Re: 32.welchia and symantec problems

From: Greg Kujawa (anonymous_at_discussions.microsoft.com)
Date: 04/27/04


Date: Tue, 27 Apr 2004 06:31:04 -0700

The problem navigating you are experiencing is due to the fact that the worm redirected Internet site addresses to your local IP. If you look in your local HOSTS file you will see things like www.symantec.com 127.0.0.1. This means that any attempts to get to sites like this will just point back to your box and therefore fail.

Look under c:\winnt\system32\drivers\etc\ for the HOSTS file. Delete all of these bogus entries and you'll be fine. This is a lot quicker and easier than wiping out the OS and reinstalling from scratch!



Relevant Pages

  • Re: Google Warning...
    ... Michael Pelletier wrote: ... Currenly using Firefox. ... It probably has bogus entries in it... ... ..an easy test to see if it is your hosts file type: ...
    (alt.computer.security)
  • Re: Google Warning...
    ... > Michael Pelletier wrote: ... It probably has bogus entries in it... ... > If you go to google without any problems ... > then you have bad entries in your hosts file. ...
    (alt.computer.security)
  • Re: dns cache problem. sasser virus may have caused this.
    ... >Did you check for a rogue HOSTS file? ... Checked teh lmhosts and hosts files. ... bogus entries. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Winterizing The Hangar
    ... Wiping the Hard Drive... ... but sometimes it's quicker to just use your ... fingers ...eeew. ... Please don't tell me you are out of toner! ...
    (rec.aviation.owning)
  • Re: Winterizing The Hangar
    ... Paul's keyboard is full of #1s and #2s ... Wiping the Hard Drive... ... but sometimes it's quicker to just use your ... fingers ...eeew. ...
    (rec.aviation.owning)