Removed Rouge.WinAVPro, now computer is unable to access Internet

Factual Questions
1

What it says in the title. Little help, please?
Posting this from A.C.'s laptop.

2

Check your browsers proxy settings - many viruses configure a local proxy to filter/track/modify browser requests. Your system may have been cleaned up, removing the proxy, but the browser is still trying to use it.

Si

3

What OS you using? XP? Win7?

4

There’s your problem, you removed the rouge, not the rogue.

5

Before I left for work, I initiated a system restore from the earliest point possible. That’s Friday; the rogue apparently snuck in on Sunday.

The problem is that network discovery will only see the LAN, as if it gets stuck in a loop.

Vista.

:smack:
Blame a certain bat.

6

So it is not seeing the wireless network you wish to connect to?

7

My computer is connected directly to the gateway. It sees the network but that’s as far as it gets. Network and Sharing Center shows that it keeps searching for the LAN even though it sees it.

8

Do you have a router and a modem, a combined router/modem, or just a modem by itself?

9

Try this:

Also try Control Panel / Network Settings (or however you do this in Vista). Right-click your LAN connection and check the properties - the virus may have modified the DNS settings to redirect queries to alternative locations. For a typical system the IP address should be automatically set and there should be no entry for a DNS server.

Also check the file
C:\WINDOWS\SYSTEM32\drivers\etc\hosts
This should only contain an entry for
127.0.0.1 localhost
Additional entries may have been added by the virus (unless you use a hosts file adblocker).

Try another browser. Download Portable Firefox from portableapps.com and stick it on a USB stick. Use that on your PC to see if that works.

Si

10

Combined. Other computers on the network, both wired and wireless, have full access.

11

Thanks, this should help. Aurora was getting redirected whenever I tried accessing removal information and new tabs sometimes came out of nowhere when changing pages.

12

If this is the case, I agree with si_blakely, check your hosts file. Here is a Microsoft wizard to reset it.

13

BTW: AFAIK, the source was a Tropes page. At least that’s where I was when the thing managed to sneak in. I did give them a heads-up in email.

14

That worked! Back on the Net and no sign of AV Protection 2011. I’m going to run AVG just in case.

Thanks for the suggestions; they could help someone else dealing with a hijacker.