Google Happenings On my Machine

Whoa! get this, one sunday afternoon, I was minding my own business getting ready to start a quick project but I wanted to check my code against others. So, what I did was simply type google.com into my address bar hit enter and waited......Nothing seemed to happen so I tried it again.....and again. Well to my dismay nothing happened. I then typed in other site addy's and they popped up fine. Now I was really annoyed, what could it be so, the annoyed me tried it one more time. Then I decided to look at my

\SYSTEM32\DRIVERS\etc\hosts

sure enough, google.com and about 90 other names in reference to google was there like googe.uk and google.ru. I deleted every entry there was with google.something saved it and tried google.com in the address bar again and viola, like nothing happened it pop up in my browser I once again felt complete.

Hope none of you had this problem.

Adiz

A variant of this issue? http://www.antionline.com/showthread...hreadid=249171

where did the google.uk and junk comefrom?...im lost...why wouldnt your browser goto it?

if you are running W2K and go to \SYSTEM32\DRIVERS\etc\hosts and open the file with notepad you will find something like this:

Quote:

---

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

---

Now, under your examples there may be a list of internet address the address listed here are blocked from your machine. So lets say I have yahoo.com there, I would not be able to access yahoo.com untill I completely removed the line. This can also be good for things, such as popups http://www.antionline.com/showthread...readid=249692.

Sometimes you get addy's sent to this file from malicious code. In this case it was google.com and all of googles affiliates so I am guessing the code added a bunch of other google.whatever names to it also.

Adiz

OHhhhhhhh...and how did you fix it?....just delete the extra cookies?

adiz../Irish did you read the thread MsMittens put there for you ?
it's the Qhosts trojan.. the latest 040 patch from MS will prevent it from happening again.
just take out the entries.. and open google and type in Qhosts.. read..

dont dell this file...... it is dangerus...... just dell the line there

will do

Quote:

---

Originally posted here by maxim_86ualb2
dont dell this file...... it is dangerus...... just dell the line there

---

Why is it dangerous to delete the hosts file? If your system is configured correctly it will use DNS if it cannot find the host in the hosts file (or if it doesn't exist).