Hosts file keeps getting something added onto it

[SourceCode]

Hi there, so today while surfing the web I got infected by the Security Shield virus. After scanning my computer with MalwareBytes it detected 3 items and I deleted it. I was also aware that the Security Shield virus or rogue, was redirecting me onto different sites when I went and search on Google. It doesn't redirect me anymore but I notice that my Host file as some weird addons that keeps getting add to it. I'll copy it here the original and how it keeps getting changed evertime I go to a site even after I delete it.

Original:

# Copyright © 1993-2009 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

# 102.54.94.97 rhino.acme.com # source server

# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.

# 127.0.0.1 localhost

# ::1 localhost

Constantly changed version:

# Copyright © 1993-2009 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

# 102.54.94.97 rhino.acme.com # source server

# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.

# 127.0.0.1 localhost

# ::1 localhost

216.239.32.20 www.google.ae # bck9

216.239.32.20 www.google.at # bck9

216.239.32.20 www.google.be # bck9

216.239.32.20 www.google.ca # bck9

216.239.32.20 www.google.ch # bck9

216.239.32.20 www.google.cl # bck9

216.239.32.20 www.google.co.il # bck9

216.239.32.20 www.google.co.in # bck9

216.239.32.20 www.google.co.jp # bck9

216.239.32.20 www.google.co.kr # bck9

216.239.32.20 www.google.co.nz # bck9

216.239.32.20 www.google.co.uk # bck9

216.239.32.20 www.google.co.ve # bck9

216.239.32.20 www.google.co.za # bck9

216.239.32.20 www.google.com # bck9

216.239.32.20 www.google.com.ar # bck9

216.239.32.20 www.google.com.au # bck9

216.239.32.20 www.google.com.br # bck9

216.239.32.20 www.google.com.co # bck9

216.239.32.20 www.google.com.gr # bck9

216.239.32.20 www.google.com.hk # bck9

216.239.32.20 www.google.com.mx # bck9

216.239.32.20 www.google.com.my # bck9

216.239.32.20 www.google.com.pe # bck9

216.239.32.20 www.google.com.ph # bck9

216.239.32.20 www.google.com.pk # bck9

216.239.32.20 www.google.com.sg # bck9

216.239.32.20 www.google.com.tr # bck9

216.239.32.20 www.google.com.tw # bck9

216.239.32.20 www.google.com.ua # bck9

216.239.32.20 www.google.de # bck9

216.239.32.20 www.google.dk # bck9

216.239.32.20 www.google.es # bck9

216.239.32.20 www.google.fi # bck9

216.239.32.20 www.google.fr # bck9

216.239.32.20 www.google.it # bck9

216.239.32.20 www.google.lt # bck9

216.239.32.20 www.google.lv # bck9

216.239.32.20 www.google.nl # bck9

216.239.32.20 www.google.pl # bck9

216.239.32.20 www.google.pt # bck9

216.239.32.20 www.google.ro # bck9

216.239.32.20 www.google.ru # bck9

I am not sure if it was Security Shield that caused this, I hope there isn't any spyware from it still hidden inside my computer. I am not sure what these extra tags does but its annoying me. Can someone help? Is it safe or not and what is this actually doing.

Thank you!

[SourceCode]

I did not mean to make multiple threads of this topic. Everytime I posted it would say 400 Bad Request - Your browser sent a request that this server could not understand.

I did not know that it already posted.

[MrCharlie]

This post will be closed, posted here:

http://forums.malwarebytes.org/index.php?showtopic=112547&view=findpost&p=571146

MrC

[screen317]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!