|
| Malwarebytes Threats | |
| | Author | Message |
---|
wcturner Royal Geek
Number of posts : 1165 Location : Ky. Humor : Yes Registration date : 2009-10-26
| Subject: Malwarebytes Threats 1/22/2016, 13:26 | |
| Repa, 1. This is the first time I've found threats with this scanner...I did manage to Quarantine them but unsure what to do now....Please advise? 2. Screenshot: 3. Can you tell me if I need to do the Export option or the Clipboard option, I don't know what they do? 4. Please advise? Thanks | |
| | | Repa Site Administrator
Number of posts : 2378 Location : North Carolina Humor : Age: Older than Dirt! Registration date : 2008-09-19
| Subject: Re: Malwarebytes Threats 1/25/2016, 10:10 | |
| It looks like these are false positives. Malwarebytes has created an update to their malware definitions to fix this problem. Read the following: https://forums.malwarebytes.org/index.php?/topic/177645-hijackhost-false-positive/https://forums.malwarebytes.org/index.php?/topic/177652-hijackhost-malware-or-not/Take a look at your hosts file: C:\ > Windows > System32 > Drivers > etc > Hosts When you click on Hosts, A window will pop up asking you what application you want to use to open the file. Choose Notepad. Scan down the file after the lines that begin with # and observe the values in the left column. You should only see 127.0.0.1. You may see the last line in the file with a # also. If you see anything else make a copy of that entire row and post it here. Update Malwarebytes and run it again to see if you are still getting the hijack detections or not.
Last edited by Repa on 1/25/2016, 19:51; edited 1 time in total | |
| | | wcturner Royal Geek
Number of posts : 1165 Location : Ky. Humor : Yes Registration date : 2009-10-26
| Subject: Re: Malwarebytes Threats 1/25/2016, 17:38 | |
| Repa, thanks.... I'll get back......
I spoke too quick where do I find: Take a look at your hosts file: C:\ > Windows > System32 > Drivers > etc > Hosts
I opened Malwarebytes but didn't see hosts file?
I assume....the following is found with hosts file also? Scan down the file after the lines that begin with # and observe the values in the left column. You should only see 127.0.0.1. You may see the last line in the file with a # also
thanks
| |
| | | Repa Site Administrator
Number of posts : 2378 Location : North Carolina Humor : Age: Older than Dirt! Registration date : 2008-09-19
| Subject: Re: Malwarebytes Threats 1/25/2016, 19:53 | |
| WC, C:\ > Windows > System32 > Drivers > etc > Hosts is the path on your computer to the Hosts file. I want you to open it and look in it according to my instructions above to see what is in it. As always, you click on Computer > C drive, etc until you get to the Hosts file and then click on it and follow the rest of my instructions. | |
| | | wcturner Royal Geek
Number of posts : 1165 Location : Ky. Humor : Yes Registration date : 2009-10-26
| Subject: Re: Malwarebytes Threats 1/26/2016, 00:24 | |
| - Repa wrote:
- WC, C:\ > Windows > System32 > Drivers > etc > Hosts is the path on your computer to the Hosts file. I want you to open it and look in it according to my instructions above to see what is in it. As always, you click on Computer > C drive, etc until you get to the Hosts file and then click on it and follow the rest of my instructions.
Repa, I went to C:\ > Windows just to make sure I was doing it correctly & it appears I'm on the right track, I'll try again tomorrow if I have the time & report back here. One more thing, I can understand your frustration with me, but, the reason I had to ask how to find the hosts thing is I've never looked up Hosts file before.... Thank You..... | |
| | | wcturner Royal Geek
Number of posts : 1165 Location : Ky. Humor : Yes Registration date : 2009-10-26
| Subject: Re: Malwarebytes Threats 1/27/2016, 00:37 | |
| QUOTE: It looks like these are false positives. Malwarebytes has created an update to their malware definitions to fix this problem. Read the following: https://forums.malwarebytes.org/index.php?/topic/177645-hijackhost-false-positive/https://forums.malwarebytes.org/index.php?/topic/177652-hijackhost-malware-or-not/ I read both web pages....appears the folks said they are updating to a "NEWER VERSION", Is this correct?
Take a look at your hosts file: C:\ > Windows > System32 > Drivers > etc > Hosts When you click on Hosts, A window will pop up asking you what application you want to use to open the file. Choose Notepad. Scan down the file after the lines that begin with # and observe the values in the left column. You should only see 127.0.0.1. You may see the last line in the file with a # also. If you see anything else make a copy of that entire row and post it here. All I saw was 127.0.0.1Update Malwarebytes and run it again to see if you are still getting the hijack detections or not. Does "Update Malwarebytes" mean Update to the newest Version of Malwarebytes or just update the "Database Version" that I currently have, which is an older version? When I run the scan again, do I just run a "Quick" Scan or what?One more thing, I can understand your frustration with me, but, the reason I had to ask how to find the hosts thing is I've never looked up Hosts file before.... Thank You..... | |
| | | Repa Site Administrator
Number of posts : 2378 Location : North Carolina Humor : Age: Older than Dirt! Registration date : 2008-09-19
| Subject: Re: Malwarebytes Threats 1/27/2016, 01:22 | |
| false positives are caused a fault in the database definition of the malware, not the program. Just update the database malware definitions and rerun it the same way you did when you got the threats. If it doesn't happen again, problem with malwarebytes is solved. | |
| | | wcturner Royal Geek
Number of posts : 1165 Location : Ky. Humor : Yes Registration date : 2009-10-26
| Subject: Re: Malwarebytes Threats 1/27/2016, 16:35 | |
| Repa, no threats found on just completed scan....
BTW, I assume I need to delete the "hijacks" in quarantine?
thanks very much for your help! | |
| | | Repa Site Administrator
Number of posts : 2378 Location : North Carolina Humor : Age: Older than Dirt! Registration date : 2008-09-19
| Subject: Re: Malwarebytes Threats 1/27/2016, 23:52 | |
| No problem! Yes, you can delete them. | |
| | | Sponsored content
| Subject: Re: Malwarebytes Threats | |
| |
| | | | Malwarebytes Threats | |
|
Similar topics | |
|
| Permissions in this forum: | You cannot reply to topics in this forum
| |
| |
| | This candle stays lit in loving memory of our dear friends Janewm & Sheila |
Latest topics | » Ccleaner Icon Disappeared by Repa 9/26/2017, 23:45
» Are these pop ups real or hoax? by Repa 8/4/2017, 22:33
» SiteAdvisor Changed by wcturner 8/4/2017, 19:12
» Windows Defender Turned Off by Repa 5/16/2017, 09:25
» Java Runtime Update offered by Repa 12/22/2016, 20:57
» august windows updates by fay47 8/23/2016, 11:27
» Windows Defender Auto Scan by wcturner 8/14/2016, 17:59
» Windows Defender Updates by wcturner 6/10/2016, 00:11
» Flash Bug by wcturner 5/14/2016, 11:42
» Spybot Updates by Repa 3/31/2016, 16:12
» W Updates by fay47 3/19/2016, 09:20
» Battery Backup - UPS by fay47 2/28/2016, 18:14
» Bookmarks by wcturner 2/14/2016, 19:33
» windows update slow by fay47 2/13/2016, 21:52
» Keyboard Shortcuts by wcturner 2/1/2016, 18:02
» Malwarebytes Threats by Repa 1/27/2016, 23:52
» Avast SecureLine Disconnected by Repa 12/10/2015, 09:16
» Suggested Updates /Komando by wcturner 11/2/2015, 22:56
» Windows Updates by wcturner 10/14/2015, 18:46
» open office question by fay47 10/8/2015, 22:23
|
Warning! Beware of Download Manager install request in Ad Bar Under Geeks Logo | 10/31/2013, 16:09 by Repa | Just noticed that when I went to logon that there is an ad under the Geeks Logo that says, "your Download Manager might be outdated. Do you want to install it now?" Don't fall for it! Ignore it!
| Comments: 3 |
Share Us! | |
feeds | |
|