This can happen if the host file is changed by the threat infection.
To resolve this unnecessary host entries files perform the following steps :
1. Click Start, > Find or Search > Files or Folders.
2. Make sure that "Look in" is set to (C:) or to "Local Hard Drive if you have
more than one hard drive, and that "Include subfolders" is checked.
3. In the "Named" or "Search for..." box, type:
hosts
4. Click Find Now or Search Now. After all files are found--this could take a
few minutes--go on to "To delete any extra lines."
For each Host file that was found in the search, do the following:
To delete any extra lines
1. Right-click the file and then click Properties.
2. In the bottom section of the Properties dialog box, make sure that the
Read-only attribute box is not checked. If it is checked, remove the check mark.
3. Click OK.
4. Right-click the file again and then click Open With.
5. Uncheck the Always use this program to open this program check box.
6. Scroll through the list of programs and double-click Notepad.
7. When the file opens, delete all the entries in the Hosts file, except for the
following line:
127.0.0.1 localhost
8. Close Notepad and save your changes when prompted.
Restart the computer and see if your Internet explorer is getting redirected
to other websites.
