Malware Removal Forums

Redirected Host Errors

jawkneew8 · 2010-04-11T00:22:27+00:00

Hello whoever you might be. Symptoms My in-laws had AVG for a long time as their antivirus protection, but their subscription expired. Before they could get a new program, they started having all sorts of popups saying that they weren't protected. I believe it was related to the Live PC virus that goes around. I downloaded Spybot Search and Destroy, and that seemed to fix the issue of the popups for a time. Some of the entries could not be removed, because they were in use. The ones that keep popping up in virus scans (and also on HijackThis) are in the following location: C:\WINDOWS\System32\drivers\etc\hosts. Now the popups are back, but they reference XP. I don't believe that they are the actual XP firewall error messages, because the screen that pops up asks you to authenticate the XP firewall program, and starts asking for personal information that shouldn't be given in order to access Windows Firewall on XP. They are also seeing problems using the internet. After this problem fir

26 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

jawkneew8

May 2, 2010, 6:21 PM UTC

Cipher,

I will go ahead and clean out the quarantined files from Norton, and then run through the rest of your instructions. Hooray for a virus-free computer!

Feel free to close this post.

jawkneew8

Cypher Admin/Teacher

May 2, 2010, 6:27 PM UTC

"jawkneew8" wrote:
Feel free to close this post.

will do good luck

Dakeyras MRU Honors Graduate

May 2, 2010, 9:46 PM UTC

As this topic is resolved,

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.