Oh Sh*T! Not again....

[tyuun]

So it seems I have once again gotten a virus. I ran all kinds of anti-virus, trojan hunters, anti-spam, adaware and cleaned my comp as best as I could. However, there is one problem I am still having and any help would be much appreciated. Ok, so if I google something and click on a link it takes me to a different page, constantly (although only 3 times in a row). So I click it and then it says 85.255.115.163 then takes me wherever it feels like. Can anybody help me figure out how to stop this bullsh*t?!

[TechZ]

There is an excellent guide on the forums tyuun, written by NooNoo, go through those steps and dont miss the HijackThis program.

http://forums.windrivers.com/showthread.php?t=57348

[houseisland]

In addition to following the above advice...


1. Check your hosts file and make sure it has not been tampered with.

C:\WINDOWS\system32\drivers\etc

Normally it should look like this:

__________________________________________________ _____

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

________________________________________________-

2. Open a command prompt window. At the command prompt, type: ipconfig /all Then press enter. Among other things, there will be listings for your DNS servers. Write down the IP addresses given in the DNS entries; they should be the same as the name servers for your ISP or your network.