Shoutbox

The other day I got a virus called new.net [newdotnet] and wut it did was redirect both firefox AND internet explorer to anything but what Im looking for. For instance:

code:

---

www.msgplus.net would bring me to www.msgplus.net.ayv

---

Now I was able to fix this after scanning my anti virus, anti-spyware, anti-virus, anti-spyware.....and so on untill I scanned it 4 times for each of those programs.

     During the scans I had to unplug the cable for my internet into my computer because otherwise newdotnet would come back. when I plugged the internet again newdotnet did NOT come back however my internet either...Windows told me I had a limited connection or no connection at all. I tried everything from unpluging the net from the router to pass it directly to the computer, to resetting the computer 20 times in a row. The computer downstairs (the one Im using now) has no problems at all, no virus, and a perfectly good internet connection.
     What happened however is that when I put my settings of my internet upstairs back to what they were before [another way of trying to make it work] it said I was connected....but I'm still not. I'm just connected to the computer downstairs and I am able to use the printer...that's it....believe me I check ALL my internet settings and they are allw hat they were before the virus. I really don't know what to do anymore because I NEED that computer to work on my website and my friend's website. I promised her she'd get it yesterday and that's when I couldn't connect...I figured I could reformat but I really don't want to have to backup all my data again...any ideas?

Sounds like you've got a problem with your HOSTS file tbh. Navagate to

Windows 95/98/Me c:\windows\hosts

Windows NT/2000/XP Pro  c:\winnt\system32\drivers\etc\hosts

Windows XP Home c:\windows\system32\drivers\etc\hosts

and open the HOSTS file from there, check to make sure it says nothing more than

code:

---

# Copyright (c) 1994 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows 98
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the computer name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost

---

mine says this:

code:

---

# Copyright 1993-1999 Microsoft Corp.
#
# Ceci est un exemple de fichier HOSTS utilisé par Microsoft TCP/IP
# pour Windows.
#
# Ce fichier contient les correspondances des adresses IP aux noms d'hôtes.
# Chaque entrée doit être sur une ligne propre. L'adresse IP doit être placée
# dans la première colonne, suivie par le nom d'hôte correspondant. L'adresse
# IP et le nom d'hôte doivent être séparés par au moins un espace.
#
# De plus, des commentaires (tels que celui-ci) peuvent être insérés sur des
# lignes propres ou après le nom d'ordinateur. Ils sont indiqué par le
# symbole '#'.
#
# Par exemple :
#
#      102.54.94.97     rhino.acme.com          # serveur source
#       38.25.63.10     x.acme.com              # hôte client x

127.0.0.1       localhost

---

anyone?

I know the cause, not too sure on a solution though.

NewDotNet installs an LSP; which is something that acts as a layer between data going in and out of your PC. If NewDotNet is removed in any way OTHER than through its uninstall mechanism, it will not remove the LSP and due to the LSP still being there, but NewDotNet's files not existing (or something similar..) your internet will not work.

There's a program called lspfix (Google it) but if you don't know what you're doing you could really screw up your TCP/IP.

quote:

---

Originally posted by lou_habs
mine says this:
[code][/code]

anyone?

---

It's fine. The line "127.0.0.1 localhost" is what needs to be there, and all the lines starting with "#" are only comments.

Ddunk suggested it because entries there mean your computer won't look up the DNS for the host. So instaed of sending you to 64.62.180.100 for www.msgplus.net, it could send you somewhere else, which would redirect you to www.msgplus.net.ayv

I fixed it using lspfix!!! THANKS TO YOU PPLZ!!!

quote:

---

Originally posted by lou_habs
I fixed it using lspfix!!! THANKS TO YOU PPLZ!!!

---

Nice