I am hoping someone can help. Have never used a forum before, but hopefully someone will have an answer.

I have an old PC that my kids use to play games on (not worth spending any money on). There is no internet connection on that PC. I downloaded Chicken Invaders 3 (online), saved it to a disk and installed it on that computer before I realized that you must have an internet connection for the game to work. Now, everytime I try to open anything on that PC, it tries to open IE and proceeds to tell me I am offline. It is looking for the site http://click.vnn.bz followed by the path to what I am trying to open.

I cannot even open regedit from the run menu as this also opens IE. I have to right click and explore to open anything.

Have done a search for click.vnn.bz through the search, but nothing shows up.

No Anti Virus, spamware, adware or anything on that PC as it has never had an internet connection.

Am not overly confident with all the technical stuff – just a pre-warning!

Hello, and welcome to PCHF.

Do you have another computer that has internet connection readily available?

Hi,

Yes I do.

OK, I need you to download all these in a removable drive and transfer them over to the infected PC:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
http://www.pchelpforum.com/redirect-...8baee6434cfc13


Once on your infected PC, doubleclick the drweb-cureit.exe file. It will then suggest to run an express scan -- this you should allow.
After this (Dr.Web writes "Select object for Scanning" at the Bottom-left), you click Options->Change settings.
Choose the "Scan"-tab, remove the mark at "Heuristic analysis".
Choose the "Actions"-tab, and choose "Rename" under all the Malware-issues.
Back at the main window, you should now mark the drives that you want to scan (a red dot shows which drives have been chosen).

Click the green arrow at the right, and the scan will start. The first time Dr.Web finds something, you click "Yes to All", and it will after this automatically fix what is found.
After the scan: Close Dr.Web.

Next install HijackThis.

• Right Click START and select Explore
• Select the drive where Windows is installed (normally drive C)
• Navigate to the C:\Program Files folder and select it.
• Now click the on the top menu where it says File and then select New.
• Then select Folder
• A new folder is created and highlighted
• Just type HJT to overwrite the default name (New Folder)

• Locate the HijackThis.zip file you downloaded and right click on it
• Select Extract All and click Next
• Browse your way to the C:\Program Files\HJT folder created above
• Select the folder and click Next.

Now Run HijackThis and select Do a system scan and save a log file. When the scan is finished, a notepad window will pop up with the log file in it. Attach this logfile in your next reply.

Thanks so much for all your effort. I have fixed the problem. Had to start in safe mode with command prompt to be able to get into regedit. Found the two offending registry entries and have deleted them. All good again and a little boy with a snile back on his face.

This is a great site. Hopefully will not need to be back, but know where to come if I do! Thanks again.

You're welcome.

You may still want to download Dr.Web and run it on the computer, to see if there are any remnants. I'll be marking this thread as "Resolved", good luck in all else that you do!