I have this peculiar problem, that all popular antivirus sites have been redirected to localhost (127.0.0.1). My computer has Windows XP prof. SP2.
I've checked the hosts file (windows\system32\drivers\etc), and it is fine. I next checked the system for virus with latest stinger, it didn't find anything wrong.
I can browse non antivirus sites, email sites, but not antivirus sites. Even when I am not connected to internet, I can ping antivirus sites like symantec.com, nai.com, trendmicro.com, safer-networking.org, etc. I get a reply from 127.0.0.1. Now, even my Norton Antivirus 2008 says it need activation again. Without a connectivity to symantec.com, I can't do anything about it.
Has anybody faced a similar situation? Actually, I found one unwanted (Actually, it is not signed by Microsoft) file called "csrcs.exe" getting loaded through registry (HKLM\Microsoft\Current Version\Run), and removed the entry and renamed the file. On googling the file, I found that it is some type of a spyware.
I am left without protection, and am in danger. Pls reply.