explorer won't goto google / ebay / altavista

[davejam]

I have a machine that won't find the sites for

http://www.google.com

/ .co.uk and other sites such as ebay, altavista.

It will display other sites such as sony.com and everything else i've had a look at.

Other machines on my network can access google so i'm sure its a problem on the specific machine.

I have tried to clean it up with ad aware 6 and had a quick skit through with hijack this.

There are no restricted sites in explorer options and everything seems to be set up correctly.....

Any ideas?

cheers

daveJam

*Is this where we put the lonely hearts bit*

 

[bcastner]

Check your HOSTS file for bad entries relating to Google, etc.

The HOSTS file should be in %WINDIR%\system32\drivers\etc

You can use notepad to open the file.

 

[davejam]

Had a look at hosts, there was only one entry and that was 127.0.0.1 localhost.

Had a look through the other files in the same directory just tlo check for any reference to google, unfortunately nothing.

Any other ideas?

cheers for the help

daveJam

*Is this where we put the lonely hearts bit*

 

[Rached]

Hello there. i think there is one reason out of two for this problem, either a brower issue (restriced site) but since you say no, could be the other one, DNS entry. First flush you dns, from command prompt: ipconfig /flushdns
then try to do a ping for google to check if your machine can establish connection. If pinging works/and guess it will/ test your browers. Browersing didn't work, then some where the site is blocked/restricted.

 

[davejam]

I have flushed the dns and tested for viruses, checked the registry, scanned with ad-aware........

i can ping google and such like so its just a problem with explorer itself, it happens no matter whick user i log in as so its not any user specific settings.

I have checked the explorer options for restricted sites / restricted IP's and theres none, I can access google from any other machine on my network logged in under any user name.

really rather strange and unexplained.....

cheers for the help

daveJam

*Is this where we put the lonely hearts bit*

 

[YellowOnline]

Can you paste a hijack-this log? To me, it really sounds like your browser is hijacked. Check out your proxy settings. A spywareprogram might have proxied you in a way that those sites aren't found.

Peace,

Yellow

 

[davejam]

heres the hijack this file

Logfile of HijackThis v1.97.7
Scan saved at 13:39:06, on 03/06/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\System32\cisvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\INTEL\DSLSetup\ProDsl.exe
C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe
C:\WINDOWS\System32\JupitCo.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\Transparent Icon Labels\Transparent Icon Labels.exe
C:\Program Files\Common Files\Mobipocket Shared\webcomp.exe
C:\Program Files\Mindjet\MindManager 5\sys\PDF\ENU\W2K\PDFSaver.exe
C:\Program Files\Network Associates\PGPNT\PGPTray.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\INCRED~1\bin\ImApp.exe
C:\WINDOWS\System32\cidaemon.exe
C:\lifesup\HijackThis.exe

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DSL Connection Manager] C:\Program Files\INTEL\DSLSetup\ProDsl.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [USB SECURITY DEVICE CoInstaller] JupitCo.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM95\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Actual Transparent Windows] C:\Program Files\Actual Transparent Windows\ActualTransparentWindowsCenter.exe
O4 - HKCU\..\Run: [Transparent Icon Labels] "C:\Program Files\Transparent Icon Labels\Transparent Icon Labels.exe" 16777215
O4 - HKCU\..\Run: [Mobipocket Web Companion] C:\Program Files\Common Files\Mobipocket Shared\webcomp.exe -m
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: MindManager PDF Writer.lnk = C:\Program Files\Mindjet\MindManager 5\sys\PDF\ENU\W2K\PDFSaver.exe
O4 - Global Startup: PGPtray.lnk = C:\Program Files\Network Associates\PGPNT\PGPTray.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: AOL Instant Messenger (TM) (HKLM)
O14 - IERESET.INF: START_PAGE_URL=http://www.blueyonder.co.uk
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) -

http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) -

http://office.microsoft.com/officeupdate/content/opuc.cab

O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -

http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37670.3787615741

O16 - DPF: {A8482EAF-A1F3-4934-AE3F-56EB195A50BF} (DeskUpdateV3 - Activex Control) -

http://support.fujitsu-siemens.de/DeskUpdate/isapi/activex.cab

O16 - DPF: {A8658086-E6AC-4957-BC8E-7D54A7E8A78E} (SassCln Object) -

http://www.microsoft.com/security/controls/SassCln.CAB

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -

http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

O16 - DPF: {E82ED244-76EF-4D34-BDB3-AB21A522F38E} (webhelper Class) -

http://www.btconnect.com/public/home/download/btbconnectwebcontrol013.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{AF41F351-4D55-473E-82DD-A3BE89879B16}: NameServer = 10.0.0.2,10.0.0.1

Cheers

daveJam

*Is this where we put the lonely hearts bit*

 

[YellowOnline]

I don't really see anything suspicious in the log (well, except AIM and Incredimail, but that's your choice)... my only suggestion left is "try Bazooka" (

http://www.kephyr.com/spywarescanner/bazookasetup.exe)

Peace,

Yellow