Unoffical empeg BBS

Quick Links: Empeg FAQ | RioCar.Org | Hijack | BigDisk Builder | jEmplode | emphatic
Repairs: Repairs

Topic Options
#182888 - 04/10/2003 17:56 Google down?
rob
carpal tunnel

Registered: 21/05/1999
Posts: 5335
Loc: Cambridge UK
Google seems to have gone down (or its DNS maybe) - there's a holding page from cPanel. First time I've ever seen it fail!

Rob

Top
#182889 - 04/10/2003 17:57 Re: Google down? [Re: rob]
pgrzelak
carpal tunnel

Registered: 15/08/2000
Posts: 4859
Loc: New Jersey, USA
I have the google task bar loaded on IE6, and I was just able to do a search.
_________________________
Paul Grzelak
200GB with 48MB RAM, Illuminated Buttons and Digital Outputs

Top
#182890 - 04/10/2003 17:59 Re: Google down? [Re: pgrzelak]
rob
carpal tunnel

Registered: 21/05/1999
Posts: 5335
Loc: Cambridge UK
Strange, I can't.

Rob

Top
#182891 - 04/10/2003 18:16 Re: Google down? [Re: rob]
g_attrill
old hand

Registered: 14/04/2002
Posts: 1172
Loc: Hants, UK
Sure you haven't got that QHost virus/trojan going around?

http://www.theregister.co.uk/content/56/33187.html

edit: Here's teh Symantec page - they have a fix tool:

http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html

I think the latest "Critical" update might fix the vulnerability too. Apparently a banner on a FortuneCity site has been spreading it.

Gareth


Edited by g_attrill (04/10/2003 18:19)

Top
#182892 - 04/10/2003 22:38 Re: Google down? [Re: g_attrill]
ninti
old hand

Registered: 28/12/2001
Posts: 868
Loc: Los Angeles
Yep, that almost certainly is it. We got a bunch of people at my work hit by it as well.
_________________________
Ninti - MK IIa 60GB Smoke, 30GB, 10GB

Top
#182893 - 05/10/2003 05:53 Re: Google down? [Re: g_attrill]
rob
carpal tunnel

Registered: 21/05/1999
Posts: 5335
Loc: Cambridge UK
That was it, thanks!

The wierd thing is I can't get the rogue google entries out of my DNS cache. There are a couple of dozen fake records such as:

go.google.com
----------------------------------------
Record Name . . . . . : go.google.com
Record Type . . . . . : 1
Time To Live . . . . : 601844
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 207.44.194.56

ipconfig /flushdns claims to have worked, but those records never go away. I thought they might have been in the hosts file but they're not.

Any ideas?

Rob

Top
#182894 - 05/10/2003 08:48 Re: Google down? [Re: rob]
SE_Sport_Driver
carpal tunnel

Registered: 05/01/2001
Posts: 4903
Loc: Detroit, MI USA
Reminds me of this post where everything in my hosts file point to Google...

You couldn't get Google, I couldn't get rid of it!
_________________________
Brad B.

Top
#182895 - 05/10/2003 10:49 Re: Google down? [Re: rob]
g_attrill
old hand

Registered: 14/04/2002
Posts: 1172
Loc: Hants, UK
I just did a search and it seems there is another hosts file dropped in the %SystemRoot%\help folder and it sets that as the default hosts file.

Have you run the Symantec cleaner yet? It should reset all this back to the default values and delete the files:

http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.removal.tool.html

Gareth

Top
#182896 - 05/10/2003 13:56 Re: Google down? [Re: g_attrill]
rob
carpal tunnel

Registered: 21/05/1999
Posts: 5335
Loc: Cambridge UK
Yay! That was it, the cleaner program does not remove the extra hosts file in winnt\help.

Rob

Top