Windows: something blocking microsoft

yep dunno how to explain it, something is blocking my access to microsoft

i.e i realized after 4 days of windows live not fucking working i said fuck this and deleted it, but every time i try to go to microsoft.com i get redirected to google (wtf?) or if I try to click the messenger link from msn I get this (attached)



is there some fucking way to figure out what's doing this? i'm computer retarded but it's not a virus

I am only experienced with solving problems I experience myself but see if this contains anything useful for you:

http://groups.google.com/a/googlepro...ts/prSV6QYXPI0

Does this also happen in Internet Explorer?

i have checked for adware/spyware and my hosts files before posting. they are all clean.

Does this also happen in Internet Explorer?

hmm, yes apparently. firefox is my default but I just went and tested and yes, it's doing the same in IE.

I see that you are using windows XP.

Try opening windows explorer (the shell that explores your hard drive) and enter that URL int the address bar and see if it converts to an IE window that loads the address properly.

nop... takes me back to google rofl ):

start > control panel > internet options

connections tab

LAN settings button

Is "use a proxy server[...]" line checked?

also open this file with notepad : c:\windows\system32\drivers\etc\hosts

is anything listed below the lines that start with a #?

127.0.0.1 localhost
127.0.0.1 activate.adobe.com

that's it

try

start > run...

type:
cmd

hit enter

in the command prompt window type

ipconfig /flushdns

and

ipconfig /registerdns

See if that helps.

another thing...

control panel, network conenctions. right click the Local area connection icon, properties. select internet protocol (tcp/ip) or it may be called ip v4 or something. And click properties. Check if you are getting DNS automatically. If you are try switching to manual and making 208.67.222.222 your primary dns server.

augh okay I did both the dns things in the cmd prompt. I was also getting dns automatically so I changed it to be yours but I still get the same errors. what the FUCK

What happens when you try to run a tracert on microsoft.com?

Tracing route to microsoft.com [207.46.197.32]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms 192.168.1.1
2 27 ms 22 ms 9 ms 10.35.107.93
3 8 ms 7 ms 7 ms G0-3-3-4.LSANCA-LCR-22.verizon-gni.net [130.81.1
04.225]
4 6 ms 7 ms 7 ms so-6-0-0-0.LAX01-BB-RTR2.verizon-gni.net [130.81
.29.126]
5 9 ms 9 ms 7 ms 0.so-1-3-0.XL4.LAX15.ALTER.NET [152.63.114.149]

6 9 ms 9 ms 9 ms TenGigE0-7-1-0.GW4.LAX15.ALTER.NET [152.63.114.2
25]
7 6 ms 7 ms 7 ms microsoft.customer.alter.net [152.179.21.26]
8 17 ms 17 ms 17 ms xe-2-1-0-0.by2-96c-1a.ntwk.msn.net [207.46.45.82
]
9 54 ms 37 ms 44 ms ge-7-1-0-0.wst-64cb-1a.ntwk.msn.net [207.46.40.6
7]
10 38 ms 52 ms 39 ms ge-1-0-0-0.cpk-64c-1a.ntwk.msn.net [207.46.43.21
8]
11 47 ms 209 ms 212 ms ten2-4.cpk-76c-1a.ntwk.msn.net [207.46.47.191]
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
15 * ^C

Originally Posted by pidge

127.0.0.1 localhost
127.0.0.1 activate.adobe.com

that's it

Pirated photoshop I see, did you run a virus scan?

Typically if it does that to microsoft it'd do the same thing to virus sites.

cs5 about 4 months prior to this yep and yep

and 4 different adware/malware programs at this point

and i'm coming up clean but i cannot find a solution still

I know it may be a stupid suggestion, but, try resetting your IE settings?

Control panel > internet options > advanced > the reset button

http://answers.microsoft.com/en-us/p...llReplies#tabs

Seems identical to your problem.

Incase you can't view the link since it is *.microsoft:

Spoiler Alert:

Suggested solutions:

Try this: http://www.bleepingcomputer.com/viru...ing-tdsskiller

You can start here - https://support.microsoftsecurityessentials.com/ and select the link that says - I think my computer is infected. Options will vary by region, but phone support leads you to Microsoft Answer Desk (http://www.answerdesk.com/) in the US at this time. After an initial free consultation, a fee will be charged for assistance, based on the details of the case.

This web site - http://www.bleepingcomputer.com - contains details for many of the common infections, often immediately after they began to appear in the wild, and instructions are provided for how to remove the infections using their malware removal guides. They also have forums where you can seek help from people who specialize in malware removal.

OP's solution:

TDSS tool didn't detect the trojan, but found help from the url you provided and bookmarked it.
What I had to do, was to run Rkill and once it detected the trojan, I manually disabled it using my malware software. Now I'm able to access the sites with no issues.

The trojan was running from this folder using the following file name:
C:\Users\<your user name here>\AppData\Roaming\Acuvih\etuwk.exe
I guess the file name is randomly created, so it's not necessarily the same for all of you.

make sure the antivirus programs you ran are

1) Kaspersky Virus Removal Tool
2) Combofix

jayed and truly win THE PRIZE !!!!!!11111111111111111

kaspersky didn't find the problem but the combofix thing did

don't know exactly what it was but after running the 50 step thing I can now access microsoft again and can redownload messenger

thank god because we were this close to saying fuck it and reinstalling windows

Combofix is pretty deadly to viruses but it can fuck up your TCP/IP and stuff so I usually use it as a last resort.

You probably had a TCP/IP rootkit hijacking your DNS.