Daughters laptop is executing an IE http://46.165.229.28/wpad.dat?bunch of charactersfollowingit

[benld74]

I can see it in the task manager. I know its malware. I have avast loaded and running, but it doesn't see it. I have a ticket into Avast telling them so. I have ownloaded MAlwarebytes(free version), executed it, and it is still there! I then downloaded Microsoft Malicious Software Removel Tool, and it is executing now. If THAT doesn't remove it, I am at a loss.

Any suggestions?

[Pab Sungenis]

1. Go into Internet settings.

Disable all plugins, check your home page and search settings. Sounds like a simple browser hijack.

[benld74]

2. Couldnt locate anything

[mockmonkey]

3. I use this

http://www.microsoft.com/security/scanner/en-us/default.aspx

Did you try using malwarebytes in safe mode?


"Microsoft Safety Scanner is the same as this Malicious Software Removal Tool, but instead of containing the definitions for 20 or so widespread rootkits and viruses, it contains exactly the same set of definitions as the latest version of Microsoft Security Essentials"

http://www.andrewtechhelp.com/tech-news/windowsoffice-news/120-microsoft-safety-scanner

[ManiacJoe]

4. After you get this cleaned up...

46.165.229.28 belongs to the German company Leaseweb Germany GmbH.
Send an email to [e-mail] telling them they have malware on their network. If they are a reputable company, the malware will be cleaned up quickly once they know.

[Fantastic Anarchist]

5. Invest in iolo Labs System Mechanic

It's done wonders for my PC. It's pretty much run and forget - keeps my computer safe so I don't have to worry about malware or viruses.

Has over 50 other fantastic features, too. The thing is a beast. I've been using them for about 4 years now. Have it loaded on both of my laptops and not a single problem. I go to some crazy websites, too.

[benld74]

6. I finally got rid of it. Not really sure how

downloaded Malwarebytes but it didnt find anything when I ran it, twice by the way.
Daughter turned it on the other day, checked the processes in Task MAnager and NOTHING. It was gone.
I did email the German company. perhaps that did something I dont know


THanks for all the help from everyone