Avast Enhanced Protection Mode?

[DavidR]

I have the same issue, but on a laptop Windows 7 yet i cannot connect to the internet at all, if i do my wifi router/cable modem beocmes disabled.

How are you connecting right now ?
Use that system to download tools and get help.

But don't reply or do that in this topic - Please create your own new topic, here http://forum.avast.com/index.php?board=4.0 in the viruses and worms forum and click the New topic button at the top of the page and we will try and help you there.

[gyorodika]

I fuond a similar problame. I I did everythink which you write and I'm did the OTS scan. But I don't know what is the next station. Please help me.
The facebook is in block, but nothing else.

[CraigB]

I fuond a similar problame. I I did everythink which you write and I'm did the OTS scan. But I don't know what is the next station. Please help me.
The facebook is in block, but nothing else.

As has been mentioned to so many others in this thread ( create your own topic )

[deuceloosely]

RogueKiller V5.3.3 [08/18/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Deuce [Admin rights]
Mode: Remove -- Date : 08/22/2011 00:00:46

Bad processes: 2
[SUSP PATH] 1030855424:4284780226.exe -- c:\windows\1030855424:4284780226.exe -> KILLED [TermProc]
[RESIDUE] 1030855424:4284780226.exe -- c:\windows\1030855424:4284780226.exe -> KILLED [TermProc]

Registry Entries: 0

Particular Files / Folders:

HOSTS File:
127.0.0.1       localhost
127.0.0.1 facebook.com
127.0.0.1 www.facebook.com
127.0.0.1 af-za.facebook.com
127.0.0.1 az-az.facebook.com
127.0.0.1 id-id.facebook.com
127.0.0.1 ms-my.facebook.com
127.0.0.1 bs-ba.facebook.com
127.0.0.1 ca-es.facebook.com
127.0.0.1 cs-cz.facebook.com
127.0.0.1 cy-gb.facebook.com
127.0.0.1 da-dk.facebook.com
127.0.0.1 de-de.facebook.com
127.0.0.1 et-ee.facebook.com
127.0.0.1 en-gb.facebook.com
127.0.0.1 es-la.facebook.com
127.0.0.1 eo-eo.facebook.com
127.0.0.1 eu-es.facebook.com
127.0.0.1 tl-ph.facebook.com
127.0.0.1 fo-fo.facebook.com
[...]


Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt



The OTS file:
http://www.mediafire.com/?exfgjcx6bzmb9tj

I had to copy and paste it in a new document because I was getting some "common language" error when trying to save through Notepad.

[DavidR]

In the meantime, you could remove these entries from your HOSTS file manually.

HOSTS file redirect a common malware tactic to block AV sites making it difficult to remove malware; the same is true if they want to block facebook in your case - 127.0.0.1 check your HOSTS file using notepad or a text editor of your choice, C:\WINDOWS\system32\drivers\etc\hosts or do a search for HOSTS to find it if not there.
 
Once open you are looking for entries with those facebook.com entries on the line, you can remove those lines and save the file. http://en.wikipedia.org/wiki/Hosts_file

Note, when saving the file, notepad may have a whinge as there is no file type for the HOSTS file; ensure that the file type is set to all files and it should comply with the fact it hasn't got a file type/extension. You may, depending on your OS have the UAC have a whinge, so you may need to run that text editor (notepad, etc.) as an administrator.

[essexboy]

The mediafire lonk is not working

Could you re-upload again please

[apocalypso]

Code: [Select]

RogueKiller V5.3.3 [08/18/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

Operating System: Windows 7 (6.1.7600 ) 32 bits version
Started in : Normal mode
User: Jakov [Admin rights]
Mode: Remove -- Date : 08/27/2011 12:30:42

Bad processes: 0

Registry Entries: 1
[HJ NAME] HKLM\[...]\Run : tray_ico1 (C:\Windows\update.tray-8-0\svchost.exe) -> DELETED

Particular Files / Folders:

HOSTS File:
127.0.0.1       localhost
127.0.0.1 facebook.com
127.0.0.1 www.facebook.com
127.0.0.1 af-za.facebook.com
127.0.0.1 az-az.facebook.com
127.0.0.1 id-id.facebook.com
127.0.0.1 ms-my.facebook.com
127.0.0.1 bs-ba.facebook.com
127.0.0.1 ca-es.facebook.com
127.0.0.1 cs-cz.facebook.com
127.0.0.1 cy-gb.facebook.com
127.0.0.1 da-dk.facebook.com
127.0.0.1 de-de.facebook.com
127.0.0.1 et-ee.facebook.com
127.0.0.1 en-gb.facebook.com
127.0.0.1 es-la.facebook.com
127.0.0.1 eo-eo.facebook.com
127.0.0.1 eu-es.facebook.com
127.0.0.1 tl-ph.facebook.com
127.0.0.1 fo-fo.facebook.com
[...]


Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

[essexboy]

apocalypso could you start your own thread please and post an OTL log along with the symptoms you are experiencing