PDA

View Full Version : keep having these detections in spybot



Ulf_Elikyn
2011-01-31, 03:10
Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
4-open-davinci.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
securitysoftwarepayments.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
privatesecuredpayments.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
secure.privatesecuredpayments.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
getantivirusplusnow.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
secure-plus-payments.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
www.getantivirusplusnow.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
www.secure-plus-payments.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
www.getavplusnow.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
safebrowsing-cache.google.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
urs.microsoft.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
www.securesoftwarebill.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
secure.paysecuresystem.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
paysoftbillsolution.com=74.125.45.100

Fraud.WindowsProtectionSuite: [SBI $B197733A] Redirected host (Redirected host, nothing done)
protected.maxisoftwaremart.com=74.125.45.100

Microsoft.Windows.RedirectedHosts: [SBI $B89FBA81] Redirected host (Redirected host, nothing done)
www.securesoftwarebill.com=74.125.45.100

Microsoft.Windows.RedirectedHosts: [SBI $19781685] Redirected host (Redirected host, nothing done)
secure.paysecuresystem.com=74.125.45.100

Microsoft.Windows.RedirectedHosts: [SBI $CEFF52BA] Redirected host (Redirected host, nothing done)
paysoftbillsolution.com=74.125.45.100


I have had a tech help me clean up bad widespread infection on this computer and it went alot faster. He walked me through combofix, mbam and ran Superantispyware and atf cleaner along with ccleaner and did a checkdisk. No matter what I do I cant get these detections removed so should I give up?

spybotsandra
2011-01-31, 13:15
Hello,

Please delete your old host file.
It should be stored here:
Windows 2000/XP/NT: C:\windows\system32\drivers\etc

Then download a new host file from this site (http://www.mvps.org/winhelp2002/hosts.txt).

This is how to do it:
Create a new txt file with notepad on your desktop.
Therefore right click your desktop, choose "New", then choose "Text Document".
Name it hosts. Then right click and choose rename.
Now remove the .txt so that you have a file without any extensions, just named hosts.
Then go to this site (http://www.mvps.org/winhelp2002/hosts.txt).
Mark the whole text. Then copy the whole text.
Open your new hosts file and insert the copied text here.
Save the file.
Now move the file by copy and paste to:
C:\windows\system32\drivers\etc

Best regards
Sandra
Team Spybot

Ulf_Elikyn
2011-02-01, 21:28
Hello,

Please delete your old host file.
It should be stored here:
Windows 2000/XP/NT: C:\windows\system32\drivers\etc

Then download a new host file from this site (http://www.mvps.org/winhelp2002/hosts.txt).

This is how to do it:
Create a new txt file with notepad on your desktop.
Therefore right click your desktop, choose "New", then choose "Text Document".
Name it hosts. Then right click and choose rename.
Now remove the .txt so that you have a file without any extensions, just named hosts.
Then go to this site (http://www.mvps.org/winhelp2002/hosts.txt).
Mark the whole text. Then copy the whole text.
Open your new hosts file and insert the copied text here.
Save the file.
Now move the file by copy and paste to:
C:\windows\system32\drivers\etc

Best regards
Sandra
Team Spybot

Ok I just tried that and it said access was denied thing etc to fix them and had to click ok a bunch of times. Would it make a difference in safe mode?