Internet Explorer Browsing Problem

[morgansrocks]

When I enter a web address without http:// - eg - www.google.co.uk - I cannot
access the site. Instead http:// is added and n IP address is placed
in-between - eg - http://69.50.191.50/?www.google.co.uk - this was cut and
pasted from my address bar. Any Clues?
Thank You!

[old jon]

"morgansrocks" > wrote in message
...
> When I enter a web address without http:// - eg - www.google.co.uk - I
> cannot
> access the site. Instead http:// is added and n IP address is placed
> in-between - eg - http://69.50.191.50/?www.google.co.uk - this was cut and
> pasted from my address bar. Any Clues?
> Thank You!
>
Tools Internet options and set to
http://www.google.co.uk/
best wishes..OJ

[Kemco]

Morgan,

Sounds like you're infected with an Internet Explorer Hijacker. Go to Start
> run and type http://housecall.trendmicro.com and ok if you get to the
website then run CWShredder then Anti-spyware and lastly housecall. If you
can't get to it by typing in the website then go to tools > internet options
and delete files and delete cookies. Hopefully this will work for you. If
you can still search the web some how then you should search for Trend Micro
desktop and it should list that website. Good luck.

Joe

Kemco IT Professional

"morgansrocks" wrote:

> When I enter a web address without http:// - eg - www.google.co.uk - I cannot
> access the site. Instead http:// is added and n IP address is placed
> in-between - eg - http://69.50.191.50/?www.google.co.uk - this was cut and
> pasted from my address bar. Any Clues?
> Thank You!

[scrubber]

Right click the IE icon on your desktop --> Internet Properties --> Programs
--> click the "Reset Web Settings" button.

A good way to launch www.google.co.uk without having to type it all and
without making it your homepage is to first of all right click the Taskbar
and choose "Unlock Taskbar". Then launch IE, type in the URL this one time
i.e. www.google.co.uk and then click and hold down the left mouse button on
the IE icon at the beginning of the address and drag it onto the Taskbar next
to the "Start" button.

You can even change the icon for it if you want to by right clicking it, go
to "Properties" and then click the "Change Icon" button. You only get four
icons to choose from in C:\WINDOWS\system32\url.dll, but if you delete that
path and replace it with C:\WINDOWS\system32\SHELL32.dll, you'll get around
100 icons you can choose from. :)

[Beau]

Google's IP is 216.239.x.x and a ping -a of 69.50.191.50 returns what looks
like a reverse lookup of estehost.com. I would say you are definitely
infected with something. Look at your hosts file start >> run >> drivers >>
etc >> open the host file. Delete all entries except those that begin with a
# and the entry that starts with 127.0.0.1, unless you added the entries. If
www.google.co.uk was one off the entries you should be able to go there now.
You should scan your systems with up to date AV and antispyware.

"morgansrocks" wrote:

> When I enter a web address without http:// - eg - www.google.co.uk - I cannot
> access the site. Instead http:// is added and n IP address is placed
> in-between - eg - http://69.50.191.50/?www.google.co.uk - this was cut and
> pasted from my address bar. Any Clues?
> Thank You!

[R. McCarty]

IE's default action is to initiate a search on an unavailable/unreachable
URL (Universal Resource Locator). Toggle the "Search from Address
Bar" option in IE,Tools, Internet Options, Advanced to "Do Not Search
from the Address Bar" and retry your URL. Option is found near the
~65% scroll point downward.

"Beau" > wrote in message
...
> Google's IP is 216.239.x.x and a ping -a of 69.50.191.50 returns what
> looks
> like a reverse lookup of estehost.com. I would say you are definitely
> infected with something. Look at your hosts file start >> run >> drivers
> >>
> etc >> open the host file. Delete all entries except those that begin
> with a
> # and the entry that starts with 127.0.0.1, unless you added the entries.
> If
> www.google.co.uk was one off the entries you should be able to go there
> now.
> You should scan your systems with up to date AV and antispyware.
>
> "morgansrocks" wrote:
>
>> When I enter a web address without http:// - eg - www.google.co.uk - I
>> cannot
>> access the site. Instead http:// is added and n IP address is placed
>> in-between - eg - http://69.50.191.50/?www.google.co.uk - this was cut
>> and
>> pasted from my address bar. Any Clues?
>> Thank You!

[morgansrocks]

thanks for that but unfortunately, it's not fixed it. i can still access web
sites if i put http:// before the address. i was just hoping it was a setting
i'd chaged by mistake. i didn't find any spyware of viruses or unknown hosts.

"Beau" wrote:

> Google's IP is 216.239.x.x and a ping -a of 69.50.191.50 returns what looks
> like a reverse lookup of estehost.com. I would say you are definitely
> infected with something. Look at your hosts file start >> run >> drivers >>
> etc >> open the host file. Delete all entries except those that begin with a
> # and the entry that starts with 127.0.0.1, unless you added the entries. If
> www.google.co.uk was one off the entries you should be able to go there now.
> You should scan your systems with up to date AV and antispyware.
>
> "morgansrocks" wrote:
>
> > When I enter a web address without http:// - eg - www.google.co.uk - I cannot
> > access the site. Instead http:// is added and n IP address is placed
> > in-between - eg - http://69.50.191.50/?www.google.co.uk - this was cut and
> > pasted from my address bar. Any Clues?
> > Thank You!

[scrubber]

http://toolbar.netcraft.com/site_report?url=http://ESTHOST.COM

http://www.whois.sc/esthost.com

http://www.ordb.org/


I think you need to be a bit wary of what's happening here. I checked up on
"Esthost.com" and they appear to be located in Estonia:
http://toolbar.netcraft.com/site_report?url=http://ESTHOST.COM

They're also blacklisted as SPAMMERS as can be seen here:
http://www.whois.sc/esthost.com

My advice would be to run an Open Relay test on your own IP address in order
to ascertain whether you're running an Open Relay i.e. you're unknowlingly
sending SPAM all over the world. You can do that here: http://www.ordb.org/
Click "Test an Open Relay" in the menu on the left.

By the way, what happens it you try to use a different Search engine? For
example, type "dogpile" in the address bar and then hit CTRL+ENTER. IE will
add the "http://www." and the ".com" automatically.

"morgansrocks" wrote:

> thanks for that but unfortunately, it's not fixed it. i can still access web
> sites if i put http:// before the address. i was just hoping it was a setting
> i'd chaged by mistake. i didn't find any spyware of viruses or unknown hosts.
>
> "Beau" wrote:
>
> > Google's IP is 216.239.x.x and a ping -a of 69.50.191.50 returns what looks
> > like a reverse lookup of estehost.com. I would say you are definitely
> > infected with something. Look at your hosts file start >> run >> drivers >>
> > etc >> open the host file. Delete all entries except those that begin with a
> > # and the entry that starts with 127.0.0.1, unless you added the entries. If
> > www.google.co.uk was one off the entries you should be able to go there now.
> > You should scan your systems with up to date AV and antispyware.
> >
> > "morgansrocks" wrote:
> >
> > > When I enter a web address without http:// - eg - www.google.co.uk - I cannot
> > > access the site. Instead http:// is added and n IP address is placed
> > > in-between - eg - http://69.50.191.50/?www.google.co.uk - this was cut and
> > > pasted from my address bar. Any Clues?
> > > Thank You!

[morgansrocks]

Thanks again. i'm currently doin an open relay on my IP. just to let u kno.
google was just an example, the ip of esthost appears whatever web address i
enter, but only i don't enter http://


"scrubber" wrote:

> http://toolbar.netcraft.com/site_report?url=http://ESTHOST.COM
>
> http://www.whois.sc/esthost.com
>
> http://www.ordb.org/
>
>
> I think you need to be a bit wary of what's happening here. I checked up on
> "Esthost.com" and they appear to be located in Estonia:
> http://toolbar.netcraft.com/site_report?url=http://ESTHOST.COM
>
> They're also blacklisted as SPAMMERS as can be seen here:
> http://www.whois.sc/esthost.com
>
> My advice would be to run an Open Relay test on your own IP address in order
> to ascertain whether you're running an Open Relay i.e. you're unknowlingly
> sending SPAM all over the world. You can do that here: http://www.ordb.org/
> Click "Test an Open Relay" in the menu on the left.
>
> By the way, what happens it you try to use a different Search engine? For
> example, type "dogpile" in the address bar and then hit CTRL+ENTER. IE will
> add the "http://www." and the ".com" automatically.