Jump to content

mvps Hosts file detected as Trojan.Win32.Host2.gen


Go to solution Solved by Wesly.Zhang,

Recommended Posts

Hi - wondering if I could have you look over the following entries for me, please. Something in these is triggering the trojan alert again, but I can’t seem to pinpoint which one. I add them one at a time, but it seems to be a delayed reaction (sometimes hours) before the file is detected again.

0.0.0.0 avast.com
0.0.0.0 ipm-provider.ff.avast.com
0.0.0.0 dotomi.com
0.0.0.0 www.logmein.com
0.0.0.0 www.teamviewer.us
0.0.0.0 www.realvnc.com
0.0.0.0 cdn.blatungo.com
0.0.0.0 blatungo.com
0.0.0.0 facebook.com
0.0.0.0    www.facebook.com
0.0.0.0    fb.com
0.0.0.0    thesimsresource.com
0.0.0.0    www.thesimsresource.com
0.0.0.0 simsdom.com
0.0.0.0 www.simsdom.com
0.0.0.0 facebook.net
0.0.0.0 doubleclick.net
0.0.0.0 vacaneedasap.com
0.0.0.0 aol.com
0.0.0.0 oath.com
0.0.0.0 yahoo.com
0.0.0.0 netcheckcdn.xyz

Any thoughts or feedback would be appreciated !

Thanks 🤔🤓🙏

Link to comment
Share on other sites

Hi - wondering if I could have you look over the following entries for me, please. Something in these is triggering the trojan alert again, but I can’t seem to pinpoint which one. I add them one at a time, but it seems to be a delayed reaction (sometimes hours) before the file is detected again.

0.0.0.0 avast.com
0.0.0.0 ipm-provider.ff.avast.com
0.0.0.0 dotomi.com
0.0.0.0 www.logmein.com
0.0.0.0 www.teamviewer.us
0.0.0.0 www.realvnc.com
0.0.0.0 cdn.blatungo.com
0.0.0.0 blatungo.com
0.0.0.0 facebook.com
0.0.0.0    www.facebook.com
0.0.0.0    fb.com
0.0.0.0    thesimsresource.com
0.0.0.0    www.thesimsresource.com
0.0.0.0 simsdom.com
0.0.0.0 www.simsdom.com
0.0.0.0 facebook.net
0.0.0.0 doubleclick.net
0.0.0.0 vacaneedasap.com
0.0.0.0 aol.com
0.0.0.0 oath.com
0.0.0.0 yahoo.com
0.0.0.0 netcheckcdn.xyz

Any thoughts or feedback would be appreciated !

Thanks 🤔🤓🙏


Hello,

You can delete one of them one by one, and use avp scan the file after you delete one rule(one line). If you find after you delete one rule, There is no alarm when you scan the hosts file, You will know which rule lead to this alarm. Good luck.

Attenion: It maybe have two or more rules will lead to this alarm, so please use time to check the rule.

Regards.

Link to comment
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
 Share



×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.