Malware blocking antivirus websites, HELP!

[ElConquistador]

My Antivirus program detected a worm and then crashed. I attempted to reopen it, was unable to obtain updates from the server. I tried numerous Antivirus websites, all of which are blocked or redirect me to a different site.

How can I get rid of this?

[Tarun]

Welcome to Lunarsoft, ElConquistador!

Please download my Anti-Malware Toolkit and get the Professional package. Then follow the directions in the PC Cleanup guide.

[ElConquistador]

Downloaded and was installing, but it quit because it could not create a connection with the server.

Hopefully someone can tell me a way to manually change/remove the necessary files/registry.

[Tarun]

What quit on you and what was the error?

[ElConquistador]

What quit on you and what was the error?

Downloading .NET Framework 2.0 was the screen where the error appeared.

Error message:

Error sending request: A connection with the server could not be established.

[Tarun]

Okay, try this link to get your cleanup started.

[Eldmannen]

Try to check your hosts file for suspicious entries.

[ElConquistador]

Tarun: The software you provided took out some tracking cookies, but did not remove the infection.

Eldmannen: The hosts file located in the directory C:\WINDOWS\system32\drivers\etc\ appears as follows:

# Copyright © 1993-1999 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

# 102.54.94.97 rhino.acme.com # source server

# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

Is there another potential hosts file in a different location that is redirecting/blocking me?

Your help is appreciated.

[Tarun]

Here's a location hosting the .NET Framework 2.0 SP1. Still looking for 3.5 SP1 mirrored.

[ElConquistador]

Here's a location hosting the .NET Framework 2.0 SP1. Still looking for 3.5 SP1 mirrored.

Install continues to freeze towards the end of installation. Have tried it 3 times.

[Tarun]

Ok, I sent you a PM about it.

[ElConquistador]

Tarun:

"Event Type: Error

Event Source: MsiInstaller

Event Category: None

Event ID: 1008

Date: 11/14/2008

Time: 7:52:44 AM

User: DF94V4D1\Chris

Computer: DF94V4D1

Description:

The installation of c:\b019823ae02adb4578\vs_setup.ms_ is not permitted due to an error in software restriction policy processing. The object cannot be trusted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp."

[Tarun]

See if you can run Dial-a-fix and remove any restrictive policies.