Re: To clarify the link for CWShredder Update

From: George \(Bindar Dundat\) (JustMe_at_nothome.net)
Date: 02/28/04


Date: Fri, 27 Feb 2004 16:30:34 -0800

Are you looking at the file date itself or using the info pane?

-- 
George (Bindar Dundat ©) MS-MVP
For Windows Troubleshooting Tips see;
http://aumha.org/win4/a/tshoot.htm
"Gary S. Terhune" <grystnews@mvps.org> wrote in message
news:%23UGJwBZ$DHA.2636@TK2MSFTNGP09.phx.gbl...
| I have it scheduled for 6 am daily. Last HOSTS update was 2/24, mine has
| 2/25 date, but the time on it is 10:49 PM--which is when I manually updated
| to make sure I had a fresh one before passing it on to my daughter. Because
| I add back in Custom URLs, that would make my timestamp sync to whenever I
| run update.
|
| I don't know if your app checks timestamp and only updates if newer is
| available (which might get strange if newer comes out but I then add custom
| URL before update kicks in--timestamp would be later on my file than that of
| MVPS...), or if it just replaces file regardless. If the former, then it
| would appear to be working properly--if the latter, then something's wrong.
| Best I can do is make sure I check every morning until a new one appears,
| and keepa my hands off until then.
|
| -- 
| Gary S. Terhune
| MS MVP for Windows 9x
|
| George (Bindar Dundat) wrote:
| > Well, I do have a VPC that I could try it on.  I haven't even tried
| > connecting that to the net.  I do know that if the entire file gets
| > hijacked that HFM will catch it. but in those cases the whole file is
| > being over-written and the check number that is in there goes missing
| > so it's easy to detect.  Then you get a warning that the file has
| > been tampered with and a message box to start a restore from backup
| > or a fresh download.  Which reminds me I have to ask GST how that
| > command line is working out since I haven't been using it.  I think
| > what I might do is add a line count function to the app somehow so if
| > anything gets added or deleted (it shouldn't, but.....) it would get
| > picked up by HFM.  Right now the System/Hidden/Read Only attributes
| > are set so the file is locked but if Spybot can get around that then
| > something else could too.
| >
| >
| > "PA Bear" <PABear@mvps.org> wrote in message
| > news:OItiHMY$DHA.2800@tk2msftngp13.phx.gbl...
| >> TonyKlein, our Spyware God, just wrote:
| >>
| >>> There are a couple of CWS variants that hack the Hosts file
| >>
| >> e.g., I suspect, CWS.SmartKiller.
| >>
| >> Suggestion: Intionally infect your
| >> machine-running-HOSTS-File-Manager with CWS.SmartKiller 'n see what
| >> pans out. --
| >> ~PA Bear
| >>
| >> George (Bindar Dundat) wrote:
| >>> Spybot got them.  I just had the same report from Mike Burgess.
| >>> See if you were using my HOSTS file manager there would be a backup
| >>> there and you could just restore.  That'll teach ya.
| >>>
| >>> "PA Bear" <PABear@mvps.org> wrote in message
| >>> news:OcbIH5Q$DHA.2432@TK2MSFTNGP11.phx.gbl...
| >>>> Not only are those two HOSTS file entries not working now but
| >>>> something (Spybot? CWS.SmartKiller?) had removed them from my list!
|


Relevant Pages

  • Re: To clarify the link for CWShredder Update
    ... George (Bindar Dundat ©) MS-MVP ... "Gary S. Terhune" wrote in message ... |>>> See if you were using my HOSTS file manager there would be a backup ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: To clarify the link for CWShredder Update
    ... George (Bindar Dundat ©) MS-MVP ... For Windows Troubleshooting Tips see; ... "Gary S. Terhune" wrote in message ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: To clarify the link for CWShredder Update
    ... George (Bindar Dundat ©) MS-MVP ... For Windows Troubleshooting Tips see; ... "Gary S. Terhune" wrote in message ...
    (microsoft.public.security)
  • Re: To clarify the link for CWShredder Update
    ... Not only are those two HOSTS file entries not working now but something ... ~PA Bear ... "George (Bindar Dundat)" wrote in message ... > George MS-MVP ...
    (microsoft.public.security)
  • Re: To clarify the link for CWShredder Update
    ... Not only are those two HOSTS file entries not working now but something ... ~PA Bear ... "George (Bindar Dundat)" wrote in message ... > George MS-MVP ...
    (microsoft.public.windows.inetexplorer.ie6.browser)