The domain "download.eset.com" is invalid.

[H47]

I can't download the NOD32 4 Beta. Because I get an error page saying:

The domain "download.eset.com" is invalid.

Is anybody else having the same problem?

[Kosak]

Hello, visit this (http://beta.eset.com/) page and download what you want. ;)

[H47]

{QUOTE-> Hello, visit this (http://beta.eset.com/) page and download what you want. ;) <-QUOTE}

I get the same error page saying:

The domain "beta.eset.com" is invalid.

[proactivelover]

no problem with http://beta.eset.com/

[CivilTaz]

Mmm, i think u got a virus that changed the hosts file, so u cant acces to any page that contains security software.

[xxJackxx]

{QUOTE-> Mmm, i think u got a virus that changed the hosts file, so u cant acces to any page that contains security software. <-QUOTE}

Yep, sounds like a virus or a DNS problem.

[Kosak]

If you have got a copy of ESET SysInspector on your HDD, create log and send it to me, please.

[xxJackxx]

If your internet mostly works otherwise, you could go to http://www.betanews.com/ and download it. At least then you could get a copy and run a scan.

[proactivelover]

{QUOTE-> If you have got a copy of ESET SysInspector on your HDD, create log and send it to me, please. <-QUOTE}
log's are always sent to support@eset.com for checking problem's or any virus infection
DO NOT SENT LOG'S TO ANY FORUM USER BECAUSE LOG'S CONTAIN YOUR OS PERSONAL INFORMATION

[Kosak]

I agree, but do you think that I am unreliable? In log you can't find "personal" information (family, money,...). But I don't want spamming...

[CivilTaz]

WOW, i didnt know OS personal information was too important or dangerous

[CivilTaz]

By the way, from my previous comment, i was just kidding, i know u cant do anything with the information from a log, so i dont know why proactivelover says to not send logs to other users.

[ronjor]

{QUOTE-> do you think that I am unreliable? <-QUOTE}It's not a question of reliability. Sysinspector was developed by ESET for use by the ESET moderators and developers to assist their customers.

The correct location to send a Sysinspector log would be to ESET and ESET only.

[H47]

{QUOTE-> If you have got a copy of ESET SysInspector on your HDD, create log and send it to me, please. <-QUOTE}

I just got back home.

Thank you for your responses everyone. :)

I'm going to download this program now and let you know what happens.

[H47]

None of the websites will allow me to download ESET SysInspector.

Every time I try to download the program, I get an error page saying:

Connection Interrupted

The connection to the server was reset while the page was loading.

The network link was interrupted while negotiating a connection. Please try again.

[Triple Helix]

Try a different Browser that may help!

http://www.eset.eu/download/beta

[ronjor]

How about here? (http://www.computersecurityassociates.com/downloads/downloads.htm)

[H47]

{QUOTE-> Try a different Browser that may help!

http://www.eset.eu/download/beta <-QUOTE}

Same thing happens when I use Internet Explorer. I get an error page saying:

Internet Explorer cannot display the webpage

[H47]

{QUOTE-> How about here? (http://www.computersecurityassociates.com/downloads/downloads.htm) <-QUOTE}

This link worked. Thank you ronjor. ;D

I now have the 4 Beta.

But now I have another problem. It won't update. I get an error message saying:

Virus signature database could not be updated
Update information is not consistent.

[ronjor]

I'm not sure about the update message. I haven't seen that particular error message myself.

Check any firewall settings you may use and be sure to remove any other antivirus software you may be using.

It's good to remember this is a beta release.

[H47]

{QUOTE-> I'm not sure about the update message. I haven't seen that particular error message myself.

Check any firewall settings you may use and be sure to remove any other antivirus software you may be using. <-QUOTE}

I have the Windows firewall disabled for the moment and I still can't update it.

I also removed all the other antivirus software beforehand.

[ronjor]

I wouldn't disable the Windows firewall.

Describe your operating system and any security programs you may be using or have used in the past.

[H47]

{QUOTE-> I wouldn't disable the Windows firewall.

Describe your operating system and any security programs you may be using or have used in the past. <-QUOTE}

Okay. I will re-enable the Windows Firewall.

I am using Windows XP Home edition.

* I have used AVG 8.0 but got rid of it when I found out that it doesn't have an anti-rootkit feature.

* I have used the trial version of Norton Internet Security 2009 and was very happy with it until it wouldn't load up anymore, nor update only a few days into the trial. So I had to delete it.

* I used Avast 4.8 antivirus but every time I would go on a message forum, I would read messages from people that NOD32 is a much better antivirus program. Which is why I am now trying out NOD32.

And I just currently am using a program called: Malwarebytes' Anti-Malware
because I can't connect to Windows Update.

Every time I try to connect to Windows Update, I get sent to the MSN website. On another message forum, I was told that I have viruses in my router and was instructed to download Malwarebytes' Anti-Malware.

And at this time, I am still working on getting rid of those viruses.

[ronjor]

I recommend you go to one of the forums listed in this post (http://www.wilderssecurity.com/showthread.php?t=42148) before going any further.

An expert on those can help you get rid of any malware on your computer, step by step.

It really does no good to download antimalware software without any expert opinions on the state of your system.

[H47]

{QUOTE-> An expert on those can help you get rid of any malware on your computer, step by step.

It really does no good to download antimalware software without any expert opinions on the state of your system. <-QUOTE}

Yes. Luckily I received step by step instructions. :)

I just need to convince the owner of the router to re-set it (the router).

[CivilTaz]

{QUOTE-> This link worked. Thank you ronjor. ;D

I now have the 4 Beta.

But now I have another problem. It won't update. I get an error message saying:

Virus signature database could not be updated
Update information is not consistent. <-QUOTE}

Maybe this can help u.
http://www.wilderssecurity.com/showthread.php?t=225730

[H47]

{QUOTE-> Maybe this can help u.
http://www.wilderssecurity.com/showthread.php?t=225730 <-QUOTE}

I wish.

But whenever I click on the link provided in that thread I get an error page saying:

The domain "u40.eset.com" is invalid.

[CivilTaz]

{QUOTE-> I wish.

But whenever I click on the link provided in that thread I get an error page saying:

The domain "u40.eset.com" is invalid. <-QUOTE}

If u mean this link http://u40.eset.com/download/engine4test/
its not a webpage, its a update server for nod32, u have to enter it manually in the update options.

[H47]

{QUOTE-> If u mean this link http://u40.eset.com/download/engine4test/
its not a webpage, its a update server for nod32, u have to enter it manually in the update options. <-QUOTE}


I entered it in, but I got an error message saying:

Can not connect to server.

[CivilTaz]

{QUOTE-> I entered it in, but I got an error message saying:

Can not connect to server. <-QUOTE}

Mmm, maybe u still have the problem with the hosts file, it blocks access to some ip's. U have to edit it, its located here Windows\system32\drivers\etc\
Open it with notepad and delete all the entries u'll see there, for example, mine only have this line

127.0.0.1 localhost

U can leave it blank if u want. Dont know if that's really the problem, but let's hope it can help u.

[H47]

{QUOTE-> Mmm, maybe u still have the problem with the hosts file, it blocks access to some ip's. U have to edit it, its located here Windows\system32\drivers\etc\
Open it with notepad and delete all the entries u'll see there, for example, mine only have this line

127.0.0.1 localhost

U can leave it blank if u want. Dont know if that's really the problem, but let's hope it can help u. <-QUOTE}

How do I go about accessing Windows\system32\drivers\etc\ ?

Do I use Windows Explorer ?

[CivilTaz]

Yep, system32 is a hidden system folder, so maybe u have to enable the option to see that folder.
U can make a manual search too, and look for that specific file.

[H47]

{QUOTE-> Yep, system32 is a hidden system folder, so maybe u have to enable the option to see that folder.
U can make a manual search too, and look for that specific file. <-QUOTE}

What part of the following should I delete?

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

[CivilTaz]

Ur hosts file seems fine. If that's all is inside the file, then that's not the problem. Are u still having the problems u had yesterday when trying to access those pages? If so, then is a DNS problem, but not with the hosts file, u said u could have problems with your router, what router is it?

[H47]

{QUOTE-> Ur hosts file seems fine. If that's all is inside the file, then that's not the problem. Are u still having the problems u had yesterday when trying to access those pages? If so, then is a DNS problem, but not with the hosts file, u said u could have problems with your router, what router is it? <-QUOTE}

Yes. I am still having the same problems.

I don't know the name of the router at this time. Because one of the guys who lives in the house owns the router and he is at work right now.

When he gets home, I'm going to ask him to re-set his router.

[CivilTaz]

Ok, but before reseting the router, u can try to access the pages in the other PC that is connected to the router, if u can access them from that computer then it's a problem in ur PC, if not, go ahead and reset it to see if that helps.

[H47]

{QUOTE-> Ok, but before reseting the router, u can try to access the pages in the other PC that is connected to the router, if u can access them from that computer then it's a problem in ur PC, if not, go ahead and reset it to see if that helps. <-QUOTE}

I just got into an argument with the person who owns the router. He doesn't trust my information and he made a threat against me. He told me that if something goes wrong then it's going to be on me and that I will have to pay for a new router. Well I don't have the money because I am on SSI. So I told him to just forget the whole thing.

So meanwhile, I can't update NOD32 4 Beta.

So I went around looking for another antivirus program that will let me update and I came across the online scan of Panda Antivirus. The online scan found over a hundred viruses on my computer but would not clean it up unless I paid 12 dollars.

So I got the idea of downloading the trial version. But now I ran into yet another problem. It's not in English. I can't find an English version of the program.

[doktornotor]

Well, you clearly have DNS issues that need to be solved (or your hosts file location has been changed from the standard one via some malware in registry). There's no point in messing with various download locations because your AV will NOT be able to update until you fix your DNS.

You can check for the actual location of HOSTS file that's being used by checking the following key via regedit:


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath


The REG_EXPAND_SZ value should read: %SystemRoot%\System32\drivers\etc

P.S. A reboot is required for the registry changes to take effect!

[H47]

{QUOTE->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath
<-QUOTE}

I can't find the DataBasePath part in my registry.

[doktornotor]

{QUOTE-> I can't find the DataBasePath part in my registry. <-QUOTE}

Shrug; so add the key? I can, that's all I can say here. You should also check your system with something like Dr. Web CureIT or whatnot as it can quite possible be infected with some kind of DNS hijacking trojan.

[H47]

{QUOTE-> Shrug; so add the key? I can, that's all I can say here. You should also check your system with something like Dr. Web CureIT or whatnot as it can quite possible be infected with some kind of DNS hijacking trojan. <-QUOTE}

I am in fact infested with the Trojan.DNSChanger.

[CivilTaz]

Good to hear u found the origin of the problem, i hope u can update nod32 now that u know what was the problem.

[ASpace]

{QUOTE-> I am in fact infested with the Trojan.DNSChanger. <-QUOTE}


The definitions that came with v4 are not so long . Could you please check if ESET now detects this trojan and if not send a copy of it to ESET Labs - samples@eset.sk

[H47]

{QUOTE-> Good to hear u found the origin of the problem, <-QUOTE}

Yeah. But I'm still totally screwed because there appears to be no way to get rid of the Trojan.DNSChanger unless the router is re-set. And like I said, the owner of the router doesn't want to do it. We had got into a fight about it.

I have spent the past couple of days trying to find a different way to go about without having to re-set the router, but nothing at all has turned up.

[CivilTaz]

{QUOTE-> I am in fact infested with the Trojan.DNSChanger. <-QUOTE}

Maybe the router is not the problem because u found the trojan in ur computer, so is more likely the problem is inside ur PC, another person had the same problem and it seems he could solve it using other tools

http://www.wilderssecurity.com/showpost.php?p=1353401&postcount=7

Maybe it can help u.

[H47]

{QUOTE-> Maybe the router is not the problem because u found the trojan in ur computer, so is more likely the problem is inside ur PC, another person had the same problem and it seems he could solve it using other tools

http://www.wilderssecurity.com/showpost.php?p=1353401&postcount=7

Maybe it can help u. <-QUOTE}

Thank you for the link. I looked at it, but it really didn't help me any because it didn't tell me how to go about deleting the items:

{QUOTE-> Much of what I did was manally delete files and change registry entries. <-QUOTE}

Delete what files?

Change what registry entries?

[ASpace]

Go and register in a forum providing malware cleanin services . They'll guide you to a way of eliminating any threats from your computer and the side effects . I'd recommend AumHa forums (http://forum.aumha.org)

[H47]

{QUOTE-> Go and register in a forum providing malware cleanin services . They'll guide you to a way of eliminating any threats from your computer and the side effects . I'd recommend AumHa forums (http://forum.aumha.org) <-QUOTE}

Thank you for the link. :)

I just registered and posted there.

[Marcos]

{QUOTE-> I am in fact infested with the Trojan.DNSChanger. <-QUOTE}

Please send a log from SysInspector to samples[at]eset.com with this thread's url in the subject.

[H47]

{QUOTE-> Please send a log from SysInspector to samples[at]eset.com with this thread's url in the subject. <-QUOTE}

I wish I could. But unfortunately I had to uninstall NOD32 several days ago. I didn't want to uninstall it. I like the program. But not being able to get any updates rather defeated the purpose of having it on the computer.

What I had to do was install a different antivirus program that would update (after a work-around that finally let me do it).

If I ever manage to get rid of the Trojan.DNSChanger, I will probably go back to using NOD32.

[H47]

{QUOTE-> Thank you for the link. :)

I just registered and posted there. <-QUOTE}

Thank you a zillion times over for the link. The tech guy who helped me over there really knows his stuff. He cured my computer. No more Trojan.DNSChanger. I can now get on Windows Update and all the antivirus websites. ;D

[Marcos]

{QUOTE-> Thank you a zillion times over for the link. The tech guy who helped me over there really knows his stuff. He cured my computer. No more Trojan.DNSChanger. I can now get on Windows Update and all the antivirus websites. ;D <-QUOTE}

You'd get the same result if you had sent a log from SysInspector to samples[at]eset.com as I advised before ;)

[CivilTaz]

{QUOTE-> Thank you a zillion times over for the link. The tech guy who helped me over there really knows his stuff. He cured my computer. No more Trojan.DNSChanger. I can now get on Windows Update and all the antivirus websites. ;D <-QUOTE}

It's good to hear that, maybe now can try NOD32 and see if it can avoid u a similar problem. Congrats.

[CivilTaz]

{QUOTE-> You'd get the same result if you had sent a log from SysInspector to samples[at]eset.com as I advised before ;) <-QUOTE}

Maybe he would, but i bet that not as fast as in a specialized forum. It would be a good idea from eset to have one.