Help!! Am I a Spam Zombie????

Discussion in 'other security issues & news' started by kayosnxs, Jul 3, 2004.

Thread Status:
Not open for further replies.
  1. kayosnxs

    kayosnxs Registered Member

    Joined:
    Jul 3, 2004
    Posts:
    3
    Hi,

    I'm looking for any and all help that I can get. Several days ago, I noticed that I could no longer do searches on Google, Yahoo and MSN. I tried Verizon (my ISP) and Lycos with no problem. It appears that I have been banned from these search sites and I don't know why. I checked Zone Alarm and noticed that a network had been allowed entrance to my computer (169.254.0.0 and 255.255.0.0). I tried to eliminate this network but was told I could not eliminate an active network. I also noticed in taskmanager.exe that a few network functions were present that were never there before. Also, when I start up my computer, windows firewall states that my automatic update feature is not working. I then open up windows firewall and it says that auto updates is working at which point I have just closed the window. This never occured before the last few days as well. It appears that some outside network has gained access to my computer and I don't know what to do.

    I reinstalled Zone Alarm, it caught the new network and asked me what I wanted to do....I asked to block it, but then I couldn't connect from any browser thru my ISP connection and the new network still showed up in the connections that were allowed by ZoneAlarm. I checked windows firewall to see if this network was being allowed thru and it didn't appear as if it was.
    Am I a spam zombie that has been banned from these search engines and how do I correct this problemo_O?
     
    Last edited: Jul 3, 2004
  2. snowbound

    snowbound Retired Moderator

    Joined:
    Feb 18, 2003
    Posts:
    8,723
    Location:
    The Big Smoke
  3. kayosnxs

    kayosnxs Registered Member

    Joined:
    Jul 3, 2004
    Posts:
    3
    Hi Snowbound,

    Thanks for the welcome!!

    I failed to mention that I did use Spysweeper, Adaware and Norton AV as well as Trojan Hunter in my quest to find out what's g0ing on. I did clear out some malaware but nothing out of the ordinary.

    Is there a site that I can check out to see if I'm on a blacklist for the search engines or is there an address at these sites to contact them??

    Thanks for any help that anybody can lend
     
  4. kayosnxs

    kayosnxs Registered Member

    Joined:
    Jul 3, 2004
    Posts:
    3
    well, I'm not a spam zombie after all!! I ran HiJack This! and found that my search pages were being diverted to a new host/dns. After eliminating the 3 entries that were hosts, the problem was solved.

    If this happens to anybody else, you can also fix it this way:

    run search for hosts and eliminate selectively, then run:

    ipconfig /flashdns

    then

    ipconfig /display dns


    that ought to do the trick!!!

    For what it's worth, I ran Norton AV and it's trojan Qhost tool DID NOT pick up this problem at all!! NAV is totallly up to date too!...Makes you wonder if this AV is all it's built up to be!!
     
    Last edited: Jul 4, 2004
  5. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Hi there, congrats with finding the trouble; did you post the Hijackthis log here, so we can see it with own eyes what exactly where and so we might be able to direct others too (in case they would have to wait for an expert)
     
Loading...
Thread Status:
Not open for further replies.