Think my computer has been infected

harvey1964

RussJK wrote: »

Run the full scan as Rik said

While that is going, run this file:
http://www.users.on.net/~russ/hx.exe

And click "make hosts writeable", then press the "restore MS hosts file".

it says Error.....cannot create file.... ??????

RussJK

harvey1964 wrote: »

it says Error.....cannot create file.... ??????

Click "make writeable" once more, and try restoring the MS hosts file.

harvey1964

RussJK wrote: »

Click "make writeable" once more, and try restoring the MS hosts file.

It says cannot create file c:\windows\stsyem32\drivers\ETC\hosts


I am running the full scan on malwarebytes at the moment will post log when its done

aliEnRIK

harvey1964 wrote: »

It says cannot create file c:\windows\stsyem32\drivers\ETC\hosts

RIGHT CLICK on the exe file and RUN AS ADMIN

harvey1964

aliEnRIK wrote: »

RIGHT CLICK on the exe file and RUN AS ADMIN

i,m sorry not sure what you mean...do i click on this link again to do it

http://www.users.on.net/~russ/hx.exe

RussJK

harvey1964 wrote: »

It says cannot create file c:\windows\stsyem32\drivers\ETC\hosts
I am running the full scan on malwarebytes at the moment will post log when its done

Full scan will take awhile, so you may as well do other things at the same time.

Right click and save this to your desktop:
http://www.users.on.net/~russ/hx.exe

Then run as admin as Alienrik suggested.

When you run hostsxpert, you want it to look like this roughly:
http://inbr.files.wordpress.com/2008/12/hostsxpert.jpg%3Fw%3D500%26h%3D429

Take note of the right panel, with the lines starting with the # symbol. You want yours to be like that, with approx 19 or 20 lines, & with only one entry below them saying "127.0.0.1 localhost". If yours looks roughly like that then you are probably fine and don't need to worry.

If not, take note of the Top left button. You want yours to have the icon of an open lock, say "make readonly?". If it says that, then you are able to click on "restore ms hosts file" and it should work.

aliEnRIK

You need to find the download location

(usually C drive (this could be slightly wrong, not done XP in ages) DOCUMENTS AND SETTINGS \ USER \ DOWNLOADS)

Right click on the 'hx.exe' file youve just downloaded

harvey1964

RussJK wrote: »

Full scan will take awhile, so you may as well do other things at the same time.

Right click and save this to your desktop:
http://www.users.on.net/~russ/hx.exe

Then run as admin as Alienrik suggested.

When you run hostsxpert, you want it to look like this roughly:
http://inbr.files.wordpress.com/2008/12/hostsxpert.jpg%3Fw%3D500%26h%3D429

Take note of the right panel, with the lines starting with the # symbol. You want yours to be like that, with approx 19 or 20 lines, & with only one entry below them saying "127.0.0.1 localhost". If yours looks roughly like that then you are probably fine and don't need to worry.

If not, take note of the Top left button. You want yours to have the icon of an open lock, say "make readonly?". If it says that, then you are able to click on "restore ms hosts file" and it should work.

yes mine did look like you described and i changed it to open lock and "makereadonly" and restored ms hosts file...thank you


full scan still running on malwarebytes......
downloaded the above link also to desktop...
thanks

harvey1964

aliEnRIK wrote: »

You need to find the download location

(usually C drive (this could be slightly wrong, not done XP in ages) DOCUMENTS AND SETTINGS \ USER \ DOWNLOADS)

Right click on the 'hx.exe' file youve just downloaded

when i rightclick on the hx file what do i click on then as there are several options going down "open" "run as" "scan " etc ...

aliEnRIK

harvey1964 wrote: »

when i rightclick on the hx file what do i click on then as there are several options going down "open" "run as" "scan " etc ...

its 'RUN AS'

But doesnt matter now as youve restored the hosts file anyways