Posted 12 February 2011 - 12:17 PM
I had a similar issue, an installed AVG and MS Malicious SW removal tool found nothing,
1) Open up network connections, look at the properties of the TCP/IP protocol, see if the network requests are being sent to a proxy server on a port on the localhost (127.0.0.1).
2) open up your hosts file (possibly at c:\windows\system32\drivers\etc). All entries beginning with a # are comments. For a windows XP box, you should only see 127.0.0.1 localhost line
While we're at it:
After I removed the virus, using r kill, malware bytes, super anti spyware in tandem, then installing MS security essentials, my LAN didn't work.
(You will have to download them to a clean computer, burn them to a CD)
I then did the above, but I could no longer get to any microsoft site.
I then opened up the network site certificates and remove microsoft.com from the untrusted publisher's list.
Also, at some point I reset the TCP/IP stack by removing and re-installing the LAN card drivers (Yes I really did! boy was that annoying, both the physical and the WiFi).
After that I could update the computer to the latest patches, still working on getting the 'firewall' registry settings set properly. No virus is going to come in through unknown ports these days anyway.