Nasty Virus

[stfcinbmth]

On my grand-daughters PC running Win 7 Ultimate

I suspect it's something to do with KIWE9 toolbar which I think she got via MSN
If you try to go online the two browsers IE and Firefox just redirect you to a router login page, tho I can still access the $ly router.

So basically there is no internet access, it is not hard wired but wireless

I've tried all the usual suspects Malwarebytes, Spybot etc but as they can't be updated it's a bit of a pain. Also tried scanning in safemode to no avail
Also tried GMER and combofix

I still have a Kaspersky scanner to try

And yes I could reinstall it, but that's just too easy

Any suggestions?

[juddie]

si pie's your man for this...

[stfcinbmth]

si pie's your man for this...

I thought he might be, thanks juddie

[Simon Pieman]

Have you looked for any associated programs and tried to remove them?

I've not used win7 but I assume there is a system restore function like in other previous versions. Likewise I assume the 'run as administrator' is like Vista.

Make sure that system restore is turned off (yes you will lose your restore points but it's the only way to remove a stubborn virus etc.). Log in under safe mode and run all your scans as administrator (right click and run as admin).

Then log in normally and do the same, making sure you run under administrator.

[Batch]

just redirect you to a router login page

You mean a router other than your own. Some routers redirect to an "internet not available" page when the external (e.g.  ADSL) connection is down. I assume this is not the case here .

[Barry Scott]

Could this be a hosts file issue? I'm only throwing that out there because it's the one thing i know of and want to look clever if it is.

[stfcinbmth]

Have you looked for any associated programs and tried to remove them?

I've not used win7 but I assume there is a system restore function like in other previous versions. Likewise I assume the 'run as administrator' is like Vista.

Make sure that system restore is turned off (yes you will lose your restore points but it's the only way to remove a stubborn virus etc.). Log in under safe mode and run all your scans as administrator (right click and run as admin).

Then log in normally and do the same, making sure you run under administrator.

Yep there is a system restore which I've tried. No worries if I lose the restore points as I will reinstall if I get completely desperate.  So I'll knock system restore on the head and run all scans as Admin. Thanks for that.

@Batch, it's a non existent router, the connection is alive and well, as stated I can actually still access the $ly router, should I need to

If she's not a bit more careful I'll have to block MSN with OpenDNS, bless her. She's not allowed on youtube after her friends started showing scary vids which gave her bad dreams. It's a friggin minefield out there for kids

[stfcinbmth]

Could this be a hosts file issue? I'm only throwing that out there because it's the one thing i know of and want to look clever if it is.

Guess I could update the hosts file for you Barry

[stfcinbmth]

Hosts file not needed Barry sorry

si kaspersky scanner worked a treat many thanks for your help and advice

[Barry Scott]

Kaspersky is the bollocks. People who compile spyware, adware and viruses even say it's the best and that's all the recommendation i needed to use it before windows went in the bin.