I found that virus yesterday. What is this Virus doing:
1. It changes the links on the pages you are opening with IE. The links are leading to "http://thesten.com/main/k.php?key=FETISH". It changes the category acording to the page content.
2. Chanes your main page and search pages.
3. Changes your host file.
4. Downloads thefolowing files from internet:
iedll.exe
loader.exe
DNSerr.exe
I found a similar virus on spermatrix.com
What I've done to remove teh virus:
1. First search the regestry for "thesten" and delete all the entryes I found.
2. Delete this 3 files I mentioned.
3. Then downloaded this software.
http://www.spywareinfo.com/~merijn/f...hijackthis.zip
!!!IMPORTANT. Do not fix everything the software finds. Just the host files and if there is iedll.exe,loader.exe or DNSerr.exe runned. If you remove everything then you must reinstall it.