From: David Kaye on 20 Apr 2010 05:11 "Erehwon" <invalid(a)address.here> wrote: >Unfortunately, problem remains. Found that if I do an "ipconfig /renew" >from command prompt the problem goes away for a short time but then returns. To me this sounds like your modem or even your ISP is compromised. Wow.
From: Virus Guy on 20 Apr 2010 08:49 Erehwon wrote: > > When trying to go to my home page, my.yahoo.com, I started > > getting a GoDaddy.com page instead. Same problem if I pick > > the My Yahoo link from the main Yahoo.com page. > > Unfortunately, problem remains. Found that if I do an > "ipconfig /renew" from command prompt the problem goes > away for a short time but then returns. > Also discovered that problem occurs with other web sites such > as Google. If I do a Google search, for example, some of the > links will work fine others return a GoDaddy page. 1) You still have malware on your PC. Remove the harddrive and connect it as a slave to a second (trusted) PC and scan the drive with AV software on the second PC. 2) If you don't do (1), then check the hosts file for tampering. 3) Hardcode your DNS entry on the PC in question. Go to your TCP/IP properties and set the DNS to 4.2.2.2. That will bypass any dynamic DNS assignment that you're getting from your ISP or your modem/router. Your modem/router may have been infected with something.
From: gufus on 20 Apr 2010 19:54 Hello, Virus! You wrote on Tue, 20 Apr 2010 08:49:39 -0400: VG> 2) If you don't do (1), then check the hosts file for tampering. I'd set the HOSTS file to READ-ONLY too.. -- With best regards, gufus. I-mail: stop.nospam.gbbsg(a)shaw.ca
From: David H. Lipman on 20 Apr 2010 20:01 From: "gufus" <stop.nospam.gbbsg(a)shaw.ca> | Hello, Virus! | You wrote on Tue, 20 Apr 2010 08:49:39 -0400: VG>> 2) If you don't do (1), then check the hosts file for tampering. | I'd set the HOSTS file to READ-ONLY too.. Worthless proposition as it is a waste of time. Any software can change the attribute back to Read/Write. Next... -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
From: gufus on 20 Apr 2010 14:07
Hi David, Tuesday April 20 2010, David H. Lipman writes to All: VG>>> 2) If you don't do (1), then check the hosts file for VG>>> tampering. >| I'd set the HOSTS file to READ-ONLY too.. > Worthless proposition as it is a waste of time. Any > software can change the attribute back to Read/Write. I guess. > Next... Hahaha... -- K Klement Enhance your marketing at http://www.gypsy-designs.com mailto:info(a)gypsy-designs.com Gypsy Designs Fax: (403) 242-3221 .... We scheduled a meeting of the minds; his didn't show up. |