Strange looking Host found?

No, I do not have the Chrome browser installed. I did have it on but several days ago I uninstalled it. I was having some problems with it. I installed Firefox in it's place.

Here's what I did so far: I found the folder by your posting (thanks.) I went to the folder, opened the window, erased (deleted) the file closed just the window, and reopened it, only to find that it came back?

So, which files do I copy from your post to copy into the Host file?

Thanks for your time.

dwdraw2

Thanks Jacee for the reply.

I'll make a copy of the instruction and follow them to the "T."

Thanks again

dwdraw2

Jacee, do I go back and reset the Proxy after changing the Host?

thanks for your time.

dwdraw2

Thanks USERNAMEISSUES for the downloads. I have them downloaded in explorer.

I'll check back later to see if there is more instructions.

Thanks again.

dwdraw2

Thanks Jacee and Usernameissues.

You both have been a lot of help. Jacee, the Proxy unchecked. I pasted the text provided by Usernameissues. and below is a copy of a system check by "rkill":


Rkill 2.6.4 by Lawrence Abrams (Grinler)
Bleeping Computer - Technical Support and Computer Help
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
RKill - What it does and What it Doesn't - A brief introduction to the program - Anti-Virus and Anti-Malware Software

Program started at: 01/28/2014 06:09:41 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Windows Firewall Disabled

[HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = dword:00000000

Checking Windows Service Integrity:

* No issues found.

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* No issues found.

Program finished at: 01/28/2014 06:09:52 PM
Execution time: 0 hours(s), 0 minute(s), and 11 seconds(s)


The text provided by Usernameissues cleared the rogue host. Awesome!

Thanks again for your help.

Thanks for your time.

dwdraw2

dwdraw2 said:

No, I do not have the Chrome browser installed. I did have it on but several days ago I uninstalled it. I was having some problems with it. I installed Firefox in it's place.

Here's what I did so far: I found the folder by your posting (thanks.) I went to the folder, opened the window, erased (deleted) the file closed just the window, and reopened it, only to find that it came back?

So, which files do I copy from your post to copy into the Host file?

Thanks for your time.

dwdraw2

This might not be a problem - but it is not the norm for a stock install of W7. It might be AVAST that is putting the file back or it might be something bad putting it back (or changing it). Jacee will walk you thru checking for bad things.



You might not need this info now, but you can copy/paste any or all of the standard (unmodified) files from that zip into that folder. In the detail view, they should look close to this:

Thanks for the reply Usernameissue.

It took a few tries, but it finally took the pasted files. I have checked it and your files have not changed. It worked. The Rkill list above shows the host with "no issues found." I'm thinking that Chrome might have put that strange host there when I installed it-if not maybe someone else did? But anyway, it's finally gone thanks to the files you sent to me.

I saved those files in case that I might need them later-never know.

Thanks for your time-I appreciate it.

dwdraw2