System Tools (yes another one!) Logs included

aliEnRIK

Log seems fine

The HOSTS file usually gets changed so reset that -

Download HostsXpert (US MIRROR)
http://www.softpedia.com/progDownload/Hoster-Download-27041.html
and then follow the below steps.

* Unzip HostsXpert.zip
* It will create a folder named HostsXpert in whatever folder you extract it to.
* Run HostsXpert.exe by pressing the SHIFT key, RIGHT CLICKINg on the exe file and selecting RUN AS (Admin)
* click the Make Writeable? button.
* click Restore Microsoft's Hosts File and then click OK.
* Click the X to exit the program

..........................................................

Give it a clean -
Download CCLEANER
http://www.piriform.com/ccleaner/download/slim
Run the CLEANER scan (UNTICK 'cookies')
Then run the REGISTRY scan (Backup the registry when it asks)

............................................................

and I recommend one last (very long) scan

Download and run the FREE version of DR WEB
http://www.freedrweb.com/download+cureit/gr/
Turn your anti virus OFF
Click CANCEL to its first question (Unless your happy to lock windows until its run)
Click NO to opening the purchase page
Click START
click YES
It will auto QUICK scan
Pess the STOP button on the right (Unless your happy to quick scan first)
After that set to COMPLETE SCAN the computer and press the 'play' icon
This will more than likely take hours (12 is average!), so leave running overnight or whatever

***DO NOT UPGRADE TO FULL VERSION***

reset the HOSTS file if it asks you

vivaladiva

Getting an error message on the hosts file bit.
It cannot create hosts file.

aliEnRIK

vivaladiva wrote: »

Getting an error message on the hosts file bit.
It cannot create hosts file.

Follow posts 22 and 23 from here -
http://www.bleepingcomputer.com/virus-removal/remove-system-tool

vivaladiva

Back again. Drweb is still running, but a message has popped up saying there is an infected file and do I want to move it. I guess the answer is yes, but 7 hours into the scan I don't want to mess it up. Should I deal with it now or wait until the scan has finished?

aliEnRIK

Click YES (or YES TO ALL if the option is there)

vivaladiva

Dr Web scan has finished. It has found three dodgy files.
Do I just close it now, or do I need to do something else?

aliEnRIK

So long as theyve been moved/deleted, your good to close it

vivaladiva

I'm not sure the file is deleted, but it has been moved. I saw in another thread that you suggested deleting the file, but I cannot access documents/settings for some reason.

aliEnRIK

vivaladiva wrote: »

but I cannot access documents/settings for some reason.

What happens when you try?

vivaladiva

I get an access denied message. I tried searching for the offending file, but it tells me the file cannot be found - presumably because of the access problem?