[punkboy15]

I have a problem connecting to certain websites. The computer has XP with SP3. It had a bunch of spyware on it which I am pretty sure is gone.

Now it will only connect to certain websites. If I type in the ip address of the website it works, I thought it was a dns problem. Hosts file is normal. I tried dns flush and still nothing. I also tried using opendns and still no luck.

I was going to try some other Virus/adware programs but none of them will update. I noticed Spybot S&D tried to connect to 127.0.0.o when it was trying to update.

[Kirok]

One of the easier ways to eliminate most things on the local computer is to restart into safemode with networking, try that see if it works then. If your using IE7 start it with no-addons.

http://www.malwarebytes.org/ has a good cleaner.

You could also try to telnet to the site

telnet <address> 80 [enter]
HEAD / HTTP/1.1 [enter] [enter]

Also try running one of the online scanners from safe mode

http://housecall.trendmicro.com/uk/
http://www.pandasecurity.com/activescan/index/
http://www.eset.com/onlinescan/
http://www.kaspersky.com/virusscanner

Apart from that take a look here http://forums.techguy.org/malware-re...st-before.html

[punkboy15]

I got it fixed. It was a trojan but nothing found it until I used a program I never heard of called unhackme.

I used Superantispyware, spybot s&d, webroot spysweeper, f-secure blacklist, avg, avast, malwarebytes, and none of them saw it. It was a huge PITA to update them manually after installing them.

When I ran ipconfig it showed mshome.net as the dns suffix which I thought was weird so I googled that and came across unhackme. It found a bunch of things that nothing else found.


Safemode w/networking would not work either.

Thanks for the help anyway.

[Kirok]

It was probably a rootkit then, good to know you got it fixed. Incidentally unhackme is a rather poor name for a security program, sounds like the sort of thing I'd expect to get something dodgy from.

Sysinternals have a decent rootkit detector also http://technet.microsoft.com/en-us/s.../bb897445.aspx I imagine there are others out there.