Host Files

[CCMUA2009]

sorry I know I'm an annoying dunsky, but not seeing how to do the HJT log, even from ShanOws link

[mountaintree16]

Well, first you need to download HiJackThis B) Do you have it downloaded already? If not, I can get you a link.

However, the helpers in the forum really need the info from the logs generated by the programs in this post here:

http://www.malwarebytes.org/forums/index.php?showtopic=9573

Then when you are finished with that, you post here:

http://www.malwarebytes.org/forums/index.php?showforum=7

[CCMUA2009]

ok went to C:\Windows\System32\drivers|etc

Opened the etc folder saw the host file. Clicked to open and

1.It asked what I wanted to use to open it. I chose notepad, was that correct choice??

2. When I opened it I just saw the samples/examples they gave, nothing else, except near the bottom there was the

127.0.0.1

3. there was also another file

lmhosts which was a SAM file

iopened that with notepad too and it just seemed to have examples listed, nothing more

[chimpy]

Yup Notepad is the right choice and the 127.0.0.1 sounds fine too, as to the SAM file that I do not really know about other than it holds the passwords for all the accounts on the computer.

[swagger]

CCMUA2009,

The lmhosts.sam file is fine. If you see lmhosts without the extension, that is an infected file.

Regards,

swagger