Ql33P
The string You quoted is gone
Spyware / Malware / Virus Removal
Date and time settings, DNS & BIOS password tampered with? [Solved
11 min read
ken545
Great, how is your system behaving now ?
Ql33P
At the moment It's working OK.
The problems with e.g. Date and time settings have been appearing sporadically in the past so, let's wait and see.
Thanks again for Your help 
ken545
Your welcome my friend
Let me suggest resetting your cable modem and router, they do and can get infected. Seems strange that this happening on two computers at the same time
Ql33P
Good idea, and I've done that many times (generating a new dynamic IP address) - And, every time I get a load of port-scannings / hacking attacks!
<http://www.liveipmap.com/home>, & RBL services tells me that these attacks are, many times, very bad.
But, most of the time I'm using a USB (radio, 3G, 4G/LTE) modem - which I thought would be a bit more secure (probably not).
Strange that so much bad stuff was found on my computers. I've always had Norton 360, now Norton Security installed. From time to time I've had Malwarebytes installed. I ran rootkitscanners like e.g. Kaspesky, MB, F-Secure, GMER, MyNetWatchman etc, hundreds of times - not to mention Norton Support!
Nothing has achieved what You/Whatthetech did in these two threads 
ken545
Try installing a Firewall, here are some free ones
Ql33P
You're right there, as a matter of fact both Norton 360 & Norton Security are equipped with FWs (constantly updated).
Furthermore, the router has a FW as well.
That is why I'm a bit surprised!
ken545
Are you familiar with easybits, it looks ok but from what I am reading it can cause some issues, look at your FRST Additions log under Firewall Rules, it has free access in and out of your computer
One of the files is uses is EzSharedSvcHost.exe , you can read this and see if you want to uninstall it
Ql33P
Ok, thanks for pointing that out - I'll take a look and see if I can alter FW rules / uninstall.
Ql33P
Back again….
About <EzSharedSvcHost.exe> & EasyBits: No trace of it in Norton FW, Control Panel - Programs and Features, Task Manager or Resource Monitor (or even anything Ez*)
Found <EzSharedSvcHost.exe> and, a bunch of Ez* -files in SYSWOW64. Renamed rendering it non-executable.
Ran CCleaner - Registry which deleted a non-functional firewall rule (related to <EzSharedSvcHost.exe>) 
ken545
To save you some headache, read this about working with the registry, sorry about the pictures for Tweaking, the helper that hosts the pictures site may be down
Modifying the Registry can create unforeseen problems, so it always wise to create a backup before doing so.
- Please download the installer for Registry Backup from here or here and save to your desktop.
- Right-click on tweaking.com_registry_backup_setup.exe and select Run as Administrator >> Follow the prompts for a default installation
- Ensure the option Open "Tweaking.com - Registry Backup" When Install Completes is selected >> Next > >> Finish
- Once the GUI(graphical user interface) has appeared/loaded:-
[external image: TCRB-1.jpg]
- Click on Backup Now >> once the process is complete the below will be displayed in the GUI:-
[external image: TBRB-2.jpg]
- Close Tweaking.com - Registry Backup
Note: There will now be a folder at the root of the Hard-Drive named C:\RegBackup, do not delete this as it is the actual backup just created.
A tutorial for Registry Backup explaining the various features be viewed HERE
There are entries on your log for EZbits, we can run a fix with FRST, let me know if you want to do that, if so run FRST again, checkmark Additions and post both new logs please
ken545
Ql33P
I think I've got it now - as Norton is very good at shutting things out (all other AV programs, HP maintenance stuff etc) - the FW rules You see is the Windows FW ones - And, the Win FW is set to off.
I've been looking into NS History (log) and it's clear that You cannot see the real (NS) FW rules. CCleaner found the Win FW rule and, deleted it.
Furthermore, many programs, e.g. -AV, CCleaner and such, are tricked by NS to believe they have deleted/erased what's been found. But, no, it's still there - and, NS history tells that the procedure has been stopped.
I'll look further into this and decide if I can totally erase the Ez* (Easybits) -files.
Thanks again for Your effort 
ken545
Lets see how it goes
Ql33P
Date and time settings - So far so good.
DNS - Seems like a Symantec server problem (posted in Norton Forums and, lately, other Norton users reports similar problems).
BIOS - 'Same same' (BIOS = something I do not want to mess up).
Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI