Continued - pressed the enter button too early

My father in laws pc got attacked by the anti virus plus trojan at the weekend, and I spent a couple of hours sorting it out for him. I think there's still some of it luring around as his host file in c:windowssystem32driversetc has a bundle of ip addresses that shouldn't be there (I think)

Am I correct in thinking that the only entry (or two) that should be there is

127.0.0.1 localhost
::1 localhost

ignoring the #'d out parts.

All I think that I need to do is to replace his hosts file with my one.

Cheers
Tim

Posted By: KentonCanary, Apr 12, 21:06:24