Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trouble: HOSTS file delete/replace after System Tool removal


  • Please log in to reply
3 replies to this topic

#1 hidesert47

hidesert47

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 15 January 2011 - 12:31 PM

My desktop system has contracted System Tool, and I have been following your removal page http://www.bleepingcomputer.com/virus-removal/remove-system-tool. Running a Dell Studio 540 with Vista Home Premium 64-bit, kept updated. Using IE8 32-bit browser. Avast! Antivirus detected a threat, but didn’t stop System Tool. I am no computer junkie, so you should assume that this process is about at the limit of my expertise.

Removal went fine until I got to your step 23, delete/replace HOSTS file. Found file named lmhosts.sam in the \etc folder and deleted it. Was this the correct one? There was no other HOSTS file.

I right clicked on your link to Vista HOSTS file. When I went to “Save Target As,” I could only establish the path as far as C:\Windows\System 32\drivers, and when I click on drivers, there is no longer a \etc folder listed. I’ve done this three times, restoring the HOSTS file to its original place and starting over, all with the same results. I can’t create a new folder “etc” in the “Save as” window, thinking that if I saved to there, maybe it would work. I contemplated just rebooting without this file replacement, but don’t want to write off the 4 hours I’ve already spent.

Any help, please? And in layman’s English, if possible. If I need to post logs or code, fair warning that you’ll have to direct me to a “how to” page first.

Thanks!

BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,710 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:02:00 AM

Posted 15 January 2011 - 01:09 PM

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

64-bit users go HERE
  • Double-click SystemLook.exe to run it.
  • Vista users:: Right click on SystemLook.exe, click Run As Administrator
  • Copy the content of the following box into the main textfield:
    :filefind
    *hosts
    :dir
    C:\Windows\System32\drivers
    
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 hidesert47

hidesert47
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 15 January 2011 - 05:56 PM

Not sure how I solved it, but issue resolved. Thanks for your reply!

#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,710 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:02:00 AM

Posted 15 January 2011 - 06:01 PM

Self-help works too around here :)

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users