Can not go to ebay or paypal. help please.

[Josh Combs]

Well let me tell you I was able to go to ebay and paypal before I did teh patch. But now all I get are blank pages from going to www.ebay.com and www.paypal.com I have tried with IE and Firefox. No go. I can go to www.motors.ebay.com but not www.ebay.com. I have tried the registry fix but I don't know if I did it right because I still have this problem along with not being able to click links in my outlook express.

I am using the SP2 already. I have tried system restores but none have been able to restore back for some reason. So what is the purpose of having automatic restore points if they do not restore?

Also it is not the network/internet connection because I have 3 other computers on my network(same ip address) that can go to it. And my server that is on a different ip address that can go to it.

-Joshua

-edit my system is virus free and spyware free as I have scanned and came back 100% virus free atleast that is what Norton anti-virus tells me.

[ManagerJosh]

ipconfig /flushdns
ipconfig /registerdns

?

[Josh Combs]

I am talking about on my windows box personal desktop. No linux.

[ManagerJosh]

That is for windows.

Start > run > type in CMD.

[Zachery]

C:\WINDOWS\system32\drivers\etc\hosts

Check your hosts file

And try a domain name lookup

Start > Run > cmd /k nslookup ebay.com
Start > Run > cmd /k nslookup paypal.com

If those fail.

Start > Run > cmd /k ipconfig /flushdns
Start > Run > cmd /k ipconfig /renew

[Josh Combs]

I found these in my hosts file


127.0.0.1 www.sophos.com
127.0.0.1 sophos.com
127.0.0.1 www.mcafee.com
127.0.0.1 mcafee.com
127.0.0.1 www.viruslist.com
127.0.0.1 viruslist.com
127.0.0.1 viruslist.com
127.0.0.1 f-secure.com
127.0.0.1 www.f-secure.com
127.0.0.1 kaspersky.com
127.0.0.1 kaspersky-labs.com
127.0.0.1 www.avp.com
127.0.0.1 www.kaspersky.com
127.0.0.1 avp.com
127.0.0.1 www.networkassociates.com
127.0.0.1 networkassociates.com
127.0.0.1 www.ca.com
127.0.0.1 ca.com
127.0.0.1 mast.mcafee.com
127.0.0.1 my-etrust.com
127.0.0.1 www.my-etrust.com
127.0.0.1 download.mcafee.com
127.0.0.1 dispatch.mcafee.com
127.0.0.1 secure.nai.com
127.0.0.1 nai.com
127.0.0.1 www.nai.com
127.0.0.1 us.mcafee.com
127.0.0.1 rads.mcafee.com
127.0.0.1 trendmicro.com
127.0.0.1 pandasoftware.com
127.0.0.1 www.pandasoftware.com
127.0.0.1 www.trendmicro.com
127.0.0.1 www.grisoft.com
127.0.0.1 www.microsoft.com
127.0.0.1 microsoft.com
127.0.0.1 www.virustotal.com
127.0.0.1 virustotal.com
127.0.0.1 www.amazon.com
127.0.0.1 www.amazon.co.uk
127.0.0.1 www.amazon.ca
127.0.0.1 www.amazon.fr
127.0.0.1 www.paypal.com
127.0.0.1 paypal.com
127.0.0.1 moneybookers.com
127.0.0.1 www.moneybookers.com
127.0.0.1 www.ebay.com
127.0.0.1 ebay.com

should I delete them?

[Josh Combs]

I found these in my hosts file


127.0.0.1 www.sophos.com
127.0.0.1 sophos.com
127.0.0.1 www.mcafee.com
127.0.0.1 mcafee.com
127.0.0.1 www.viruslist.com
127.0.0.1 viruslist.com
127.0.0.1 viruslist.com
127.0.0.1 f-secure.com
127.0.0.1 www.f-secure.com
127.0.0.1 kaspersky.com
127.0.0.1 kaspersky-labs.com
127.0.0.1 www.avp.com
127.0.0.1 www.kaspersky.com
127.0.0.1 avp.com
127.0.0.1 www.networkassociates.com
127.0.0.1 networkassociates.com
127.0.0.1 www.ca.com
127.0.0.1 ca.com
127.0.0.1 mast.mcafee.com
127.0.0.1 my-etrust.com
127.0.0.1 www.my-etrust.com
127.0.0.1 download.mcafee.com
127.0.0.1 dispatch.mcafee.com
127.0.0.1 secure.nai.com
127.0.0.1 nai.com
127.0.0.1 www.nai.com
127.0.0.1 us.mcafee.com
127.0.0.1 rads.mcafee.com
127.0.0.1 trendmicro.com
127.0.0.1 pandasoftware.com
127.0.0.1 www.pandasoftware.com
127.0.0.1 www.trendmicro.com
127.0.0.1 www.grisoft.com
127.0.0.1 www.microsoft.com
127.0.0.1 microsoft.com
127.0.0.1 www.virustotal.com
127.0.0.1 virustotal.com
127.0.0.1 www.amazon.com
127.0.0.1 www.amazon.co.uk
127.0.0.1 www.amazon.ca
127.0.0.1 www.amazon.fr
127.0.0.1 www.paypal.com
127.0.0.1 paypal.com
127.0.0.1 moneybookers.com
127.0.0.1 www.moneybookers.com
127.0.0.1 www.ebay.com
127.0.0.1 ebay.com

should I delete them?

I deleted them and bam it works again

[Joe Gronlund]

Josh , add this to your hosts file, so it dont happen again..

66.135.192.87 ebay.com

If your DNS fails a lookup, it will write a 127.0.0.1 entry again..

[Zachery]

Yes, you got hit by a worm, update your AV software and do a scan.

[Zachery]

Josh , add this to your hosts file, so it dont happen again..

66.135.192.87 ebay.com

If your DNS fails a lookup, it will write a 127.0.0.1 entry again..

Joe are you telling me that this is now the expected to happen when a dns lookup fails in the newer versions of xp?

[Joe Gronlund]

Joe are you telling me that this is now the expected to happen when a dns lookup fails in the newer versions of xp?

I know it happens in XP with some systems, not all. But i have yet to see it happen on a Vista system.
But yes it does happen on Windows XP SP2 systems with certain hardware configurations. Usually due to firewall or router that caused a DNS lookup to fail, and point it to localhost 127.0.0.1.

I am going to make sure i report this as a bug, so it wont happen in the future..

[Zachery]

I know it happens in XP with some systems, not all. But i have yet to see it happen on a Vista system.
But yes it does happen on Windows XP SP2 systems with certain hardware configurations. Usually due to firewall or router that caused a DNS lookup to fail, and point it to localhost 127.0.0.1.

I am going to make sure i report this as a bug, so it wont happen in the future..

There are several worms that do this right now. I'd have to guess its a worm.

[Joe Gronlund]

There are several worms that do this right now. I'd have to guess its a worm.

Thats very possible too..

[Joe Gronlund]

Actually after looking over the domainnames entered in Josh;s host file, it really looks more like a worm to me too Zack..