Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Broken Browser - hijack


  • This topic is locked This topic is locked
13 replies to this topic

#1 bonaro

bonaro

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:11:42 AM

Posted 19 August 2010 - 12:22 AM

I had a nasty rootkit and backdoor trojan about 3 months ago. A helpful staff member from this forum helped me clean it. On their suggestion I installed Hostman. I have Webroot AV scanner and MBAM, Windows firewall is on.

Last week I clicked into a site that started "scanning" my machine for me. I clicked out quickly but the damage was done. At that time my Webroot scanner started detecting and blocking attemps to connect to all manner of websites. Firefox went fins up and I get very poor results with MSIE 8. My computer works normally except for the browser. It takes many tries to get to a website. Usually I manage to get to google then google the site I want and eventually get there. Home page, bookmarks etc are inop.

I reinstalled Firefox, no joy so I deleted it. I installed a new copy of MSIE 8 but problem persists.
I ran MBAM in safe mode, found nothing. Webroot in safe mode found a virus and cleaned but it did not fix problem.

I am at the point where I am willing to try and fix this bleeping computer once more but if I cant I will give it a viking funeral and buy a new box.

Here is my dds scan....please help


DDS (Ver_10-03-17.01) - NTFSx86
Run by Dan at 21:05:02.10 on Wed 08/18/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2942.1978 [GMT -7:00]

AV: Webroot AntiVirus with Spy Sweeper *On-access scanning enabled* (Updated) {77E10C7F-2CCA-4187-9394-BDBC267AD597}

============== Running Processes ===============

C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Webroot\WebrootSecurity\SpySweeperUI.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\HostsMan\hostssrv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://us.mg0.mail.yahoo.com/dc/launch?.gx=1&.rand=8ftfnqg3addu3
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uDefault_Page_URL = hxxp://www.msn.com
uInternet Settings,ProxyOverride = *.local
mSearchAssistant =
mCustomizeSearch = hxxp://dnl.crawler.com/support/sa_customize.aspx?TbId=61005
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.5.5126.1836\swg.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
TB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
uRun: [Search Protection] "c:\program files\yahoo!\search protection\SearchProtection.exe"
uRun: [HostsServer] "c:\program files\hostsman\hostssrv.exe" --start
uRun: [ctfmon.exe] "c:\windows\system32\ctfmon.exe"
mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide
mRun: [NvCplDaemon] "RUNDLL32.EXE" c:\windows\system32\NvCpl.dll,NvStartup
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [SpySweeper] "c:\program files\webroot\webrootsecurity\SpySweeperUI.exe" /startintray
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} - hxxp://www.comcastsupport.com/OneClickFix/tgctlsr.cab
DPF: {0BCADE60-1E93-11D8-ABDA-0004759647B3} - hxxp://www.bxwa.com/fastbid/fastbidx1.cab
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} - hxxp://www.ipix.com/viewers/ipixx.cab
DPF: {32322460-3E7D-11D7-ABD8-0001029A9BA6} - hxxp://www.bxwa.com/fastbid/fastbidx2.cab
DPF: {3BB1D69B-A780-4BE1-876E-F3D488877135} - hxxp://download.microsoft.com/download/3/B/E/3BE57995-8452-41F1-8297-DD75EF049853/VirtualEarth3D.cab
DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} - hxxp://office.microsoft.com/officeupdate/content/opuc3.cab
DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - hxxp://photo.walgreens.com/WalgreensActivia.cab
DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} - hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-3-48.cab
DPF: {66E79B75-F711-4A88-9C6D-10BCA64F3306} - hxxp://www.drivecam.com/videos/DriveCamEvent.dll
DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} - hxxps://webdl.symantec.com/activex/symdlmgr.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} - hxxp://www.opentopia.com/support/activex/AxisCamControl.cab
DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} - hxxp://web1.shutterfly.com/downloads/Uploader.cab
DPF: {9A57B18E-2F5D-11D5-8997-00104BD12D94} - hxxp://support.gateway.com/support/serialharvest/gwCID.CAB
DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} - hxxp://download.yahoo.com/dl/mail/ymmapi.cab
DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} - hxxp://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} - hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-27-0.cab
DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - hxxp://www.adobe.com/products/acrobat/nos/gp.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\wifd1f~1\MpShHook.dll

============= SERVICES / DRIVERS ===============

R0 ssfs0bbc;ssfs0bbc;c:\windows\system32\drivers\ssfs0bbc.sys [2009-11-6 29808]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 WebrootSpySweeperService;Webroot Spy Sweeper Engine;c:\program files\webroot\webrootsecurity\SpySweeper.exe [2009-11-6 4048240]
R2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]
R2 WRConsumerService;Webroot Client Service;c:\program files\webroot\webrootsecurity\WRConsumerService.exe [2010-4-14 1201640]
S1 mferkdk;VSCore mferkdk;\??\c:\program files\mcafee\virusscan enterprise\mferkdk.sys --> c:\program files\mcafee\virusscan enterprise\mferkdk.sys [?]
S2 gupdate1c9868525c78598;Google Update Service (gupdate1c9868525c78598);c:\program files\google\update\GoogleUpdate.exe [2009-2-3 133104]
S3 FileObjInfo;STFileDriver;\??\c:\documents and settings\all users\application data\spyware terminator\fileobjinfo.sys --> c:\documents and settings\all users\application data\spyware terminator\FileObjInfo.sys [?]

=============== Created Last 30 ================

2010-08-18 05:29:21 0 dc-h--w- c:\windows\ie8
2010-08-16 19:21:00 0 d-----w- c:\docume~1\dan\applic~1\wsInspector
2010-08-16 18:51:19 0 d-----w- c:\program files\Startup Inspector for Windows

==================== Find3M ====================

2010-06-30 12:31:35 149504 ----a-w- c:\windows\system32\schannel.dll
2010-06-24 12:22:03 916480 ----a-w- c:\windows\system32\wininet.dll
2010-06-23 13:44:04 1851904 ----a-w- c:\windows\system32\win32k.sys
2010-06-21 15:27:11 354304 ----a-w- c:\windows\system32\drivers\srv.sys
2010-06-17 14:03:00 80384 ----a-w- c:\windows\system32\iccvid.dll
2010-06-14 07:41:45 1172480 ----a-w- c:\windows\system32\msxml3.dll
2010-05-27 01:35:20 8588 ----a-w- c:\docume~1\dan\applic~1\wklnhst.dat
2010-05-21 21:14:28 221568 ------w- c:\windows\system32\MpSigStub.exe
2007-10-28 17:19:18 774144 ----a-w- c:\program files\RngInterstitial.dll
2008-09-20 01:52:18 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008091920080920\index.dat

============= FINISH: 21:05:46.72 ===============

Edited by Blade Zephon, 19 August 2010 - 09:01 AM.
Move to Log Forum. ~BZ


BC AdBot (Login to Remove)

 


#2 Blind Faith

Blind Faith

  • Malware Response Team
  • 4,101 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:42 PM

Posted 26 August 2010 - 06:16 AM

Hello and welcome to Bleeping Computer! welcome.gif

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.

If you have already posted a DDS log, please do so again, as your situation may have changed.
Use the 'Add Reply' and add the new log to this thread.

Thanks and again sorry for the delay.

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE

We also need a new log from the GMER anti-rootkit scanner. Please first disable any CD emulation programs using the steps found in this topic:

Why we request you disable CD Emulation when receiving Malware Removal Advice

Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:

How to create a GMER log





Elle
Can you hear it?It's all around!

Tomar ki manè acchè?
Yadi thakè, tahalè
Ki kshama kartè paro
?



If I haven't replied in 48 hours, please feel free to send me a PM.



Posted Image

#3 bonaro

bonaro
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:11:42 AM

Posted 26 August 2010 - 01:44 PM

It has been 8 days since my original post for help. I have since purchased a new computer.
However, I would at least like to know what I am up against and know if the dive is easily cleaned or should be wiped. I want to resell the old infected machine after it's been cleaned.

I posted a DDS log with my original post and the machine has been unplugged since. I was unable to download GMER because of the virus.

I had the geek squad pull all of the documents off my old infected drive and burn them to a external HD. I just need to know 3 things.

1. Should I try to clean the old drive or just wipe it, I already have pulled off all the files I need?

2. The geek squad scanned the docs and photos as they were pulled off the infected drive prior to writing on the external HD. Should I take any further precaution with these files?

3. How do I best protect my new machine? I REALLY dont want to deal with a virus again. I have installed Norton Suite and MBAM

Edited by bonaro, 26 August 2010 - 01:47 PM.


#4 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:42 PM

Posted 04 September 2010 - 06:47 AM

Hi Bonaro,

Unfortunately, we meet again. I'm not entirely sure what we're up against without looking deeper. If you intend to sell it, I would just reformat the drive and reinstall windows. I can walk you through that if you want. If you're going to sell it...that is also the only way to really ensure all your personal info is wiped. whistling.gif

As for your new computer, what version of Windows are you running? 7? You should have one program running for each of the following categories:
Antivirus - You have Norton, ensure it's running in real time.
Antimalware - Norton also covers this. You have MBAM, I would update definitions and run a scan once a week as an extra precaution.
Firewall - Windows has a firewall that should be enabled. There's a good tutorial on Understanding and Using Firewalls that might be worth a read. Windows XP only has a 1-way firewall...Vista and 7 have a two way but it needs to be enabled.

Now, no malware protection is 100% safe. In fact, most are about 50% effective for new viruses. It's hard to stop a virus that hasn't been written yet...they exploit new holes that Microsoft and antivirus companies didn't know existed. So, always have a backup. smile.gif




If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#5 bonaro

bonaro
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:11:42 AM

Posted 04 September 2010 - 10:46 PM

Yes...hello again... sad.gif

I do plan to sell the old machine so wiping it and reinstalling is my preference. Only one question. I did not get any system disks with that machine. I presume there is a partition on the drive for recovery where the OS install files reside. If this is true, will running the recovery console reformat the other side of the partition and kill the bug? Could the bug have infected to the other partitioned recovery drive?

New Machine questions

Norton is running but I did not see any feature for "real time" Norton loads when I boot up and I get a "protected" widget on my desktop when its finished loading

Windows firewall is on but is being managed by Norton. (outgoing traffic is allowed) should I override any setting or use all of Nortons default?

The geek squad pulled 35gb of photos and files off my old drive and copied them onto a external HD. I confirmed 3x that they scanned for virii. I have not plugged this in to the new machine yet cuz im skeered ohmy.gif I want to plug this in and set it to the be default location for all of My Documents and automatic backups. My thinking is if I ever have to reformat the local drive I wont have to worry about my data...good idea? Safe to plug in?

host manager - I googled this and there are many. Does Norton do this 4 me or should I get a separate one? The one you originally recommended worked ok but I couldn't see where it updated itself

Thanks!

#6 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:42 PM

Posted 05 September 2010 - 06:33 AM

There should be a recovery partition then; those are pretty common especially from Dell, HP, etc. I wish they would just give us the disks. smile.gif The bug shouldn't have infected that drive.

If you get the protected widget you should be fine. Norton's default is good; but you can always set it to two-way control if you want. That can get annoying as you will have to allow programs to access the internet, and the first time you put it on lots of programs you've never heard of (they're part of windows) will request access. If you aren't going to do the research and deal with popups, the one way firewall still offers a lot of protection.

That may help to separate the documents, but accessing your documents will be slower (especially if it's a USB external drive instead of an eSATA drive). I would still strongly recommend you back that up in case it does get infected, which is possible, although less likely. What type of drive is it? We can scan for viruses two ways if you want to confirm it's clean.

I'm not too familiar with Norton. Yours should be updating as I think I saw it running in your process list. You can update manually by launching HostsMan; selecting Hosts --> Check for Updates, checking which one you want (I use MVPS Hosts); check 'overwrite' and click update. If you're doing this on your new computer, you would need to right click HostMan in the start menu and "Run as Administrator" to have that option not greyed out.


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#7 bonaro

bonaro
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:11:42 AM

Posted 05 September 2010 - 10:24 PM

I dislike annoying so I will leave it on one way control.

Ok...so do you think I should install hostman or did you mean Norton is managing my host file for me? If I need Hostman, where do I get it?


My external HD is a Toshiba Canvio 320gb USB drive.
Should I scan it then move all 35gb of pics and files back to the new machine?
Should I then use this ext HD for automatic backups?
Or should I set it at the location for My Documents?
Not sure what to do... but I would like to confirm its clean


#8 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:42 PM

Posted 06 September 2010 - 09:30 AM

I'm not sure if Norton will manage your HOSTS file or not; I've only used Norton briefly.

With a USB drive you will notice a slower file write/read/copy compared with an internal hard drive. So, it's up to you if you want to keep your documents there or only use as a backup. I would scan with your onboard antivirus AND MBAM (both updated of course) no matter what you decide. Let the tools fix what they detect.


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#9 bonaro

bonaro
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:11:42 AM

Posted 06 September 2010 - 01:05 PM

I saw no mention of host file managemt in the Norton software so I will DL Hostman and run it. Can you give me the DL location?

I will plug the ex drive in and scan later tonight. I will try to pull off some images to see the response speed and decide

#10 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:42 PM

Posted 06 September 2010 - 02:40 PM

Here's HostMan. And that sounds like a good plan re: response speed. You may want to look at eSata drives if your mother board supports that...those fly relative to USB. USB3.0 is also a lot faster than USB2, but it's still fairly new.

Please download HostMan. It safeguards you with a regularly updated Hosts-file that blocks dangerous sites from opening. This adds another bit of safety while surfing the Internet. For installlation and setting up, follow these steps:
  1. Double-click the Downloaded installer and install the tool to a location of your choice
  2. Via the Startmenu, navigate to HostsMan and run the program.
    1. Click "Hosts" in the menu
    2. Click "Manage Updates" in the submenu
    3. Out of the three, select atleast one of the three (I have MVPS Host as my main one)
    4. Click "Add Update." After that you will only need to click on the following button to retrieve updates:
  3. Click the X to exit the program.
  4. Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#11 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:42 PM

Posted 12 September 2010 - 07:16 AM

any other questions?


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#12 bonaro

bonaro
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:11:42 AM

Posted 15 September 2010 - 02:38 PM

Sorry for the delay in response, life and been hectic lately...

I scanned the external drive with Norton and MBAM and found nothing. It seems to be working fine so I have no further questions.

thanks!

#13 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:42 PM

Posted 15 September 2010 - 05:50 PM

ok, great! thanks for letting me know.


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#14 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:42 PM

Posted 20 September 2010 - 05:44 PM

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. smile.gif

If you are the topic starter, and need this topic reopened, please contact me via PM with the address of this thread.

Everyone else please begin a new topic.


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users