You are probably infected with one of the variations of the W32.Gaobot
viruses which alter your Hosts file, and will not allow you to connect to
any of the following sites that would allow you get the fix for it:
From SARC:
It adds the following lines to %System%\drivers\etc\hosts file, so that any
attempts to connect to these Web sites fail:
127.0.0.1
www.symantec.com
127.0.0.1 securityresponse.symantec.com
127.0.0.1 symantec.com
127.0.0.1
www.sophos.com
127.0.0.1 sophos.com
127.0.0.1
www.mcafee.com
127.0.0.1 mcafee.com
127.0.0.1 liveupdate.symantecliveupdate.com
127.0.0.1
www.viruslist.com
127.0.0.1 viruslist.com
127.0.0.1 viruslist.com
127.0.0.1 f-secure.com
127.0.0.1
www.f-secure.com
127.0.0.1 kaspersky.com
127.0.0.1 kaspersky-labs.com
127.0.0.1
www.avp.com
127.0.0.1
www.kaspersky.com
127.0.0.1 avp.com
127.0.0.1
www.networkassociates.com
127.0.0.1 networkassociates.com
127.0.0.1
www.ca.com
127.0.0.1 ca.com
127.0.0.1 mast.mcafee.com
127.0.0.1 my-etrust.com
127.0.0.1
www.my-etrust.com
127.0.0.1 download.mcafee.com
127.0.0.1 dispatch.mcafee.com
127.0.0.1 secure.nai.com
127.0.0.1 nai.com
127.0.0.1
www.nai.com
127.0.0.1 update.symantec.com
127.0.0.1 updates.symantec.com
127.0.0.1 us.mcafee.com
127.0.0.1 liveupdate.symantec.com
127.0.0.1 customer.symantec.com
127.0.0.1 rads.mcafee.com
127.0.0.1 trendmicro.com
127.0.0.1
www.trendmicro.com
127.0.0.1
www.grisoft.com
To at least be able to access the site that you need to in order to update
your antivirus definitions, or download a removal tool for the W32.Gaobot:
For Windows XP:
1.. Click Start, and then click Search.
2.. Click All files and folders.
3.. In the "All or part of the file name" box, type:
hosts
4.. Verify that "Look in" is set to "Local Hard Drives" or to (C
.
5.. Click "More advanced options."
6.. Check "Search system folders."
7.. Check "Search subfolders."
8.. Click Search.
9.. Click Find Now or Search Now.
10.. For each Hosts file that you find, right-click the file, and then
click "Open With."
11.. Deselect the "Always use this program to open this program" check
box.
12.. Scroll through the list of programs and double-click Notepad.
13.. When the file opens, delete all the entries in the Hosts file except
for the following line:
127.0.0.1 localhost
14.. Close Notepad and save your changes when prompted.
After making the above changes to your HOSTS file, go to:
http://www.symantec.com/avcenter/venc/data/w32.gaobot.removal.tool.html
and download and run the removal tool. You should then also update your
virus defintions and do a full scan.
