Google sending me to Russia!

DVardysShadow

Hintza wrote: »

Windows\system32\drivers\etc\

That is as deepas that goes and then it has:-

lmhosts
networks
protocol
services

no sign of an entr that you describe there.

Are you logged on with admin privs? You shouldn't be normally, but for this kind of investigation, you sometimes need to be. Could it be that the hosts file is there but invisible

clinteestwood

I presume you've already deleted your cache & history?? malwarebytes or any other free alternative i would agree with and you cant live without Hijackthis... its A+. When that is fixed to ensure that this doesnt happen again, your should stay off those dirty sites!!! ;-)

Hintza

clinteestwood wrote: »

your should stay off those dirty sites!!! ;-)

Ha ha .......this is the OH laptop (god she would kill me :eek:). We are in the caravan just now doing a new build so I tend to se this just now as the PC is stuck way in a corner.

This is an old Toshiba (2005ish) on a very slow wireless connection that drives me nuts at the best of times.

I do have a feeling a clean reinstall might be best b ut I have to take my PC expert out to lunch yo do this and i just don't have the time just now.

Hintza

OK running a full malaware scan first will take awhile (55 mins grr) will report back.

clinteestwood

Hintza wrote: »

Ha ha .......this is the OH laptop (god she would kill me :eek:). We are in the caravan just now doing a new build so I tend to se this just now as the PC is stuck way in a corner.

This is an old Toshiba (2005ish) on a very slow wireless connection that drives me nuts at the best of times.

I do have a feeling a clean reinstall might be best b ut I have to take my PC expert out to lunch yo do this and i just don't have the time just now.

OH,,,, lol. As for the wireless, if you wanted to improve it you could do fresh reinstall, Can you tell me what the hardware specs are? if i was you i would download the 10.10 (maverick) version of Ubuntu and install that. I THINK the install process is quite simplified for meerkat. (IF you do decide to get it, dont get 11.04 - natty) its still not yet stable.

Hintza

clinteestwood wrote: »

OH,,,, lol. As for the wireless, if you wanted to improve it you could do fresh reinstall, Can you tell me what the hardware specs are? if i was you i would download the 10.10 (maverick) version of Ubuntu and install that. I THINK the install process is quite simplified for meerkat. (IF you do decide to get it, dont get 11.04 - natty) its still not yet stable.

Speak English! :rotfl:

closed

scan (and fix) with this, then post a hijackthis log

http://support.kaspersky.com/downloads/utils/tdsskiller.exe

check and delete your proxy settings in internet explorer, tools, internet options, connections


delete your hosts file

fix anything found with malwarebytes before closing

Hintza

Here is the latest scan which would appear to show nothing.

You guys have offered a couple of contradictory moves to try next which one do you think I should do first?


Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 6511
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
05/05/2011 10:18:16
mbam-log-2011-05-05 (10-18-16).txt
Scan type: Full scan (C:\|)
Objects scanned: 212461
Time elapsed: 1 hour(s), 13 minute(s), 30 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)

clinteestwood

Hintza wrote: »

Here is the latest scan which would appear to show nothing.

You guys have offered a couple of contradictory moves to try next which one do you think I should do first?


Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 6511
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
05/05/2011 10:18:16
mbam-log-2011-05-05 (10-18-16).txt
Scan type: Full scan (C:\|)
Objects scanned: 212461
Time elapsed: 1 hour(s), 13 minute(s), 30 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)

Run hijackthis.

closed

tdsskiller and hijack are quick