From: David Kaye on
"Erehwon" <invalid(a)address.here> wrote:

>Unfortunately, problem remains. Found that if I do an "ipconfig /renew"
>from command prompt the problem goes away for a short time but then returns.

To me this sounds like your modem or even your ISP is compromised. Wow.

From: Virus Guy on
Erehwon wrote:

> > When trying to go to my home page, my.yahoo.com, I started
> > getting a GoDaddy.com page instead. Same problem if I pick
> > the My Yahoo link from the main Yahoo.com page.
>
> Unfortunately, problem remains. Found that if I do an
> "ipconfig /renew" from command prompt the problem goes
> away for a short time but then returns.
> Also discovered that problem occurs with other web sites such
> as Google. If I do a Google search, for example, some of the
> links will work fine others return a GoDaddy page.

1) You still have malware on your PC. Remove the harddrive and connect
it as a slave to a second (trusted) PC and scan the drive with AV
software on the second PC.

2) If you don't do (1), then check the hosts file for tampering.

3) Hardcode your DNS entry on the PC in question. Go to your TCP/IP
properties and set the DNS to 4.2.2.2. That will bypass any dynamic DNS
assignment that you're getting from your ISP or your modem/router. Your
modem/router may have been infected with something.
From: gufus on
Hello, Virus!

You wrote on Tue, 20 Apr 2010 08:49:39 -0400:

VG> 2) If you don't do (1), then check the hosts file for tampering.

I'd set the HOSTS file to READ-ONLY too..


--
With best regards, gufus. I-mail: stop.nospam.gbbsg(a)shaw.ca


From: David H. Lipman on
From: "gufus" <stop.nospam.gbbsg(a)shaw.ca>

| Hello, Virus!

| You wrote on Tue, 20 Apr 2010 08:49:39 -0400:

VG>> 2) If you don't do (1), then check the hosts file for tampering.

| I'd set the HOSTS file to READ-ONLY too..

Worthless proposition as it is a waste of time. Any software can change the attribute
back to Read/Write.

Next...



--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


From: gufus on
Hi David,

Tuesday April 20 2010, David H. Lipman writes to All:

VG>>> 2) If you don't do (1), then check the hosts file for
VG>>> tampering.

>| I'd set the HOSTS file to READ-ONLY too..

> Worthless proposition as it is a waste of time. Any
> software can change the attribute back to Read/Write.

I guess.

> Next...

Hahaha...

--
K Klement

Enhance your marketing at http://www.gypsy-designs.com
mailto:info(a)gypsy-designs.com
Gypsy Designs Fax: (403) 242-3221

.... We scheduled a meeting of the minds; his didn't show up.