Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Somehow I have some malware that my virus protection will find but will not let me delete.

Spybot says I have global hosts and will find them but will not let me do anything with them. It is redirecting Internet Explorer and is causing the PC to run badly.

How do I get rid of this malware?

I have Windows XP.

share|improve this question
add comment

5 Answers

IMO, these days the only correct response to a confirmed malware infection is to backup your data, format your hard drive, re-install windows, and then restore your apps and data.

share|improve this answer
    
It's a great fool-proof solution, but it's not the only way. –  Fosco Aug 18 '10 at 18:32
    
@Fosco But it is often a quicker way. How long should one spend trying to eradicate a problem versus backing up and starting from scratch? From a cost-benefit standpoint if it's going to take you longer to try to remove the virus than to backup and refresh, then don't try removing the virus; it's a waste of time. –  Michael Todd Aug 20 '10 at 5:54
    
@Michael, I agree 100%. I'm usually the one telling people to format, and they hate hearing it. –  Fosco Aug 20 '10 at 12:57
add comment

Download a free copy of Microsoft Security Essentials - http://www.microsoft.com/security_essentials/default.aspx and do a full scan. That should delete it. Keep MSE on your computer. I find that it works very well.

share|improve this answer
add comment

I do agree with prev poster about formatting, however sometimes you would like to just get it free from virus to format it at a later time. F-Secure has a live-cd that can identify and rename all viusfiles (hence making them impossible to run at boottime if the virus isnt mutating): http://www.f-secure.com/linux-weblog/2008/06/19/f-secure-rescue-cd-300-released/

share|improve this answer
add comment

You could try booting into Safe Mode and then seeing if your tools will be able to delete the infections. You might also try MalwareBytes just to get another tool involved.

This site has links to quite a few free rescue CD's from many of the major companies:

http://www.askvg.com/download-free-bootable-rescue-cds-from-kaspersky-bitdefender-avira-f-secure-and-others/

The rescue CD definitions are often updated daily. You may need to check the help section in your CD burning software to see how to create an ISO CD. Then boot your PC from the rescue CD and follow the on-screen instructions.

Good luck.

share|improve this answer
add comment

Open C:\windows\system32\etc\drivers\hosts in notepad and delete every line that doesn't start with # and is not 127.0.0.1 localhost.

Open Task Manager and locate any suspicious executables, like all garbage names.. find those files on the drive, right click on them and pick properties, find the security tab, and remove ALL permissions from ALL users for those executables. Reboot. Do this again. Reboot again.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.