You know you are infected when u click on any search results on a page and it sends you to a wrong page.
This is happening because your host IP address (127.0.0.1) has been redirected to other sites.
You could check this by following the below steps:
(1) Click START > RUN > and type in "C:\windows\system32\drivers\etc\hosts"
(2) When prompted, open the HOSTS file in either Notepad or Wordpad
(3) Delete all the lines of IP addresses in the text document except for "127.0.0.1 localhost".
This might only solve the problem temporarily.
There is a powerful tool - ComboFix
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
This ComboFix program is a DOS-looking window that works like magic -- it looks for "rootkit" activity that apparently the others don't even consider.
This is happening because your host IP address (127.0.0.1) has been redirected to other sites.
You could check this by following the below steps:
(1) Click START > RUN > and type in "C:\windows\system32\drivers\etc\hosts"
(2) When prompted, open the HOSTS file in either Notepad or Wordpad
(3) Delete all the lines of IP addresses in the text document except for "127.0.0.1 localhost".
This might only solve the problem temporarily.
There is a powerful tool - ComboFix
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
This ComboFix program is a DOS-looking window that works like magic -- it looks for "rootkit" activity that apparently the others don't even consider.
No comments:
Post a Comment