avg

Topic

New Reply

After getting and ( I think ) removing a nasty worm (netsky??) There are some web pages that I can not get on. For example http://www.grisoft.com. I can go to any other grisoft page but when I try to go to the home page it says:

“The connection was refused when attempting to contact http://www.grisoft.com”

There are a few others too. ????

Edit…. I just got the same message when trying to get on “support.microsoft.com”

Reply | Quote

Replies

Very occasionally I get a problem with “Connection refused”, usually when I got impatient as my userid started up in the morning. Nothing to do with Norton AV (as far as I am aware). The problem goes away after a reboot and a bit more (self-enforced) patience…

John

Reply | Quote

There is some malware that will block update and security related sites. Have you done another complete A/V scan? How about Adaware, Spybot & MS Antispyware scans?

Joe

--Joe

Reply | Quote

Thanks Joe,
Yes, and that is why I posted , as I read up about the malware that I had, and it said that it would block access to such sites. I ran AVG and a HOST of others to get rid of it. I had to go next door to a neighbor to get to the AVG grisoft site to download the “Vcleaner ‘ they have.
I ran it in Safe mode.
Hence, According to all my scans, I have gotten rid of the worm. But I still can’t get on http://www.grisoft.com and a host of related sites, (As I stated above includes “support.microsoft.com”) which leads me to think that I still have ‘something’ left over from the worm. I have flushed the cache on both Explorer and Firefox.
But I am now as a lost as what to do next.
Any Ideas…….

Reply | Quote

Check Internet Options>Security>Restricted Sites>Sites.
Look for any of those addresses that it may have added to your restricted sites list. Delete as necessary.

Reply | Quote

I’ve only skimmed this thread quickly, but if you haven’t already done so, look for a hosts file and see if the problem domains have been redirected.

Reply | Quote

Your the MAN!
The nasty thing had put In the host file every major virus detection web site and redirected them back to my computer!

Now, I used Microsoft sypware (tools) to go look at the host file and I blocked them from there. Is that ok to do? Or is there a better way?

Thanks again.

Reply | Quote

If you (or any of your programs) don’t have a particular need for the hosts file, you can just rename it to, say, hosts.old or delete it. Alternatively, there are various pre-made host files, designed to avoid a “host” of pesky sites, for instance here. I think one or other of the free anti-spyware apps also has an option to lock the hosts file.

Alan

Reply | Quote

I haven’t installed the MS product, so I have no idea what it did. However, if all seems to be working again, I guess it did the right thing.

Reply | Quote

Spybot S&D in Advance Mode In the Tools section has a Host file access that allows you to edit the Host file and also offers to create a backup of your Host file when you first install Spybot, should it ever be damaged, compromised or corrupted. HTH

Reply | Quote

Thanks everyone….
I have learned a lot about Host files in the last couple of days thanks to you and a nasty worm………..

I think I am all cleaned up and back to normal.

Thanks again

Reply | Quote