V I P E R L A I R .com - Forums  

Go Back   V I P E R L A I R .com - Forums > Hardware and Software > OS related, Software and Security

Reply
 
Thread Tools Display Modes
  #1  
Old 02-26-2009, 05:52 PM
TheFunnyGuy's Avatar
TheFunnyGuy TheFunnyGuy is offline
n00b
 
Join Date: Mar 2004
Location: Montreal, QC
Posts: 11
TheFunnyGuy is on a distinguished road
Thanks. I'll try Spybot. I wonder if AVG Free has a boot time scan. If not I'll try Avast.

FYI - If you ping the AVG website (or any other site that's being re-directed/blocked) from a clean PC, you can use that IP to navigate the site on the infected PC.
Reply With Quote
  #2  
Old 02-26-2009, 07:10 PM
LoTekGuru's Avatar
LoTekGuru LoTekGuru is offline
g0m0-in-training
 
Join Date: Jul 2002
Location: Lexington, KY
Posts: 117
LoTekGuru is on a distinguished road
This might be a long shot, but for the website re-directs, it could be as simple as checking your hosts file to make sure that they aren't just being redirected from there.
Open regedit and browse to this key:
"\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Serv ices\Tcpip\Parameters" and look for an entry named "DatabasePath", to determine that the virus hasn't changed the location of your hosts file. The default location should be %SystemRoot%\system32\drivers\etc\ where %SystemRoot% is your windows install directory. By default %SystemRoot% will be C:\Windows (so, the default path should be c:\windows\system32\drivers\etc, and the hosts file should be in the "etc" directory)
Close regedit and browse to the directory specified in that registry key. Open the hosts file with notepad (there is no extension, the file is just named "hosts"). You should see a few lines of text that will be preceeded with a # symbol, and the following two entries: KEEP THESE ENTRIES
Code:
127.0.0.1       localhost
::1             localhost
Any other lines, especially if they start with 127.0.0.1 and have an antivirus website tagged to them such as this:
Code:
127.0.0.1     avg.com
127.0.0.1     avgfree.com
127.0.0.1     trendmicro.com
127.0.0.1     pccillinsecurity.com
will need to be deleted. after deleting these entries, save the file. changes should take effect immediately, and hopefully if you found anything like this, you will now be able to successfully browse to the sites you need to get to.
__________________
Joo Fargin' Sneeeeeky Bastage!
Gigabyte GA-MA770T-UD3P
Phenom II x3 720 @ 3 GHz.
4GB Mushkin DDR3-10666 (1333 MHz.), 7-7-7-20
2GB Sapphire Radeon 4870 Vapor-X
Creative X-Fi Music Extreme sound card
Reply With Quote
  #3  
Old 03-01-2009, 10:02 PM
TheFunnyGuy's Avatar
TheFunnyGuy TheFunnyGuy is offline
n00b
 
Join Date: Mar 2004
Location: Montreal, QC
Posts: 11
TheFunnyGuy is on a distinguished road
I've already checked the host files (in their default location) but haven't looked at the registry key.

Thank you. I'll take a look. All suggestions are greatly appreciated.
Reply With Quote
Reply
  V I P E R L A I R .com - Forums > Hardware and Software > OS related, Software and Security

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 07:04 PM.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
All trademarks used are properties of their respective owners. Copyright © 2001-2004 Viper Lair
[Output: 36.11 Kb. compressed to 33.77 Kb. by saving 2.34 Kb. (6.48%)]