i got trojan horse every site i visited....

[gripos]

i just edit the host file and enabled the avast and restart the browser....

still poping

[essexboy]

Add a further line to the host file

127.0.0.1 toolbar.mywebacceleration.com

[fire]

I'm getting some legitimate sites blocked also,,I forgot how to take a screen shot,,if someone reminds me I'll do it. Thanks.

[DavidR]

I'm getting some legitimate sites blocked also,,I forgot how to take a screen shot,,if someone reminds me I'll do it. Thanks.

Legitimate sites means nothing, being legitimate doesn't make them immune to being hacked. People wouldn't believe us when piriform.com forums appeared to have been hacked.

Since this topic involves malware removal, you should create your own new topic so as not to confuse this one.

[gripos]

host file content

Code: [Select]

127.0.0.1       localhost


127.0.0.1 mywebacceleration.com










[essexboy]

Could you make your host file like this

127.0.0.1       localhost
127.0.0.1       mywebacceleration.com
127.0.0.1       toolbar.mywebacceleration.com

There is a tab space between  127.0.0.1 and mywebacceleration.com etc

[gripos]

i tried that in host file.. restart the pc...

still popping...

[essexboy]

Is it for the same address ?

[gripos]

scrennie

[essexboy]

Hmm now where is it hiding is the question

Download the latest version of TDSSKiller from here and save it to your Desktop.
 
 

• Doubleclick on TDSSKiller.exe to run the application
  
  
  
• Then click on Change parameters.
   
  
   
  
• Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.
   
  
• Click the Start Scan button.
   
   
  
• If a suspicious object is detected, the default action will be Skip, click on Continue.
   
  
   
  
• If malicious objects are found, they will show in the Scan results and offer three (3) options.
• Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.
  
  
• Get the report by selecting Reports

 

• Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
  

Please copy and paste its contents on your next reply.

[gripos]

TDDSSKiller LOG

[essexboy]

If there were more instances of this I would be thinking false positive, but so far (as far as I can see) there are only two instances

Please RIGHT-CLICK HERE and Save As (in IE it's "Save Target As", in FF it's "Save Link As") to download Silent Runners.

• Save it to the desktop.
• Run Silent Runner's by doubleclicking the "Silent Runners" icon on your desktop.
• You will receive a prompt:

Do you want to skip supplementary searches?
click NO[/list]

• If you receive an error just click OK and double-click it to run it again - sometimes it won't run as it's supposed to the first time but will in subsequent runs.
• You will see a text file appear on the desktop - it's not done, let it run (it won't appear to be doing anything!)
  
• Once you receive the prompt All Done!, open the text file on the desktop, copy that entire log, and paste it here.
  

*NOTE* If you receive any warning message about scripts, please choose to allow the script to run.

[gripos]

log

[essexboy]

Did you install Connectify ?

[gripos]

Yup i install connectify...

keeps popping
i change the sim of my network still there, i think its on the widget