Help Help!!!!

From yesterday 2/13/2007, when I use IE to open some website, it automatically open some advertisement website. I tried microsoft's virus defendent, but it didn't work. My Macfee shows virus alert and it is GENERIC TROJAN located in C:\WINDOWS\system32\drivers\etc\hosts.
How to remove this virus? Is it Ghost Trojan? I'm totally layman of this, anyone can help to answer?

THANK YOU SO MUCH!!!!

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

http://www.freedrweb.com

download CURE IT,

scan your machine, if it finds anything ...DELETE DELETE DELETE

good luck, its free, latest virus definations and you dont have to install it

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

Suggest you look here. Good luck!

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

Thanks, I'll try.

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

Since you were actually given a file names "hosts" and not just a directory things should be a lot easier to get rid of. I am curious about the file you say is infected because that is appropriately enough the windows host file. This file does nothing more that contain a list of addresses windows will not connect to (adware, malware, etc.) Perhaps is you simply delete the file windows will automatically generate a new one.

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

That particular entry shows an alteration of the hosts file. is it possible for you to open the file with notepad & just copy and paste it here (it shouldn't be to long)

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

Hisiko,
Reformatting the computer in order to get rid of this stubborn program is pretty drastic so I would recommend that you download the two free antispyware programs, AVG and Superantispyware and running scans with them first.

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

download hosts xpert
http://www.funkytoad.com/content/view/13/
check the hosts file and see if any dodgy entries
then if there is press the return to microsoft default hosts file
lodore

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

see the attachment, I copied from my MACFEE virus alert

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

everytime I open IE, my MAFEE will add new message on this alert.

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

did you try dr.webs cure it, what were the results from it?

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

I tried it, "no virus'!!!!!

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

attached my HOSTS file

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

what with the agressive '!!!!!'

next time i wont try and help you, hope it continues!!!!

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

i think this requires a manual intervantion (hijackthis & stuff) but there are some rules regarding hijackthis help on this forum (from what i read hjt support isn't provieded) but you can try to get help on other forums, you can try spywareinfo or bleepingcomputer (any will probably do). there are a lot of helpfull people there to aid you.

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

When I save that notepad, the local host list just disappeared on the saved notepad file and I was not permitted to just paste it in this reply.....

 

Re: HELP HELP!!!!!!!!!!!!!!!!!!!

Sorry, dear, I just want to show my surprise when it said no virus.....

I am crying now.....

 

maybe a simple windows system restore would fix the issue,

or a windows repair using the windows disk,

and i suggest when you get it fixed, you create some kind of image (acronis) or snapshot of your computer to role back on (firstdefense)

 

try superantispyware from my sig download the free version update and scan.
also you see if any of the repairs could help you in superantispyware
lodore

 

Hi there,

I just used anything I have to scan the computer and delete all suspicious file. Now suddenly it works. There is no strange advertising window pop-up anymore.. but my macfee stops working now....can't be updated from the server.....my god!

 

Thank you SO MUCH , everyone!
Next time I will use firefox instead of IE maybe....it seems to be safer....
Now still working on fixing my Macfee.....

 

Do a repair install of McAfee from either Add/Remove programs or the original installer. To see if that fixes your problem.

 

When you have it sorted, you could try installing a 3rd party hosts file I use this one:
and there are several applications around that will guard it against changes, such as Winpatrol, or Spybot. (Yes, it still has it's uses.)
This is not serious. That is, it's easy to fix.