.com, yahoo.com, msn.com doesn't work though.

i'll try changing DNS setting if i knew how to.

under tcp/ip setting, switch to automatic right?

[toddiscool]

Originally posted by RedRival@3 October 2003 - 04:06
both of those search engines work, thanks.

google.com, yahoo.com, msn.com doesn't work though.

i'll try changing DNS setting if i knew how to.

under tcp/ip setting, switch to automatic right?
I can only assume that your ISP is automatice, 9 times out of 10 that is what it is. You will see a 67.XX.XX.XX ip there now right.

[RedRival]

Originally posted by toddiscool+3 October 2003 - 10:01--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (toddiscool @ 3 October 2003 - 10:01)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-RedRival@3 October 2003 - 03:58
i have an infected port

"port 1033 open. Possible trojan. NetSpy"
as stated on a search on anti-trojan.

however, anti-trojan just informs me about it, how do I fix this problem?

my problem again:

can&#39;t access google.com, yahoo.com works but when I try searching something it always freezes and evetually leads to a &#39;page not found&#39; error.
Just change your DNS settings back to automatic. [/b][/quote]
it&#39;s set to automatic.

using dsl, so under network connections>LAN>porperties>Internet Protocol(TCP/IP)>properties>Obtain DNS Setting automatically.

google.com still doesn&#39;t work.

[sharedholder]

Try this http://www.kartoo.com/

[toddiscool]

Originally posted by sharedholder@3 October 2003 - 04:10
Try this http://www.kartoo.com/
Off topic, but that is the coolest search engine ever.

[RedRival]

Originally posted by sharedholder@3 October 2003 - 10:10
Try this http://www.kartoo.com/
weird search engine. funny navigation.

but i asusme it&#39;s working because it gave me some results, although I don&#39;t coinsider them results, becasue I don&#39;t understand what links they are giving me

EDIT:

off-topic&#33; I wanna know how to make google.com work for me again.&#33;

[toddiscool]

I just posted this in the tread that shared linked you to too begin with but here you go. Change your DNS settings, if your ISP is not automatic, call them and find out what it is. Update your AV, boot into safe mode and run it. There you are. Or see removal instruction on norton.com

Edit: sorry missed your post on you sating that your DNS was alreaddy set to automatic, that is weird though because that is how the virus/worm/trojan that me and shared think that you have works.

[sharedholder]

Try to use google in italian language http://www.google.it/ for me works.

[RedRival]

Originally posted by sharedholder@3 October 2003 - 10:15
Try to use google in italian language http://www.google.it/ for me works.
nup doesn&#39;t work for me.

i just tried altavista, it doesn&#39;t work as well...

the NetSpy in open port 1033 is still bugging me, can someone please tell me how to remove it.

I don&#39;t have an offline AV, I use panda active AV scanner, but now it&#39;s not loading the necessary components correctly.

situation getting gloomy.

[toddiscool]

Originally posted by RedRival@3 October 2003 - 04:18
I don&#39;t have an offline AV, I use panda active AV scanner, but now it&#39;s not loading the necessary components correctly.

situation getting gloomy.
That is silly, but ok.

Manuall removal instructions from norton.

http://securityresponse.symantec.com/avcen...jan.qhosts.html (http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html)

or from mcafee

http://us.mcafee.com/virusInfo/default.asp...&virus_k=100719 (http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100719)

assuming that is what this is.

[sharedholder]

http://www.microsoft.com/technet/treeview/...us/VirusRAT.asp (http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/virus/VirusRAT.asp)

[RedRival]

AOLFIX.EXE-061AF28B.pf in C:&#092;WINDOWS&#092;Prefetch

definitely got infected, aolfix.exe is the exe that auto-runs.

[RedRival]

@toddiscool

i used the mcafee manual removal instructions...

but i can&#39;t seem to find the registry key "windows &#39;r0x&#39;".

[RedRival]

dumbest things I do...

I used jv16 powertools and search for all reg keys with "windows "r0x"" in it.

I came up with a few keys, because I was thinkign properly, I slected all and deleted them...

now windows doesn&#39;t boot...damned...

butim still wondering whether the booting has got anything to dowith the trojan or the reg keys i accidentally deleted?

EDIT:

yes, back on my comp.

i hit F5, selected &#39;last good configuration that works" and now everything seems to be fine, even google works great now.

weird. explanation anyone?

[RedRival]

google.com is working now, along with the other search engines that did not work earlier on.

problem is, since i used last configuration that worked option under f5 bootup selection, the reg items that I modified as stated on the mcafee website returned to its previous state, before i changed it.

even though it wroks fine now, i&#39;m still wondering whether the trojan is still on my comp.

[Icey]

get norton.. download latest defs.. and u&#39;ll soon see

[RedRival]

Originally posted by Icey@3 October 2003 - 13:27
get norton.. download latest defs.. and u&#39;ll soon see
Just downloaded NAV2k4 Pro and using it right now.

I think I got rid of the virus even before I had NAV2k4.

Sharedholder mentioned that the trojans:

Port 5000 open. Possible trojans. Sockets de Troie, Blazer 5
Port 5001 open. Possible trojans. Sockets de Troie

were RATS. I went to the Microsoft site above and it mentions that a good and updated AV program is the best way to get rid of this RATS.

Now I got nav2k4 and when I did a scan, no trojans were found, but I was already wondering whether nav2k4 even scanned ports at all. Since it looks as though it was scanning my hard-drive only.

Sure enuff, use anti-torjan and found out situation got even worse, now I got port 5001 infected as well. Had only 5000 infected only before.

NAV2K4 doesn&#39;t remove RATS, now what does???

[sharedholder]

http://www.anti-trojan.net/en/tec021114.aspx

[RedRival]

Originally posted by sharedholder@3 October 2003 - 14:08
http://www.anti-trojan.net/en/tec021114.aspx
thanks once again for that link sharedholder :lol:

but here&#39;s a question:

why is it that I never encountered trojans on this ports before only until today (or maybe a few days back)? I m pretty certain that I did not install any programs that could affect this or disable/enable any firewalls...

I never disabled uPNP but I never ecnountered that port trojan until today...
questions that I just haf to ask