Arconsin
2010-05-15, 04:37
Situation :
Received a computer from a coworker they wanted me to work on. Got a nasty virus in it, which prevented MalwareBytes/Spybot from flat out running. Got the easy work around with CCleaner (stopped the loadup program, reboot, Safe Mode). Was able to run the program's.
Malware was able to run fine removed the Malware related problems, 618 of them. Reboot. (Ran Full Scan, software fully updated)
Run Spybot. 151 issues. Fix Problems. Cleared all but 18. The 18 it couldn't clear comes up with this lovely message :
Unexpected Error in Fixing Problems
(Cannot create file
"C:\WINDOWS\System32\drivers\etc\hosts". Access is denied)
The entries are :
Fraud.WindowsProtectionSuite (15 entries Malware)
Microsoft.Windows.RedirectedHosts (3 entries Security C)
Under the Fraud.WindowsProtectionSuite most of the sub entries under this are:
Redirected host (all of them for Kind)
(SBI $B197733A) Redirected host
[Random Website]=74.125.45.100
Under the Microsoft.Windows.RedirectedHosts all Sub's are {Kind : Redirected Host, with 74.125.45.100 ip, format similar to the Fraud, just diffrent SBI numbers and Random Websites.
I have done some google searching, found alot of similar issues to mine, and tried some of the fix's, but to no resolve. The issues started with a 'program/Virus' installed itself named 'My Security Engine'.
So if anyone would be so kind as to help me, it would be most helpful.
Received a computer from a coworker they wanted me to work on. Got a nasty virus in it, which prevented MalwareBytes/Spybot from flat out running. Got the easy work around with CCleaner (stopped the loadup program, reboot, Safe Mode). Was able to run the program's.
Malware was able to run fine removed the Malware related problems, 618 of them. Reboot. (Ran Full Scan, software fully updated)
Run Spybot. 151 issues. Fix Problems. Cleared all but 18. The 18 it couldn't clear comes up with this lovely message :
Unexpected Error in Fixing Problems
(Cannot create file
"C:\WINDOWS\System32\drivers\etc\hosts". Access is denied)
The entries are :
Fraud.WindowsProtectionSuite (15 entries Malware)
Microsoft.Windows.RedirectedHosts (3 entries Security C)
Under the Fraud.WindowsProtectionSuite most of the sub entries under this are:
Redirected host (all of them for Kind)
(SBI $B197733A) Redirected host
[Random Website]=74.125.45.100
Under the Microsoft.Windows.RedirectedHosts all Sub's are {Kind : Redirected Host, with 74.125.45.100 ip, format similar to the Fraud, just diffrent SBI numbers and Random Websites.
I have done some google searching, found alot of similar issues to mine, and tried some of the fix's, but to no resolve. The issues started with a 'program/Virus' installed itself named 'My Security Engine'.
So if anyone would be so kind as to help me, it would be most helpful.