# be placed in first column followed by corresponding host name.

# The IP address and host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following machine name denoted by a '#' symbol.

#

# For example:

#

# 102.54.94.97 rhino.acme.com # source server

# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

If there are any entries below localhost one, then unless you’ve added some on purpose, then you’ve more than likely been hit with a DNS hijacker of some sort. The best course of action here is to run a full system scan with an up to date virus scanner, as well as a couple of spyware scanners. (Preferably from safe mode)

After scans are done, then use WinSockFix to repair corrupted WinSock settings. This should take care of problem.

The best program to remove an errant Browser Help Object is HijackThis. This program was originally designed to remove homepage hijackers and gradually morphed into an all-around removal tool for everything. If there’s any one tool that I couldn’t part with it’s HJT.

To start, download HijackThis 1991. Once you’ve got it, open it. Click button that says “Do a system scan only”. Following that, scroll down to items labeled 02 – BHO. Remove anything here that looks suspicious. Internet Explorer does not require any BHO’s to run. Just keep an eye on path that it loads from, and name of file. A legitimate one will be fairly easy to spot, as it’ll have a legit title and OK looking path.

If filename looks like it was randomly made, like ASGSRT32.DLL or whatnot then there’s a good 90% chance that it’s bad. Even if you do remove one that’s good, you can always use restore feature of HJT to bring it back.

If you need any other HijackThis help then read previous link.