Forum Moderators: open

Message Too Old, No Replies

Google Scam? Yahoo Etc.

         

raveon

1:59 am on Sep 13, 2003 (gmt 0)

10+ Year Member



The other night I was browsing several sites to find information regarding creating high quality DVDs. Along the way, upon exiting a site, several popups appeared (which I closed).

Later on that evening I opened a new browser session and my normal default home page had been replaced by another wbsite that was a "portal" to all of the major search engines. I assumed one of the popups had run a "make me your home page" type script and reset my default home page so I simply changed it back to http:// www.google.com.

I make a fair amount of revenue from [google.com...] program (thanks to what I've learned form this forum <g>) but I could never bring up that page, i just received a "page not found" error... this seemed odd. I tried from a different computer and could find the page no problem.... definitely something weird here.

It appears that this script also rewrote the "host" file on my computer so that every major search engine was listed but the correct IP had been replaced by theirs.

www.google.com
google.com
www.altavista.com
altavista.com
search.yahoo.com
uk.search.yahoo.com
ca.search.yahoo.com
jp.search.yahoo.com
au.search.yahoo.com
de.search.yahoo.com
search.yahoo.co.jp
www.lycos.de
www.lycos.ca
www.lycos.jp
www.lycos.co.jp
alltheweb.com
web.ask.com
ask.com
www.ask.com
www.teoma.com
search.aol.com
www.looksmart.com
search.msn.com
ca.search.msn.com
fr.ca.search.msn.com
search.fr.msn.be
search.fr.msn.ch
search.latam.yupimsn.com
search.msn.at
search.msn.be
search.msn.ch
search.msn.co.in
search.msn.co.jp
search.msn.co.kr
search.msn.com.br
search.msn.com.hk
search.msn.com.my
search.msn.com.sg
search.msn.com.tw
search.msn.co.za
search.msn.de
search.msn.dk
search.msn.es
search.msn.fi
search.msn.fr
search.msn.it
search.msn.nl
search.msn.no
search.msn.se
search.ninemsn.com.au
search.t1msn.com.mx
search.xtramsn.co.nz
search.yupimsn.com
uk.search.msn.com
search.lycos.com
www.lycos.com
www.google.ca
google.ca
www.google.uk
www.google.co.uk
www.google.com.au
www.google.co.jp
www.google.jp
www.google.at
www.google.be
www.google.ch
www.google.de
www.google.dk
www.google.fi
www.google.fr
www.google.com.gr
www.google.com.hk
www.google.ie
www.google.co.il
www.google.it
www.google.co.kr
www.google.com.mx
www.google.nl
www.google.co.nz
www.google.pl
www.google.pt
www.google.com.ru
www.google.com.sg
www.google.co.th
www.google.com.tr
www.google.com.tw
google.at
google.be
google.de
google.dk
google.fi
google.fr
google.com.hk
google.ie
google.co.il
google.it
google.co.kr
google.com.mx
google.nl
google.co.nz
google.pl
google.com.ru
google.com.sg
www.hotbot.com
hotbot.com

Once you have been directed to their website (when you type in www.google.com for example) you are immediately forwarded to Google or whatever SE domain you entered). I imagine they must make some revenue from this. If Google Guy is around he should be informed.

I will also try to email Google.

To find out if you have been hit you can ping Google and check the IP (it should be 216.239.57.99)

To remedy the situation you can just delete the host file and another (empty one) is created by windows.

Interesting info regarding DNS cache and XP can also be found here [windows-help.net...]

David

mack

2:57 am on Sep 13, 2003 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



Thats quite a nasty host file. I think (although I may be wrong) in order to alter the host fle I think this would have to be done through an installer script. It is possible that you may have downloaded a piece of software and when you installed it, it may have came with this new file? Have you ran an installer recently?

Mack.

richardb

3:46 am on Sep 13, 2003 (gmt 0)

10+ Year Member



What's the URL?


Hey Mack what you doing up at this hour :)

Rich

donferguson

4:00 am on Sep 13, 2003 (gmt 0)

10+ Year Member



I have same problem but only google.

We have a internet terminal for public use in a our cafe.
and a couple of weeks ago google would only show up as 404
So I checked all 10 data centers and the 3 www and all showed 404 error.
checked msn, fast etc all worked ok.
so I thought google must have been down.
checked on my phone computer and google worked fine.
I have checked browser settings on cafe computer and nothing their to stop google.
To this day still cant get google on cafe computer.
any advice would be much appricated.

PsI did post message before about this problem but it wasnt posted
regards
Don

GoogleGuy

4:26 am on Sep 13, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Scumware, plain and simple. We've seen software hijack the hosts file and hardwire Google, Yahoo, etc. to their IP address. Then the scumware guys show pop-ups etc. on that IP address. Get yourself a recent copy of Spybot. Good luck getting rid of that junk!

oodlum

5:01 am on Sep 13, 2003 (gmt 0)

10+ Year Member



Sounds like something Penna, Osborn and Smith would come up with.

GoogleGuy

6:34 am on Sep 13, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



More like Dewey Cheatham and Howe. ;)

percentages

6:51 am on Sep 13, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



M$ need to get their act together and release a version of Windows and IE that is "scumware" safe. These problems are costing the US and World economy a fortune in support time and lost user time.

I'm a big fan of M$.....but in this area they have dropped the ball.....get it together M$, you are not behaving responsibly in this regard!

Powdork

6:53 am on Sep 13, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I am also unable to bring up Google Adsense page on my computer at home. It works fine with the wifes (behind same firewall, same ISP) and works fine on mine with Opera instaed of IE. I'm not having any of the other problems though. The only alteration I have made with the hosts file is to send toolbarqueries to a different datacenter.

(as an aside GoogleGuy, I just saw some newhoo listings make it into the results again. I sent in a report through the dissatisfied with results form.)

eduardo

8:01 am on Sep 13, 2003 (gmt 0)

10+ Year Member



Make yourself a favor and install Mozilla Firebird and forget about IE.

killroy

9:36 am on Sep 13, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Yeah, using mozilla myself, I look at all they reports and complaints with mild amusement, similarly to the feelin about common viruses ifyou have autoupdate running 24/7, or if your ISP has a good spam filter at th mail server, and you don't understand what falks mean by having their mailbox overloaded with spam.

SN

julinho

11:57 am on Sep 13, 2003 (gmt 0)

10+ Year Member



Something which might help is NOT to use your machine as an admin user; only admin users can change important files, such as the hosts file (at least, thatīs the case with my Win2K Pro machines).
It takes some minutes to change the toolbar IP every month or so, but it makes it more difficult for the scumwares to affect you.