Help google redirect virus?

closed

delete c:\windows\system32\drivers\etc\hosts (if it lets you)

Browntoa

I'd run this

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

as you have

(Rogue.SecurityTool)

Browntoa

alm721 wrote: »

are you kidding?

no , used to the log files so I know where the breaks are...lol

don't delete the hosts file....as posted above

closed

Why not?????

alm721

Browntoa wrote: »

no , used to the log files so I know where the breaks are...lol

Gosh thanks, must have taken a while

Browntoa

closed wrote: »

Why not?????

as they need to run Combofix and that will clean the hosts file if need be... :rolleyes:

closed

So combofix is allowed to delete it, but op isn't, ridiculous. :rolleyes:

Until 78.159.110.47 www.google.co.uk is removed from the host file, google ain't going to work, you can either edit the host file, or delete it completely.

Browntoa

combofix will list what its deleted , wholesale deletion just deletes the file , you need to know whats happening at each stage so you can structure the removal properly

combofix will list whats deleted and whats been installed/created in the last 30 days , if the hosts file is deleted then you may only get half the story.Thats why we always follow

1) Malwarebytes
2) Hijackthis

and if either of the above indicate the need

3) Combofix

closed

hijackthis has already identified the host file is wrong, deleting it cures that, doesn't matter how you achieve it, you can either cut to the chase, or go around the houses.

Browntoa

not all of it is wrong ,intsecure-2009.com is malware , the rest are harmless

read all the other malware removal threads on here , alienRik follows the same steps as me

I'll only respond to the Original poster now , if they want to follow your advice or mine is up to them