Hello and welcome.
Your HOSTS file
may be infected. Reset the HOSTS file
As this infection also changes your Windows HOSTS file, we want to replace this file with the default version for your operating system.
Some types of malware will alter the HOSTS file as part of its infection. Please follow the instructions provided in How do I reset the hosts file back to the default?
To reset the hosts file automatically,go HERE
button. Then just follow the prompts in the Fix it wizard.
in the File Download
dialog box or save MicrosoftFixit50267.msi
to your Desktop and double-click on it to run. Then just follow the promots in the Fix it wizard.
If still redirecting>>>Change your DNS Servers:
- Go to > Run... and in the open box, type: cmd
- Press OK or Hit Enter.
- At the command prompt, type or copy/paste: ipconfig /flushdns
- Hit Enter.
- You will get a confirmation that the flush was successful.
- Close the command box.
If the above commands did not resolve the problem, the next thing to try is to reset your network settings and Configure TCP/IP to use DNS
- Go to > Control Panel, and choose Network Connections.
- Right-click on your default connection, usually Local Area Connection or Dial-up Connection if you are using Dial-up, and and choose Properties.
- Double-click on Internet Protocol (TCP/IP) or highlight it and select Properties.
- Under the General tab, write down any settings in case you should need to change them back.
- Select the button that says "Obtain an IP address automatically" or make sure the DNS server IP address is the same as provided by your ISP.
- Select the button that says "Obtain DNS servers automatically".
- If unknown Preferred or Alternate DNS servers are listed, uncheck the box that says "Use the following DNS server address".
- Click OK twice to get out of the properties screen and restart your computer. If not prompted to reboot go ahead and reboot manually.
users can refer to How to Change TCP/IP settingsCAUTION
: It's possible that your ISP (Internet Service Provider) requires specific DNS settings here. Make sure you know if you need these settings or not BEFORE you make any changes or you may lose your Internet connection. If you're sure you do not need a specific DNS address,
then you may proceed.
Please post the TDSSKiller log.
(default) is selected, then click Continue
> Reboot now
to finish the cleaning process.
A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.22.214.171.124_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).
Copy and paste the contents of that file in your next reply.Rerun MBAM (MalwareBytes) like this:
Open MBAM in normal mode and click Update
tab, select Check for Updates
scan and scan (normal mode).
After scan click Remove Selected
, Post new scan log
into normal mode.
Please ask any needed questions,post logs and Let us know how the PC is running now.
Edited by boopme, 14 July 2011 - 10:27 PM.