My computer got infected from a banner ad, and I ran a boot scan which seems to have cleaned up all of the infected files. However it seems to still have something running that is intercepting DNS and resolving any Antivirus sites as 127.0.0.1 so avast can’t update it’s signatures. Any ideas how to correct this? I checked the hosts file and it is fine, and I checked the registry is pointing to the correct path for the hosts file. My virus signatures are from 10/17, is there a way to manually update the signatures?
Could it be a DNS hijack, or even a router hijack?
A HijackThis! log may help.
Fixwareout may help:
http://forums.majorgeeks.com/showthread.php?t=95472
If not try SuperAntiSpyware, Spybot, AdAware etc.
If all that fails, try reseting your router: some malware even changes settings there now.
EDIT: It might be worth checking out the registry key mentioned here too:
http://www.f-secure.com/v-descs/dnschang.shtml
DNS hijacks usually re-direct to scam sites, but they could equally well redirect searches for anti-vırus sites- worth checking out, anyway…
Please, do not ask twice the same… just double the help effort…
http://forum.avast.com/index.php?topic=39499.msg331275#msg331275