Download and Install Ewido Anti-Malware© by Ewido Networks
Launch Ewido, there should be an icon on your desktop double-click it.
The program will now go to the main screen
You will need to update Ewido to the latest definition files.
On the main screen select the icon Update then select the Update now link
Next select the Start Update button, the update will start and a progress bar will show the updates being installed.
Close Ewido Anti-Malware
Reboot to Safe mode
Restart your computer and begin tapping the F8 key on your keyboard just before Windows starts to load
If done right a Windows Advanced Options menu will appear.
Select the Safe Mode option and press Enter
Once in Safe Mode,
Run Ewido Anti-Malware
Click on Scanner at top
Click on Settings
Once in the Settings screen click on Recommended actions and then select Quarantine
Under Reports, Select Automatically generate report after every scan
Un-Select Only if threats were found
Select the Scanner icon at the top and then the Scan tab then click on Complete System Scan
Ewido will now begin the scanning process, be patient this may take a little time
Once the scan is complete do the following :
If you have any infections you will prompted, then select Apply all actions
Next select the Reports icon at the top.
Select the Save report as button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
Close Ewido Anti-Malware
Reboot to Normal Mode
Have a look at the contents of your hosts file:
Open Windows' Notepad utility. In Notepad:
* Click on the "File" menu option.
* Click the "Open" option in the File menu.
* In the "Files of Type:" drop-down menu box, choose "All Files"
* In the "Look in:" drop-down menu box, navigate to the C:\Windows\System32\Drivers\etc folder.
* Double-click on the file named "hosts".
A default Windows hosts file contains only the following text:
If your hosts file contains entries beyond the "127.0.0.1 localhost" line, please post any entries below that line along with the Ewido log and a fresh HijackThis log here
Launch Ewido, there should be an icon on your desktop double-click it.
The program will now go to the main screen
You will need to update Ewido to the latest definition files.
On the main screen select the icon Update then select the Update now link
Next select the Start Update button, the update will start and a progress bar will show the updates being installed.
Close Ewido Anti-Malware
Reboot to Safe mode
Restart your computer and begin tapping the F8 key on your keyboard just before Windows starts to load
If done right a Windows Advanced Options menu will appear.
Select the Safe Mode option and press Enter
Once in Safe Mode,
Run Ewido Anti-Malware
Click on Scanner at top
Click on Settings
Once in the Settings screen click on Recommended actions and then select Quarantine
Under Reports, Select Automatically generate report after every scan
Un-Select Only if threats were found
Select the Scanner icon at the top and then the Scan tab then click on Complete System Scan
Ewido will now begin the scanning process, be patient this may take a little time
Once the scan is complete do the following :
If you have any infections you will prompted, then select Apply all actions
Next select the Reports icon at the top.
Select the Save report as button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
Close Ewido Anti-Malware
Reboot to Normal Mode
the first one says access was denied to the host file
Have a look at the contents of your hosts file:
Open Windows' Notepad utility. In Notepad:
* Click on the "File" menu option.
* Click the "Open" option in the File menu.
* In the "Files of Type:" drop-down menu box, choose "All Files"
* In the "Look in:" drop-down menu box, navigate to the C:\Windows\System32\Drivers\etc folder.
* Double-click on the file named "hosts".
A default Windows hosts file contains only the following text:
# Copyright (c) 1998 Microsoft Corp. #
# This is a sample HOSTS file used by Microsoft TCP/IP stack for Windows98
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhostIf your hosts file contains entries beyond the "127.0.0.1 localhost" line, please post any entries below that line along with the Ewido log and a fresh HijackThis log here
