siljaline
Mon Dec 27 18:02:10 CST 2004
"Susan" wrote:
>I posted this question to the AumHa forum, but I have a feeling that this
> site is probably more appropriate. I ran Hijack This and put the results
> through an on-line log analyzer (
http://hijackthis.de/index.php) and it said
> that the entry "O1 - Hosts: 64.91.255.87 xxx.dcsresearch.com" was NASTY AND
> SHOULD BE DELETED IMMEDIATELY. Is this true? What is it? How would I delete
> it if it really is a nasty fellow? How accurate/trustworty is an on-line log
> analyzer, anyway? Thanks for your attention to this questions.
Susan,
>I posted this question to the AumHa forum....
What was the reply to your query? I *cannot* find your post at AumHa Forums.
>How accurate/trustworthy is an on-line log analyzer, anyway?
You should note that the bottom of the site you mention that it is ~Beta, meaning
in development and cannot be fully trusted in giving "real" results.
>...and it said that the entry "O1 - Hosts: 64.91.255.87 xxx.dcsresearch.com"
This is what we call a 'HOSTS' file hijack, Susan.
Run "HijackThis" - firstly, install to a dedicated directory like this;
[C:\Program Files\HijackThis]
http://aumha.org/downloads/hijackthis.exe
Follow the instructions given here how to run HijackThis, save the output log
and post it for expert analysis - *not here*.
http://mvps.org/winhelp2002/unwanted.htm
We await your log for review :-)
Post in this Forum at AumHa >
http://forum.aumha.org/viewforum.php?f=30
Regards,
Silj
Moderator - AumHa Forums.
--
siljaline
MS - MVP Windows (IE/OE) 2003/04 AH-VSOP
________________________________________
Security Tools Updates
http://forum.aumha.org/viewforum.php?f=31
(Reply to group, as return address
is invalid - that we may all benefit)