So, I attempted to go to the Kaspersky online scanner and got a 404 error. I tried going to AVG and Symantec and got the same error. I tried the sites on my computer and they worked. I did an nslookup of the web addresses on my computer and was able to access the sites on my wife's computer by entering the IP octets (but I couldn't get any online scanning to work). I did an nslookup on my wife's computer and got the correct IP addresses. I did a ping on my wife's computer and got localhost. I checked the registry key for the hosts file and found it was still in the default location. I checked the hosts file and it was empty (except for localhost).
I downloaded AVG on my computer and put it on a CD-RW and installed it on my wife's computer. It started but wouldn't update. It also crashed when I started a scan.
I then downloaded SpybotSD and the most recent update exe and installed that on my wife's computer. It installed but wouldn't start. I went into the program directory, made sure the files were there, and then renamed the executable to "Tester"--and it ran. The scan ran to completion seemingly without any problems.
The Spybot scan turned up a bunch of adware and cookie trackers and such and also reported a trojan called Win32.TDSS.rtk. It wasn't able to remove this trojan as files were in use but suggested that I reboot and have Spybot run on boot, which I have done.
Spybot claimed to have successfully removed the trojan. I checked a ping of symantec and avg and they were both returning the correct address.
However, as soon as a web browser was started (either firefox or IE), the problem began anew. The browser hangs up for a long time before loading the home page. I immediately pulled up a command prompt and checked ping. The antivirus web sites are all pinging as localhost again.
I would greatly appreciate any assistance in solving this--I have about reached the limits of my personal knowledge in this area. Thanks in advance for any help.
Edited by mds240, 27 December 2008 - 04:29 PM.