I can only get to Google sites!!!!

[David W.E. Roberts]

Hi,

I currently have a problem where I can only browse Google sites.

The problem started with IE6 (I had Google toolbar installed, and also
possibly had the helper app. from MsgPlus installed - I had a blue toolbar I
couldn't get rid of which went to 'mysearchnow.com').

I could select the Google toolbar and deselect the blue toolbar, but next
time I started IE the blue toolbar was back.

As far as I can remember I uninstalled the Google toolbar then MsgPlus.

Anyway, now I can browse Google sites (.com, .co.uk etc) and search O.K.,
but IE6 will not allow me to browse any other site.

I downloaded Opera to see if it was an IE thing, but this browseer shows
exactly the same problem.

However I can 'telnet' to port 80 of a web site, and issue a GET command and
receive a response.

So what is going on?

I can't immediately see an obvious process which is hijacking all outgoing
traffic to port 80 (or incoming traffic to browsers) but something wierd is
happening.

I am running Win2K Professional, BTW.

I have run AdAware but this does not detect any spyware or malware.

TIA
Dave R

--

[siljaline]

On Wed, 1 Oct 2003 16:18:31 +0100, "David W.E. Roberts" <nospam@talk21.com> wrote:

>Hi,
>
>I currently have a problem where I can only browse Google sites.
>
>The problem started with IE6 (I had Google toolbar installed, and also
>possibly had the helper app. from MsgPlus installed - I had a blue toolbar I
>couldn't get rid of which went to 'mysearchnow.com').
>
>I could select the Google toolbar and deselect the blue toolbar, but next
>time I started IE the blue toolbar was back.
>
>As far as I can remember I uninstalled the Google toolbar then MsgPlus.
>
>Anyway, now I can browse Google sites (.com, .co.uk etc) and search O.K.,
>but IE6 will not allow me to browse any other site.
>
>I downloaded Opera to see if it was an IE thing, but this browseer shows
>exactly the same problem.
>
>However I can 'telnet' to port 80 of a web site, and issue a GET commandand
>receive a response.
>
>So what is going on?
>
>I can't immediately see an obvious process which is hijacking all outgoing
>traffic to port 80 (or incoming traffic to browsers) but something wierdis
>happening.
>
>I am running Win2K Professional, BTW.
>
>I have run AdAware but this does not detect any spyware or malware.
>
>TIA
>Dave R

Sounds like a Lop/C2 Media infestation 'mysearchnow.com'
SpyBot should get rid of it. http://security.kolla.de
If no joy, run "Hijack This" - http://www.spywareinfo.com/~merijn/files/hijackthis.zip
http://www.spywareinfo.com/~merijn/htlogtutorial.html

Post your logs, if you choose to run Hijack This, to http://forums.spywareinfo.com

HTH



--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

[David W.E. Roberts]

"siljaline" <siljaline@invalid.com> wrote in message
news:bo6mnvsrc3oqrsp3qt1v5jddq061ghstf6@4ax.com...
On Wed, 1 Oct 2003 16:18:31 +0100, "David W.E. Roberts" <nospam@talk21.com>
wrote:

<snip>

Thanks for all the good advice - it eventually turned out to be a router
problem.

I suspect that for some reason NAT got screwed for one PC but not for the
other.

I still can't understand why most things worked, including Google.

Unless it was a size thing - web pages with large graphics blowing a buffer
somewhere.

Cheers
Dave R

[Jan Schejbal]

Hi!
If you have DSL, you need to set up the MTU value correctly.
Jan

--
Use "FROM NG" in the subject of e-mail replies, please.
A filter deletes all mails without this string.
Bei e-Mail-Antworten bitte im Betreff "FROM NG" verwenden,
sonst wird die Mail ungelesen gelöscht!