searche engines google-yahoo-msn,...etc

From: Raymond TAN (raymond.tan_at_wanadoo.fr)
Date: 10/05/03 

Date: Sun, 5 Oct 2003 19:54:42 +0200

hello,
I don't know if this is the right group to post (sorry to all if it isn't n
thks a lot to any who could re-direct me to the right group ):

My problem :
I have a google bar installed in IE. The google bar has become so much a
part of IE that I was surprised when I had a message apparently from the
google site when i used the google bar recently which informed me that a
malicious programme has been installed in my pc which prevented me from
getting to the google site and use its search facilities. The page went on
to explain how I should proceed to neutralise the malicious programme : edit
the host file at : ...\windows\system32\drivers\etc\host and delete all
lines containing "google".

Effectively, the host file did contain the following entries :

127.127.127.127 elite
64.191.59.85 www.google.com
64.191.59.85 google.com
...
64.191.59.85 other-popular-search-engine-sites.com

and yet many more entries containing "google " , "msn", "yahoo" urls all of
which are directed to 64.191.59.85

I deleted all entries - in fact I changed the name of the file in order to
neutralise it.

It worked at first but not for long. I'm now getting systematically the same
message :
----------------------------------------------------------------------------
----------------------------------------------------------------------------
Are you looking for a search engine?
If you are seeing this page, it is because you have downloaded a malicious
program that is keeping you from visiting the page you intended.

Please visit the following URL for information on fixing this problem:

http://www.tweakxp.com/forum/forum_posts.asp?TID=3367
----------------------------------------------------------------------------
----------------------------------------------------------------------------
-
- even if I type the full url in the addresse field of IE and not in the
google search field. I get the same message when I type the yahoo url, etc..

I have an anti-virus and a personnal firewall. I ran anti-spyware programmes
(ad-aware and Spybot). All to no effect. Please help. Thanks to all.

Relevant Pages

  • Re: Google sponsored links problem (resolved)
    ... The error Message "Internet Explorer cannot display this page". ... The address bar is always prefaced with the Google address and then linking to the advertiser. ... Changing the HOST file back to the original fixed the link problem. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: sending mail from sendmail is very slow!!!!
    ... I removed the entries from host file and put the google DNS IP addresses ... /name server entries in resolve.conf ...
    (RedHat)
  • Re: sending mail from sendmail is very slow!!!!
    ... on host file, DNS tries to get to google on 173.194.79.25/26 and finally ... We have static IP from the operator and DNS IP addesses were provided by ... A quick google to verify yields ... I was trying to sendmail to gmail account. ...
    (RedHat)
  • Re: weird software
    ... I would recommend using AdAware and Spybot Search and Destroy both. ... google problem though. ... to google fine and it will re-write its entry into the host file. ...
    (microsoft.public.security)
  • Re: getting error in wsh code
    ... > Here's a .vbs file to toggle the display of the Google toolbar in the IE ... > HiddenGoogle = WshShell.RegRead ... you can simply use the initial array element and XOR it (which ... "displayed.")), vbOkOnly, "Google Bar Setting" ...
    (microsoft.public.scripting.vbscript)