Avast WEBforum

Other => General Topics => Topic started by: Lady GaGa on September 30, 2010, 02:52:58 AM

Title: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on September 30, 2010, 02:52:58 AM
???
Hey All,
I am pretty new to Forums, so bear with me! I am uploading a "cropper capture" from one of the 3 times this month my host file has been modified. The most recent was 9/24/10 but I was using a free program that found this problem, as it also did earlier this month, I use the Emergency Protection Mode of this program to quick scan so I did not get the cropper capture on the 24th of this month, but it said the same thing as the attachment I am . Previous scans by this program found 4 Trojans and the host file had been modified, this time only the host file had been modified and no viruses,Trojans, worms or malicious software were found by Avast and/or other programs I have on my PC, spyware, malware programs etc..during quick, full and special scans. I am under the impression there is malicious software somewhere hiding that is modifying the Host File - Help by a professional would be great. I am not a Novice on the PC, but also not a total geeeek either! I am having a lot of hungapp error messages, so something is wrong here, it is just not being detected by any program I have on my PC or download that will pick up what these programs will not. If you need the name of the program that is finding my Host File Modified, please advise. It is I am sure one you have heard of if you are computer savvy!
Lady GaGa
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Gargamel360 on September 30, 2010, 03:11:01 AM
Are you.......
                   .......caught in a bad romance? ;)

Read and follow the guide at start of this thread>>
http://forum.avast.com/index.php?topic=53253.0 (http://forum.avast.com/index.php?topic=53253.0)
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 02, 2010, 05:05:24 PM
Gargamel360 ::) ???
Hey I have went to the link below and did the OTL Scan, not sure if I did it right or not, as the instructions are a little sketchy (that is just my opinion-as they way they are explained I do not get a Scan.txt file to download and save to the desktop as directed)anyway I will attach the OTL.txt and Extras.txt files, and if I did something wrong could you guide me in the right direction? Or should I just post on the www.geekstogo.com/forum site, I have had Malwarebytes on my PC for years, and it hasn't found anything in a while, attaching it with this reply, I did a scan on 9/30 and it showed nothing. I will do another one today and post it if you like. Let me know after you read this Post please.I am very leary of messing with registry files, as I do know pretty much about computers, but that is one area I don't mess with unless there is a program like OTL that will fix these etc. Now I have like 9 things that popped up on my desktop after I clicked to attach the files...??? Why, what or can I do with these they are album art from songs I have downloaded, a desktop.ini file and 1 says folder, what are these and why after attaching the OTL & Extra's logs did they appear on my desktop? I see you are not online now, since I am replying to you, will it show so someone else may be able to help me now?
Thanks,
Lady GaGa


Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 02, 2010, 05:50:33 PM
 :)
Okay I figured out if I refreshed my desktop all those 9 files disappeared. Now I know what to do next time...LOL. As I stated in the beginning I do somewhat know things about computer's, I am not a Novice, but neither a total computer geek. I am going to go to the geekstogo.com/forum and register to post now, since I am not able to attach the OTL.TXT file as it is too big. If you can help me, please reply to my post or email me as I do not have my email hidden in my profile,I have copied and pasted your name if the is your screen name for your email also, I will know if it goes into my spam folder that it is you. Any help you could give me would be greatly appreciated. I know there is something hiding that is modifying my HOST file, as nothing is picking it up except Dr. Cureit (Free), have you heard of that program b4? It did find in the first week of Sept. 4 trojans and that the host file had been modified.But since then I have ran it twice more and it only finds that the HOST file has been modified, and says that that is a sign of malicuous software on my PC, but Avast, Malwarebytes, Spybot or any of my programs are finding anything. I do still have Hijack This on my computer, should I uninstall it like NOW????? Pleae advise! And thank you for your help.
Lady GaGa
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: CraigB on October 02, 2010, 05:59:30 PM
Lady GaGa, you need to go into your profile and hide your email so you dont get spammed.
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 02, 2010, 06:03:20 PM
Thank You on hidding my email....will do it now!!!!
Lady GaGa
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 02, 2010, 06:19:30 PM
CraigB
I have tried 4 times in my profile to hide my email address and it keeps telling me to log out and back in, have done that 4 times and made up a security ? and Answer and put in my password I registered with, and it is still not working. Help????
Thanks
Lady GaGa
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: essexboy on October 02, 2010, 06:59:51 PM
Hi lady gaga could I have the main OTL text please
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: YoKenny on October 02, 2010, 09:10:09 PM
CraigB
I have tried 4 times in my profile to hide my email address and it keeps telling me to log out and back in, have done that 4 times and made up a security ? and Answer and put in my password I registered with, and it is still not working. Help????
Thanks
Lady GaGa
Your email addres is only visiable to the Forum admins now. :)

Follow essexboy's advice. 
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 02, 2010, 09:19:47 PM
Hey essexboy
It says this when I tried to even copy & past the OTL.TXT into this reply:

The following error or errors occurred while posting this message:
The message exceeds the maximum allowed length (10000 characters).
Lady GaGa ???
What Now???????????????????????????????


 

Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: essexboy on October 02, 2010, 09:22:03 PM
Could you attach the file please

Bottom left of the posting page is additional options
click this
Using the browse button locate the OTL.txt file and then post  ;D
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 02, 2010, 09:24:22 PM
Craigb
Thank You, I tried to copy and past and got an error message the OTL.TXT was over 1000 characters what now?????

 

Follow essexboy's advice.  
Your email addres is only visiable to the Forum admins now.

Follow essexboy's advice.  
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 02, 2010, 09:27:24 PM
Essexboy
I have already tried attaching but the limit is 192KB, and the OTL.TXT is 264 KB, so it would not let me attached it. Been there and tried it already. What now?

Thank U
Lady GaGa :(
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Jahn on October 02, 2010, 09:50:55 PM
Essexboy
I have already tried attaching but the limit is 192KB, and the OTL.TXT is 264 KB, so it would not let me attached it. Been there and tried it already. What now?

Thank U
Lady GaGa :(

Open OTL.txt in Notepad.

Highlight and copy the first half of the text.

Save as OTL1.txt.

Highlight and copy the second half.

Save as OTL2.txt.

Attach the files in reply(ies) to this topic.
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 02, 2010, 10:05:23 PM
Jahn
Thank U, I thought of that, but was not sure if anyone would want me to do it that way. Give me a few minutes and I will have them to you!
Lady GaGa  :) I am a Newbie so bear with me...LOL

Do you want me to just post them in General or in a reply to U???????
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Jahn on October 02, 2010, 10:33:17 PM
Attach the files in reply(ies) to this topic.
Jahn
Thank U, I thought of that, but was not sure if anyone would want me to do it that way. Give me a few minutes and I will have them to you!
Lady GaGa  :) I am a Newbie so bear with me...LOL

Do you want me to just post them in General or in a reply to U???????

Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: essexboy on October 02, 2010, 10:52:40 PM
No problems, that is a forum limitation unfortunately 
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 02, 2010, 11:18:41 PM
Jahn
Listen I took and copied & Pasted the OTL.TXT into wordpad so that it opens in Word, and did a word count, and it is 17,747 words....so to break it up and name it OTL1.Txt,OTL2.txt etc...is going to take a while. I am house & dog sitting for 3 dogs for my daughter, so I am back and forth from my Condo to her House. I will work on getting it divided up within notepad.txt files 1,2,3, etc.....it will be about 16 txt documents doing it that way. I have to go now to my daughters house to feed the dogs and will be gone for about 3 hours. I will work on it and get it posted in replies as soon as I can. Thanks for all ur help! PS: when u log back into the forum as I see u r offline now, can u find out the exact amount of words u can submit in one reply for me? I thought it said 10,000, but it could have been 1,000 words????? That would help me greatly.
Lady GaGa
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: essexboy on October 02, 2010, 11:53:28 PM
upload to Mediafire (http://www.mediafire.com/) and post the sharing link.

This means that you can do it in one go without breaking it up or word counting  ;D
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: DavidR on October 03, 2010, 02:08:50 AM
You have some confusion about the two methods of a) copying and pasting and b) attaching a file, they use different measures. I have copied my response to your other Topic.

Its 10000 characters I believe not words, this is however if you are pasting in the post. Attaching a file is not limited by characters but by how big in KB it is. Your problem in the other topic relating to this issue really could have been covered there, as everyone would know why you need this.

You can't post or attach the otl.txt file because it is too big do as has been suggested and break it into to roughly equal parts (otl1.txt and otl2.txt). Open the original otl.txt file and using the Slider to the right drag it down to about halfway. Copy everything above that point into to otl1.txt and copy everything below that point into to otl2.txt.

Now you should be able to attach these two smaller files otl1.txt into one post and olt2.txt into a second post.
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 03, 2010, 08:48:16 PM
 :D
Jahn
Here are the 2 OTL files, as I had to make 2 notepad files since it was over the KB limit. I will also do as suggested by essexboy via mediafire and upload the whole OTL.txt orginal file unbroken up. Thanks for everyone's help.
Lady GaGa
Whenu click on additional options to attach a file this is what it says:
Allowed file types: txt, jpg, gif, png, log
Maximum attachment size allowed: 200 KB, per post: 4
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: essexboy on October 03, 2010, 09:01:19 PM
DataUpload.job
ConfigExec.job

I noticed these two tasks running - do you recognise them

I will wait for the entire log before I can see what else is there
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 03, 2010, 09:24:47 PM
OTL.txt file via Mediafire
Sharing url: http://www.mediafire.com/?wh1fj4wtdy4yt

Thanks Lady GaGa
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 03, 2010, 09:45:05 PM
Essexboy
I do not know what these two are?????? I posted the sharing url for mediafire with the OTL.txt file I did it in a reply, should I just do a new Post and name it OTL.txt file or what? Please take a look at it, I am hoping I did the OTL Scan right, as when I read the instructions on how to run the scan and to save the Scan.txt file to ur desktop, no such file was available after the scan to save, so I did a scan with the default standard output and the minimal output, I did get the OTL.txt file and the extras.txt, a little confusing on the instructions, and I run not ur average scans sometimes, so usually I can understand the instructions...but these ???

DataUpload.job
ConfigExec.job

I noticed these two tasks running - do you recognise them

I will wait for the entire log before I can see what else is there
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 05, 2010, 12:43:04 AM
OTL.txt sharing URL:
http://www.mediafire.com/?wh1fj4wtdy4yt
Hope this helps get me the help I need. Just got on the PC a few mins. ago. Will check back later and see anyone that has been trying to help me, has had time to look at OTL.txt file and give me guidance.
Thanks to All,
Lady GaGa
Title: Re: My Host file has been Modified, what is causing this? All Scans are clean-Help!
Post by: Lady GaGa on October 10, 2010, 07:08:31 PM
My Host file has been modified again, since this post and 8 viruses have been found:
Probably DLOADER.Trojan were found with a program I use when my computer is acting funny and none of my programs find anything - it is DoctorWeb Scanner(Free)Dr. Cureit, and it always finds things. I have Avast 5.0, Spybot, and Malwarebytes on my PC, and none of them picked up anything. Is this Trojan what is modifying my Host file? I submitted an OTL.txt and haven't received any new replies lately. I need help, how bad of a security risk is it when my host file is modified, as I know this maps your name to your IP address? I do internet banking and am worried of the security risk. I have quarantined the above. I need help here, anyone willing to help me would be greatly appreciated.
Thanks
Lady GaGa