I was emailed a copy of the host file which just looked normal. Had the usual 127.0.0.1 localhost and that was it. Told him to delete that and try again. Havent heard back yet. If that doesnt work i would say hes looking at a reinstall or repair. Would you agree?

I was emailed a copy of the host file which just looked normal. Had the usual 127.0.0.1 localhost and that was it. Told him to delete that and try again. Havent heard back yet. If that doesnt work i would say hes looking at a reinstall or repair. Would you agree?

Either way - get him to get Acronis True Image or Norton Ghost (and use them) so he'll easily be able to get out of similar situations in future. He's got the spare SATA drive so should have plenty room for backups.For a replacement file he (or you) could go here and get one.Plenty of info and a download link.

Brisky playing up here so

For a replacement hosts file go here

Blocking Unwanted Parasites with a Hosts File

Further update:

He removed Host File then rebooted. Windows didnt automatically generate a new one. Checked my XP note book and i dont even have one, but it works perfectly for me. It still wouldnt work. for him though. Next thought was DNS server addresses on router. Just off the phone to him and he cant access his router over wireless connection by typing in the router IP address into IE. So definately something appears to have corrupted IE. I have said to take a trip to the shops tomorrow and look for a mag with Firefox on it. Then to load it and see how he gets on. Failing that its a trip to Barrow for me next weekend!

Thanks all for your help so far. Any more suggestions are welcome.

Didnt you say messenger worked? Why not send him the FF install file?

Sounds like the file's messed with TCP Winsock.

Didnt you say messenger worked? Why not send him the FF install file?

Sounds like the file's messed with TCP Winsock.

Messenger appears to be working periodically. Soemtimes he can get on sometimes not. I have just come accross this information on the foolowing site:

Alert Details - Security Center - Cisco Systems

which might help. Looks like it might attempt to disable a registry key in order to disable ie.

He only got married two weeks ago so getting time to talk him through things is difficult. Used to be a nagging girlfriend, now he's got a nagging wife.

I eventually managed to send him the Firefox install file via Windows Live Messenger. Installed this and he now has internet access. Will be in Barrow next weekend so will do a repair or reinstall then and clear out the rest of the **** he's downloaded over the years. Cheers for all you help and suggestions.

Reinstall it and Spybot has something called TeaTimer (other probably have similar) which manages to block a lot of the usual tripe from installing itself.

A little late, but better than never update:

Internet explorer had been configured to use a proxy. Untikced the box and restarted and had instant access to Internet Explorer. Whether this was caused by the Trojan or by my bro ticking and unticking boxes, who knows.

Thank you all again for your help.