Author Topic: Google virus, NOT redirect virus. PLEASE HELP!  (Read 19171 times)

0 Members and 1 Guest are viewing this topic.

kubecj

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #30 on: July 15, 2011, 03:41:07 PM »
Works for me, but I expected that. This is not widespread, we would see it.

What is the output of the nslookup command I asked few messages back?

WhyIsThisHappeningToMe

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #31 on: July 15, 2011, 05:10:33 PM »
At this point im just about to remove avast because it is only annoying me with "Threat has been detected" sounds and not warning my about real viruses

Offline Left123

  • There Is No Patch For Human Stupidity.
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1048
  • Proud Community Member&Helper.
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #32 on: July 15, 2011, 05:13:23 PM »
At this point im just about to remove avast because it is only annoying me with "Threat has been detected" sounds and not warning my about real viruses
Do it and you may have further problems.Can't you wait for Essexboy?He will figure  out what's going on.
AMD Athlon(tm) X2 Dual-Core Processor 4200+ - 2.20 GHz,3,00 GB RAM -
Browser:Mozilla Firefox +WOT - SoftWare:CCleaner - Windows 7 32 bit
No Anti-Virus

kubecj

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #33 on: July 15, 2011, 05:22:40 PM »
I really enjoy these double monologs. <g>

I'm trying to 'fix' your problem but you simply don't reply to any of my questions. What do you expect then?  ???

WhyIsThisHappeningToMe

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #34 on: July 15, 2011, 05:32:55 PM »
sorry kubecj, I missed your question, heres whats in C:\Windows\System32\drivers\etc

hosts
lmhosts.sam
networks
protocol
services
« Last Edit: July 15, 2011, 05:37:36 PM by WhyIsThisHappeningToMe »

kubecj

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #35 on: July 15, 2011, 05:37:20 PM »
How does the mentioned google site resolve to you?
Ie. open cmd (command-line), and run command
nslookup t0.gstatic.com

or

nslookup t2.gstatic.com

Post here the results. For me it returns something like this
Name:    t0.gstatic.com
Addresses:  74.125.79.147
          74.125.79.99
          74.125.79.104

but it will differ because Google has geoip-based replies.

WhyIsThisHappeningToMe

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #36 on: July 15, 2011, 05:39:08 PM »
How does the mentioned google site resolve to you?
Ie. open cmd (command-line), and run command
nslookup t0.gstatic.com

or

nslookup t2.gstatic.com

Post here the results. For me it returns something like this
Name:    t0.gstatic.com
Addresses:  74.125.79.147
          74.125.79.99
          74.125.79.104

but it will differ because Google has geoip-based replies.

Yes mine shows up the same with a Non-Authoritive answer thing.

kubecj

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #37 on: July 15, 2011, 05:43:05 PM »
Really? The same IP addresses? The addresess I posted were from Europe. I'm getting different IPs for USA based server.

WhyIsThisHappeningToMe

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #38 on: July 15, 2011, 05:46:30 PM »
the IPs I got is
74.125.226.116
74.125.226.112
74.125.226.113
74.125.226.114
etc.


kubecj

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #39 on: July 15, 2011, 05:54:24 PM »
OMG. These are computers, they don't work with etc.  ::)

One of the ips in the 74.125.226.x range was wrongly blocked. The badguys  do this as a decoy, they put good addresses amongst the bad to slow us down or embarass us when we block something like google.

I removed it, will be in the next update. We'll see if it'll be fixed or not.

WhyIsThisHappeningToMe

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #40 on: July 15, 2011, 05:57:45 PM »
OMG. These are computers, they don't work with etc.  ::)

One of the ips in the 74.125.226.x range was wrongly blocked. The badguys  do this as a decoy, they put good addresses amongst the bad to slow us down or embarass us when we block something like google.

I removed it, will be in the next update. We'll see if it'll be fixed or not.
oh my... how did they changed it ?!

kubecj

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #41 on: July 15, 2011, 06:03:31 PM »
I don't understand.

They have in their malware the list of domains I blocked. In midst of them they put the mentioned google address and I blindly blocked it too. Now it's fixed.

WhyIsThisHappeningToMe

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #42 on: July 15, 2011, 06:13:04 PM »
So everyone in my area had it?
Thank you very much by the way, much appreciated.

kubecj

  • Guest
Re: Google virus, NOT redirect virus. PLEASE HELP!
« Reply #43 on: July 15, 2011, 06:21:07 PM »
Probably yes, but it seems to be very rare - google has many servers and only one of them was affected by this - we'd spot it sooner otherwise.