Did you also check Tools -> Options -> Languages button? I just tried setting de-de as an accept language, and I get a google page in German now (but still just google.com). Dunno if that can have the effect you are seeing though.
Cheers Ken From: David Trent [mailto:[EMAIL PROTECTED] Sent: Tuesday, 12 February 2008 10:14 AM To: NT System Admin Issues Subject: Re: IE7 redirecting to Google.de I've semi-confirmed it's not a malware issue. I grabbed another laptop which was getting to Google.com<http://Google.com> ok through a different ISP, and connected it to the router using my ISP, and browsed to Google.com<http://Google.com>. Google.de<http://Google.de> came up immediately. So Google thinks that the IPs that my ISP is giving out to customers, are IPs that should be shown the German Google home page when google.com<http://google.com> is browsed to. Explains why browsing to gmail.com<http://gmail.com> shows a site which looks identical to Gmail, but is called Google Mail. My ISP says they have had no complaints (other than mine.) Now comes the long process of getting Google to talk to my ISP and vice versa. Yuck. On Feb 11, 2008 1:30 PM, David Trent <[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>> wrote: Found this (same problem, but no solution), posted 6 days ago: www.mcse.ms/message2735820.html<http://www.mcse.ms/message2735820.html> On Feb 11, 2008 1:19 PM, David Trent <[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>> wrote: Rootkit Revealer found only three items-- two embedded nulls, and a system restore rdb file hidden from Windows API. On Feb 11, 2008 1:07 PM, David Trent <[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>> wrote: The language settings are for English. I'm running Rootkit Revealer now... On Feb 11, 2008 12:39 PM, Alex Eckelberry <[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>> wrote: Why would it hijack to a legitimate Google site? Something else might be going on here. ________________________________ From: Christopher J. Bosak [mailto:[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>] Sent: Monday, February 11, 2008 3:35 PM To: NT System Admin Issues Subject: RE: IE7 redirecting to Google.de<http://google.de/> Gmail should redirect to mail.google.com<http://mail.google.com/> Sounds like a browser hijack to me. From: David Trent [mailto:[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>] Sent: Monday, February 11, 2008 14:32 hrs To: NT System Admin Issues Subject: Re: IE7 redirecting to Google.de<http://google.de/> Gmail also redirects to Google Mail. On Feb 11, 2008 12:11 PM, <[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>> wrote: We had a user get infected with something.... HOSTS file was clean but the DNS servers had been modified (IPCONFIG /ALL showed two new ones at the top of the list). "David Trent" <[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>> 02/11/2008 03:09 PM Please respond to "NT System Admin Issues" <[email protected]<mailto:[email protected]>> To "NT System Admin Issues" <[email protected]<mailto:[email protected]>> cc Subject Re: IE7 redirecting to Google.de<http://google.de/> Nothing out of the ordinary in the hosts file, btw. On Feb 11, 2008 12:03 PM, David Trent <[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>> wrote: Has anyone seen any spyware that does this? IE7 is set to open up a google.com<http://google.com/> page as its first tab among several. For a split second, the address bar shows google.com<http://google.com/>, then it changes to google.de<http://google.de/> and displays that site. AV scan runs clean, and so does an anti-malware scan. XP SP2 system, with patches up to date. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
