| | Malwarebytes Threats | |
| | Author | Message |
---|
wcturner Royal Geek

Number of posts : 1165 Location : Ky. Humor : Yes Registration date : 2009-10-26
 | Subject: Malwarebytes Threats 1/22/2016, 13:26 | |
| Repa, 1. This is the first time I've found threats with this scanner...I did manage to Quarantine them but unsure what to do now....Please advise? 2. Screenshot:  3. Can you tell me if I need to do the Export option or the Clipboard option, I don't know what they do? 4. Please advise? Thanks | |
|  | | Repa Site Administrator


Number of posts : 2378 Location : North Carolina Humor : Age: Older than Dirt! Registration date : 2008-09-19
 | Subject: Re: Malwarebytes Threats 1/25/2016, 10:10 | |
| It looks like these are false positives. Malwarebytes has created an update to their malware definitions to fix this problem. Read the following: https://forums.malwarebytes.org/index.php?/topic/177645-hijackhost-false-positive/https://forums.malwarebytes.org/index.php?/topic/177652-hijackhost-malware-or-not/Take a look at your hosts file: C:\ > Windows > System32 > Drivers > etc > Hosts When you click on Hosts, A window will pop up asking you what application you want to use to open the file. Choose Notepad. Scan down the file after the lines that begin with # and observe the values in the left column. You should only see 127.0.0.1. You may see the last line in the file with a # also. If you see anything else make a copy of that entire row and post it here. Update Malwarebytes and run it again to see if you are still getting the hijack detections or not.
Last edited by Repa on 1/25/2016, 19:51; edited 1 time in total | |
|  | | wcturner Royal Geek

Number of posts : 1165 Location : Ky. Humor : Yes Registration date : 2009-10-26
 | Subject: Re: Malwarebytes Threats 1/25/2016, 17:38 | |
| Repa, thanks.... I'll get back......
I spoke too quick where do I find: Take a look at your hosts file: C:\ > Windows > System32 > Drivers > etc > Hosts
I opened Malwarebytes but didn't see hosts file?
I assume....the following is found with hosts file also? Scan down the file after the lines that begin with # and observe the values in the left column. You should only see 127.0.0.1. You may see the last line in the file with a # also
thanks
| |
|  | | Repa Site Administrator


Number of posts : 2378 Location : North Carolina Humor : Age: Older than Dirt! Registration date : 2008-09-19
 | Subject: Re: Malwarebytes Threats 1/25/2016, 19:53 | |
| WC, C:\ > Windows > System32 > Drivers > etc > Hosts is the path on your computer to the Hosts file. I want you to open it and look in it according to my instructions above to see what is in it. As always, you click on Computer > C drive, etc until you get to the Hosts file and then click on it and follow the rest of my instructions. | |
|  | | wcturner Royal Geek

Number of posts : 1165 Location : Ky. Humor : Yes Registration date : 2009-10-26
 | Subject: Re: Malwarebytes Threats 1/26/2016, 00:24 | |
| - Repa wrote:
- WC, C:\ > Windows > System32 > Drivers > etc > Hosts is the path on your computer to the Hosts file. I want you to open it and look in it according to my instructions above to see what is in it. As always, you click on Computer > C drive, etc until you get to the Hosts file and then click on it and follow the rest of my instructions.
Repa, I went to C:\ > Windows just to make sure I was doing it correctly & it appears I'm on the right track, I'll try again tomorrow if I have the time & report back here. One more thing, I can understand your frustration with me, but, the reason I had to ask how to find the hosts thing is I've never looked up Hosts file before.... Thank You..... | |
|  | | wcturner Royal Geek

Number of posts : 1165 Location : Ky. Humor : Yes Registration date : 2009-10-26
 | Subject: Re: Malwarebytes Threats 1/27/2016, 00:37 | |
| QUOTE: It looks like these are false positives. Malwarebytes has created an update to their malware definitions to fix this problem. Read the following: https://forums.malwarebytes.org/index.php?/topic/177645-hijackhost-false-positive/https://forums.malwarebytes.org/index.php?/topic/177652-hijackhost-malware-or-not/ I read both web pages....appears the folks said they are updating to a "NEWER VERSION", Is this correct?
Take a look at your hosts file: C:\ > Windows > System32 > Drivers > etc > Hosts When you click on Hosts, A window will pop up asking you what application you want to use to open the file. Choose Notepad. Scan down the file after the lines that begin with # and observe the values in the left column. You should only see 127.0.0.1. You may see the last line in the file with a # also. If you see anything else make a copy of that entire row and post it here. All I saw was 127.0.0.1Update Malwarebytes and run it again to see if you are still getting the hijack detections or not. Does "Update Malwarebytes" mean Update to the newest Version of Malwarebytes or just update the "Database Version" that I currently have, which is an older version? When I run the scan again, do I just run a "Quick" Scan or what?One more thing, I can understand your frustration with me, but, the reason I had to ask how to find the hosts thing is I've never looked up Hosts file before.... Thank You..... | |
|  | | Repa Site Administrator


Number of posts : 2378 Location : North Carolina Humor : Age: Older than Dirt! Registration date : 2008-09-19
 | Subject: Re: Malwarebytes Threats 1/27/2016, 01:22 | |
| false positives are caused a fault in the database definition of the malware, not the program. Just update the database malware definitions and rerun it the same way you did when you got the threats. If it doesn't happen again, problem with malwarebytes is solved. | |
|  | | wcturner Royal Geek

Number of posts : 1165 Location : Ky. Humor : Yes Registration date : 2009-10-26
 | Subject: Re: Malwarebytes Threats 1/27/2016, 16:35 | |
| Repa, no threats found on just completed scan....
BTW, I assume I need to delete the "hijacks" in quarantine?
thanks very much for your help! | |
|  | | Repa Site Administrator


Number of posts : 2378 Location : North Carolina Humor : Age: Older than Dirt! Registration date : 2008-09-19
 | Subject: Re: Malwarebytes Threats 1/27/2016, 23:52 | |
| No problem! Yes, you can delete them. | |
|  | | Sponsored content
 | Subject: Re: Malwarebytes Threats  | |
| |
|  | | | Malwarebytes Threats | |
|
Similar topics |  |
|
| Permissions in this forum: | You cannot reply to topics in this forum
| |
| |
| | This candle stays lit in loving memory of our dear friends Janewm & Sheila |
Latest topics | » Ccleaner Icon Disappeared
by Repa 9/26/2017, 23:45
» Are these pop ups real or hoax?
by Repa 8/4/2017, 22:33
» SiteAdvisor Changed
by wcturner 8/4/2017, 19:12
» Windows Defender Turned Off
by Repa 5/16/2017, 09:25
» Java Runtime Update offered
by Repa 12/22/2016, 20:57
» august windows updates
by fay47 8/23/2016, 11:27
» Windows Defender Auto Scan
by wcturner 8/14/2016, 17:59
» Windows Defender Updates
by wcturner 6/10/2016, 00:11
» Flash Bug
by wcturner 5/14/2016, 11:42
» Spybot Updates
by Repa 3/31/2016, 16:12
» W Updates
by fay47 3/19/2016, 09:20
» Battery Backup - UPS
by fay47 2/28/2016, 18:14
» Bookmarks
by wcturner 2/14/2016, 19:33
» windows update slow
by fay47 2/13/2016, 21:52
» Keyboard Shortcuts
by wcturner 2/1/2016, 18:02
» Malwarebytes Threats
by Repa 1/27/2016, 23:52
» Avast SecureLine Disconnected
by Repa 12/10/2015, 09:16
» Suggested Updates /Komando
by wcturner 11/2/2015, 22:56
» Windows Updates
by wcturner 10/14/2015, 18:46
» open office question
by fay47 10/8/2015, 22:23
|
Warning! Beware of Download Manager install request in Ad Bar Under Geeks Logo | 10/31/2013, 16:09 by Repa | Just noticed that when I went to logon that there is an ad under the Geeks Logo that says, "your Download Manager might be outdated. Do you want to install it now?" Don't fall for it! Ignore it!

| Comments: 3 |
Share Us! | |
feeds | |
|