100 replies to this topic

[jeff matthews]

I think that is all. I don't notice any issues with the computer and we seem to have fixed everything. Though i am definitely going to blog this conversation. I mean copy it for future information when i need it. We went over alot of stuff in here and its very valuable information. Once again i want to thank you for all the help you put through on this extensive task trying to fix this machine.

[LiquidTension]

That's quite alright. Whilst our original attempts to rectify the issues were unfruitful, I'm pleased we were able to reach a successful conclusion.
 
----------------
 
All Clean!
Congratulations, your computer appears clean! 
I see no signs of malware on your computer, and feel satisfied that our work here is done. The steps below will remove the tools we have used, and reset any settings changed. 
 
My help will always be free. But if you are happy with the help provided, and would like to support my fight against malware and/or buy me a beer, please consider a donation. 
 
 DelFix

• Please download DelFix and save the file to your Desktop.
• Double-click DelFix.exe to run the programme.
• Place a checkmark next to the following items:
  • Activate UAC
  • Remove disinfection tools
  • Create registry backup
  • Purge system restore
  • Reset system settings
• Click the Run button.

-- This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).
 
--- Malwarebytes Anti-Malware will still be present on your computer. I recommend keeping this programme, updating and scanning with it once a week to maintain security on your computer. If you do not wish to keep this programme on your computer, you can uninstall it by pressing the Windows Key  + r on your keyboard at the same time, typing appwiz.cpl, clicking OK and searching for Malwarebytes.
 
======================================================
 
Please confirm you have no outstanding issues, and are happy with the state of your computer. Once I have confirmation things are in order, we can wrap things up and I will close this thread. 
 
Thank you for using WhatTheTech.
 
Safe Surfing.  
Adam

[jeff matthews]

Yes the machine runs great, i think its all taken care of. But i did notice one other thing, that i never noticed before, it just happened recently and on this site no less.

 

I got a picture displaying a malicious host from EMIsoft the moment i loaded my forum on this site. You might want to look into that, there seems to be some issues with this site in general and also there is a script that is failing to load at times. So i am not sure what is going on, but i highly doubt its this computer.

Edited by jeff matthews, 14 February 2015 - 12:33 PM.

[jeff matthews]

 I feel that all the hard and extensive work you did on this machine and the several weeks that it took us to finally fix this machine was definitely worthy of a donation.

 

I am greatly thankful for all the help you have given.

[LiquidTension]

Hello, 
 

I got a picture displaying a malicious host from EMIsoft the moment i loaded my forum on this site.

That domain is indeed bad. See here: 
http://www.herdprote....bispd.com.aspx
 
If you check your HOSTS file, you will see this domain is included in MVPs HOSTS. I don't know why Emsisoft is blocking the domain when your computer cannot connect to it. 
 
Have you only experienced this on forums.whatthetech.com? Were you logged into the forum?
 

 I feel that all the hard and extensive work you did on this machine and the several weeks that it took us to finally fix this machine was definitely worthy of a donation.

Thank you very much.
 

I am greatly thankful for all the help you have given.

That's quite alright, it's my pleasure.

[jeff matthews]

From what i can tell, yes its only on this site. Though with the invincible shield that is put into place thanks to all of the firewalls and stuff that we put on this machine, it was blocked which is a good thing.

 

But yeah, not sure what we are going to do bout that, that doesn't sound good. The last thing i would want after doing all this work is to have another malicious host contaminate my machine with tons of adware and maleware again. Though i do have a image back up, if worse comes to worse, i can just restore it again.

 

 

Did you report these issues to the admin of the board, what do they have to say bout the sudden script not loading? This was all related to WTT from what i can see.

Edited by jeff matthews, 14 February 2015 - 09:56 PM.

[LiquidTension]

The "blocked" domain appears to be adware related, not malware related. 
This domain is in your HOSTS file, looped back to your computer. You cannot establish a connection with this domain, so it cannot infect your computer. 
 
There's a "View details" drop-down on that warning - can you find this information? 
 

Did you report these issues to the admin of the board, what do they have to say bout the sudden script not loading? This was all related to WTT from what i can see.

I'll let you know if this is indeed an issue with the forum or not when I find out.

[jeff matthews]

It isn't poping up any more. I would say it might of been an issue with WTT but they might of fixed it? I don't know.

Edited by jeff matthews, 16 February 2015 - 08:23 PM.

[LiquidTension]

Hello, 

 

Possibly, but myself and others were unable to reproduce the issue. I don't think there's anything else to be done here. 

[LiquidTension]

Hello, 

 

Are you ready for your topic to be marked as solved?

[LiquidTension]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatth...ed_t106388.html
and start a New Topic.