This is reminiscent of the QHosts-1 trojan: http://vil.nai.com/vil/content/v_100719.htm
The information in the link will give you a few clues as to what might have been changed. Cheers, Phil --------------------------------------------- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Tony Nguyen > Sent: 10 November 2003 15:52 > To: Exchange Discussions > Subject: RE: Virus with XP > > > What is the name of this file and where is it location? > > -----Original Message----- > From: David, Andy [mailto:[EMAIL PROTECTED] > Sent: Monday, November 10, 2003 7:46 AM > To: Exchange Discussions > Subject: RE: Virus with XP > > > Check to see if your local hosts file has a bunch of bogus entries. > > > -----Original Message----- > From: Tony Nguyen [mailto:[EMAIL PROTECTED] > Sent: Monday, November 10, 2003 10:29 AM > To: Exchange Discussions > Subject: Virus with XP > > > My home computer (window XP) was infected with virus and I > clean it. Now > when I open my browser and go to www.google.com it take me to another > website www.cpanel.net. Has anyone seen this before and I do > I fix this? > Thank > > Tony Nguyen ([EMAIL PROTECTED]) > System Administrator/DBA > Senior Aerospace Jet Products > www.jetproducts.com > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t ext_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
