Help please re: antispywaresoft

Johno please? · 15 May 2010 at 18:04

A little help please, I managed to get infected with this antispywaresoft and successfully removed it, but firefox is still re directing me to websites I don’t want to go to

I’ve looked in regedit and removed all of the antispywaresoft gubbins with no luck and uninstalled firefox etc, anyone shed some light on what I could do next?

mrk · 15 May 2010 at 18:08

Could you open C:\Windows\System32\drivers\etc\HOSTS in Notepad and post the contents here?

Johno please? · 15 May 2010 at 18:44

Khaaan! said:
Could you open C:\Windows\System32\drivers\etc\HOSTS in Notepad and post the contents here?

ummmmm this is all that comes up.... :confused:

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

theheyes · 15 May 2010 at 18:48

Host file looks fine. How did you "remove" it?

Johno please? · 15 May 2010 at 18:57

theheyes said:
Host file looks fine. How did you "remove" it?

Removed all the registrys and associated files... also downloaded "malwarebytes anti-malware" which was suggested on some sites, which picked up a file i missed.

mrk · 15 May 2010 at 18:58

Control Panel > Internet Options > Connections tab > LAN button

Make sure that auto detect is enabled and proxy etc disabled?

Johno please? · 15 May 2010 at 19:09

Khaaan! said:
Control Panel > Internet Options > Connections tab > LAN button

Make sure that auto detect is enabled and proxy etc disabled?

hmmm im on XP, I don't have internet options, just network connections and I couldn't find a LAN tab in there.

mrk · 15 May 2010 at 19:11

Connections tab, not LAN tab - You'll also find it in IE > Tools > Internet options.

Johno please? · 15 May 2010 at 19:19

ah k, Yea its on "no proxy"

Mr_Moose · 15 May 2010 at 20:11

Just a thought but did you try scanning with Malwarebytes in SafeMode (F8 on boot if I remember right)???

Destination · 15 May 2010 at 21:53

Did you disable system restore when you ran malwarebytes in safe mode?
Just to make sure it isn;t repalcing files elsewhere wach time you boot?

Johno please? · 16 May 2010 at 10:15

ok ill give these things a go cheers.