Continued - pressed the enter button too early

My father in laws pc got attacked by the anti virus plus trojan at the weekend, and I spent a couple of hours sorting it out for him. I think there's still some of it luring around as his host file in c:windowssystem32driversetc has a bundle of ip addresses that shouldn't be there (I think)

Am I correct in thinking that the only entry (or two) that should be there is

127.0.0.1 localhost
::1 localhost

ignoring the #'d out parts.

All I think that I need to do is to replace his hosts file with my one.

Cheers
Tim

Posted By: KentonCanary on April 12th 2009 at 21:06:24

Message Thread

Techie Help (NCFC) - KentonCanary, Apr 12, 21:01:32
- To be continued - (n/m) (NCFC) - KentonCanary, Apr 12, 21:01:52
  - Continued - pressed the enter button too early (NCFC) - KentonCanary, Apr 12, 21:06:24
    - buy him a new computer (NCFC) - Tombs, Apr 12, 21:16:59
      - surely... (NCFC) - Alan, Apr 12, 21:22:01
        
        sounds very technical (NCFC) - Tombs, Apr 12, 21:24:35
        
        all very straight forward to be far... (NCFC) - Alan, Apr 12, 21:28:50
        
        eh? (NCFC) - Tombs, Apr 12, 21:34:10
        
        oooh, well its more straight forward in practice honestly (n/m) (NCFC) - Alan, Apr 12, 21:36:16
        
        fair* (n/m) (NCFC) - Alan, Apr 12, 21:31:12
    - Looks like a University Project but believe me this thing really works........... (NCFC) - DrDublin, Apr 12, 21:13:55
      - Try This... (NCFC) - Martin Peters, Apr 12, 21:19:15
        
        Thats Come Out Wrong- (NCFC) - Martin Peters, Apr 12, 21:21:23
        
        FFS!! (NCFC) - Martin Peters, Apr 12, 21:23:00
        
        Had the same on my original post (NCFC) - KentonCanary, Apr 12, 21:39:40
    - had that!! (NCFC) - Alan, Apr 12, 21:13:22
      - Thanks All, (n/m) (NCFC) - KentonCanary, Apr 12, 21:30:46
        
        I managed to remove anti-virus plus from his PC (NCFC) - KentonCanary, Apr 12, 21:38:17
        
        It sounds like it could be ok... (NCFC) - Alan, Apr 12, 21:41:15
        
        The dodgy dll was in a system folder (NCFC) - KentonCanary, Apr 12, 21:47:32
        
        Avast is probably the most decent anti virus i have found.. (NCFC) - Alan, Apr 12, 21:50:00

Reply to Message

In order to add a post to the WotB Message Board you must be a registered WotB user.

If you are not yet registered then please visit the registration page. You should ensure that their browser is setup to accept cookies.