Help with goingonearth virus please

Hi,

Sorry its taken so long to reply - I was waiting for confirmation from another member, but hadn't heard back then.

Please follow these steps exactly:

1. Open NotePad.
2. Copy & paste the following the new Notepad file, and save the file as flush.bat on your desktop.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

3. Right-click on flush.bat on your desktop, and choose run as administrator. The PC will shut-down. Reboot it, and now try to connect to the internet in the usual way.

Regards,
Golden

Hi,

Were you not connected to the internet when you ran the .BAT file?

Regards,
Golden

OK. Lets try something different: an on-line scan using ESET's online scanner:

Free ESET Online Antivirus Scanner

Please perform the scan - it will take some time, and then post any results here. In the meantime, I'll ask a security expert to have a look at this thread as soon as they get a chance.

It might also help if you list your current security software setup e.g. Norton, MSE etc.

Regards,
Golden

I found this little item:

Manual removal of Goingonearth.com infection is a difficult task, we recommend you to use our Automatic Spyware removal tool. This is a safe and easy method. Download Goingonearth.com Removal Tool to automatically remove Goingonearth.com.

I scanned it with Norton & MSE & They tell me it's clean.

It's at this site which also offers advice to manually remove it:

Uninstall/ Remove Goingonearth.com, Learn How To Remove Goingonearth.com Easily | Killallvirus.com

The files you are looking for may not be showing up for various reasons. Generally I find that using Agent Ransack shows me more files then Windows search shows me, even the hidden ones. You can d/l it here & it's free. I've had a few instances where this utility brought up the files I was looking for while Windows search revealed nothing.

http://mythicsoft.com/page.aspx?type...sack&page=home

If the infection is rooted that deeply, you may well want to consider doing a re-install, at least you will know that you have a clean start.

Hi,

This is probably not the news you want to hear, but having spoken to out security experts, it appears that your best course of action might be a clean install as suggested by Borg.

The consensus appears to be that you have some deeply imbedded bits of the malware in your system that the standard tools are just not capable of tracking down - and you have tried quite a few of these tools.

My suggestion is to bite the bullet, and perform a clean installation (assumming you have a retail Windows 7 DVD):

Clean Install Windows 7

Sorry the news couldn't be any better.

Regards,
Golden