Text 67284, 58 rader
Skriven 2011-12-06 19:10:13 av Alan Zisman (1:123/789.0)
Ärende: re. Security Help Wanted
================================
04 Dec 11 16:57, you wrote to All:

 AZ> I've got a friend who runs an older (early P4 I think, with about 1 GB
 AZ> RAM) WinXP Home system...

 AZ> He's having an odd-seeming issue: he can't get to multiple web
 AZ> addresses - ebay.com, for instance - typing www.ebay.com in the
 AZ> address bar goes to a Google search; clicking on a link to eBay then
 AZ> gets to a 'Page not Found' error message. As a test, we typed 'tree
 AZ> pruning' into Google - he could then go to most of the links - but
 AZ> several again led to the 'Page not found' error.

 AZ> He was using IE 7 - I upgraded him to IE 8 with no improvement and
 AZ> downloaded and installed Chrome, which had exactly the same issues.

 AZ> His security software (a version of F-Protect provided by his ISP)
 AZ> claims to be enabled and up to date - and the IE 8 installation
 AZ> claimed to scan for malware prior to installing... presumably without
 AZ> issue.

> 1. Install and run
> Malwarebytes Antimalware
> Kaspersky's TDSKiller

Done - Malwarebytes found and removed 8 things; TDS Killer crashed repeatedly,
but finally ran to completion and reported no problems.

> 2. Check his DNS settings in his Networking stack.

What should I have been looking for with this? Hmmm... perhaps I'll go back and
re-set to the OpenDNS IP addresses.

> 3. Look at his HOSTS file, usually located:
> c:\windows\system32\drivers\etc

> His host file should have only one uncommented line referencing the >
localhost setting.

Looked OK to me....

> What you are describing seems to me to smell of malware..

> Of course if he wants to be real safe, tell him to copy his data off >
somewhere safe and do a factory recovery.

I also tried System Restore - he claimed the problems were about 1-2 weeks old,
so I restored first to a Nov 6 and then Oct 6 restore point - neither made any
difference to his issues.

I'll see if I can get him to do check/change the DNS settings - then if that
doesn't help, I'll help him inventory the software he actually uses, check that
he can find the install discs for it all, then backup and reinstall from
scratch...

Unless something else to try comes to mind!

--- Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:7.0.1) Gecko/20110929 Thund
 * Origin: Fidonet Via Newsreader - http://www.easternstar.info (1:123/789.0)