intervalhehehe virus

[spikey6]

try running malwarebytes to see if that gets rid

[as6670]

Originally Posted by steviep

i tried what you suggested but i cant tell what has been added/modified.confused

If you see anything with an IP address then a web site after the IP remove it.

ie; 123.123.123.123 vvww.xxxx.com

all your host file should contain is what is posted in my other post in the quote

[ptolemy]

go to msn and use windows live help, takes for ever to scan and clean but should find and cure most probs

cheers

[balloonmoon]

I think I've managed to completely get shut of mine. It was failrly staightforward. I'm not allowed to post instructions on how to do it as it contains links to other sites and you need to have made 10 postings on here before you can add links.

but it basically involves

removing infected winrar from computer- use add/remove programs from control panel

running spybot (or another spyware remover) whcih should detect and remove virus (and annoying pop up)

clearing what the virus has put onto the PC's host file by downloading and running hijackthis

reseting your PC's host file to the default Microsoft configuration by downloading a program called hostsxpert and following the instructions.

Seemd to work for me. I just hope its completely off my system now.

[maskofadnan]

Hello Everyone,

Well, let me tell you my approach. I think this should work for you. Firstly, let me tell you that this does not seem to be a dangerous virus. It is just meant to force you to purchase their anti spyware.

To remove this "virus", go to the Windows\system32 folder. Out there, you should find a file "Explore.exe". It generally carries a icon of .rar or .zip files. Go ahead and delete the file. I read somewhere on the net that I need to restore my system after doing this, but I was not able to do a system restore for some reason. Till now, I have not seen that popup re-appearing.

However, till now, I was not able to navigate to some of the popular websites. To rsolve that issue, go to the Windows\System32\Drivers\Etc and check the file named host. In that, you will see a bunch of IP addresses associated with the sites. Just go ahead and delete them.

Hope this helps.

Regards,
Adnan A

[steviep]

i did a system restore which appears to have cured the problem also ran microsoft malicious software removal tool after system restore and no problems were found

[Analoguesat]

This is a warning for all folk to only ever download software from trusted vendors. You can get all sorts of nasties by just downloading stuff from any old place.

[ChannelDelibird]

I'm still having trouble accessing sites like Google. I've tried deleting the contents of the host file but when I try to save over it says 'cannot create the file. make sure the file and path name are correct' even though I am saving over not creating a new file. What can I do?

[kennystringer]

I fell prey to this bastard of a thing too. My AVG seemed to clean up the nasty files but I still couldn't open google. I deleted the IP's followed by web addresses in the host file and that solved the problem. But now my host file is completely empty, is that a problem? Everything seems to be working ok. Thanks for any advice on this.
Cheers...

[sharkbait559]

If this was me id put alll files i need on a usb stick or external hard drive and install a new OS on the machine, just be careful in the future.