Can't go to a website: is "replaced" by another. (virus?)

Solved/Closed
DeidaraSmash
Posts
5
Registration date
Saturday February 9, 2013
Status
Member
Last seen
February 13, 2013
- Feb 9, 2013 at 11:50 AM
Ambucias
Posts
47363
Registration date
Monday February 1, 2010
Status
Moderator
Last seen
September 1, 2021
- May 2, 2013 at 06:39 AM
Hello,

I recently tried to go to the website tera-europe.com, but instead of the official website, I end up on a romanian website. Yet the url in the search bar is the good one.

Here is a screenshot of firefox, with the said page: http://image.noelshack.com/fichiers/2013/06/1360427800-sans-titre-2.jpg

After some researches, the other website is onlinemoca. As you can see in the tab, when I try to access to the french homepage of tera-europe, it's like I searched for "Fr Accueil" on onlinemoca, hence the "404 not found" error.

It only happens on this specific website and only my computer, but on every web browser.

I tried many things: multiple antivirus scans with Avast and Malwarebytes, repairing my hard drive errors, I changed my IP adress by resetting my router... I'm running out of ideas.

I suspect it's some kind of virus, but it's really weird.

What could I do to fix it?

22 replies

Porkchop
Posts
11
Registration date
Saturday April 27, 2013
Status
Member
Last seen
May 2, 2013

May 1, 2013 at 02:15 PM
Hi again,

As i said earlier. I can't change anything in my Host file because it saids that only an administrator can do it, Weird thing is that i am the only one on the computer thus the ONLY admin so i don't realy understand..

Cheers
0
Ambucias
Posts
47363
Registration date
Monday February 1, 2010
Status
Moderator
Last seen
September 1, 2021
11,288
May 1, 2013 at 04:57 PM
Don't dispair !

What is the path of your host file you are trying to change ? What procedure were you following to change the file ?

Please, do not attempt anything without consulting with me first.

Regards
0
Porkchop
Posts
11
Registration date
Saturday April 27, 2013
Status
Member
Last seen
May 2, 2013

May 1, 2013 at 05:54 PM
Computer > Disc C: > Windows > System32 > Drivers > Etc > Host (open with nothpad)

Then i try to delete the following:

213.239.204.183 tera-europe.com
159.253.18.161 download.frogster-online.com
213.239.204.183 www.tera-europe.com
159.253.18.161 account.tera-europe.com
213.239.204.183 www.account.tera-europe.com


But as many times before it's without success. Because when i try to save it it saids i need to be an admin.

Regards
0
Ambucias
Posts
47363
Registration date
Monday February 1, 2010
Status
Moderator
Last seen
September 1, 2021
11,288
May 2, 2013 at 05:46 AM
Boot in safe mode and try delete.

Let me know
0
Porkchop
Posts
11
Registration date
Saturday April 27, 2013
Status
Member
Last seen
May 2, 2013

May 2, 2013 at 06:22 AM
How do i boot it in safe mode?
0
Porkchop
Posts
11
Registration date
Saturday April 27, 2013
Status
Member
Last seen
May 2, 2013

May 2, 2013 at 06:35 AM
Nvm, it worked!

Big big thanks for all the time you spent on helping me, couldn't be more greatfull to you!
Cheers my friend!
0
Ambucias
Posts
47363
Registration date
Monday February 1, 2010
Status
Moderator
Last seen
September 1, 2021
11,288
May 2, 2013 at 06:39 AM
You are most welcome !

Now, lets create a chain. Pay to the next ! Help someone else like, help an old lady to cross the street or donate a kidney.:-)
0