Hosts file changed to hostsagb

[mmonti]

Hi,
I have noticed that my hosts file has been renamed to to hostsagb and a new hostfile is in place with a ton of crap in it.

My browser is running fine. I had an issue and ran adaware a week ago and things seemed fine. If I delete the hosts file and rename the hostsagb to hosts. The next time I boot the hosts file gets renamed to hostsagb and a new hosts file with the same crap is there.

Somewhere on my PC there is an .exe file which modifies my hosts file but I can not find it.

Any Ideas?

-Monti

 

[bcastner]

You have a Browser Helper Object creating this HOSTSAGB issue. This is a variation of the "servedby" malware.

Spybot Search and Destroy should take care of it.

http://www.spywareinfo.com/articles/hijacked/#removal

Be certain to update its definition files within the program before using it.

HijackThis! will also identify bad Browser Helper Objects, and could also be used.

Two at least two scans from smah's FAQ should then be done: faq760-3862 (I recommend Panda and Trend Micro).