Trendmicro Sysclean deleted lines from MVPS HOSTS file - false positives?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
I ran the Trend Micro Sysclean free product, and other than one popular
audio conversion program file which is generally considered around the net
to be a false positive, it deleted a bunch of lines from my MVPS HOSTS file
as follows:


These are several of the 80 lines it deletd:

SSAPI requires the system to reboot.
Detected Items:
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,1-se.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,a1.webhancer.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,audioseek.net
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,b1-v2-bell.webhancer.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,bgw.qsrch.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,commonname.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,conf.therealsearch.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,content.delfinproject.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,coolwebsearch.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,d.webhancer.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,d2.webhancer.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,d3.webhancer.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,delfinproject.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,download.bulletproofsoft.com
[CLEAN SUCCESS][Adware_MemWatcher] 7.0.0.1,download.webhancer.com


I checked the backup HOSTS it created against the latest MVPS HpHosts file,
and all these lines are there in the same format, i.e.:

127.0.0.1    a1.webhancer.com

which is just a redirect to the localhost, blocking the browser(s) from
reaching those questionable sites.

Is there any reason that the anti-spyware part of Trend Micro deleted these
lines or is this a bunch of false positives?


A Google search indicated that someone put a similar message on the Spybot
forums several months ago but there was no reply.


http://forums.spybot.info/showthread.php?t=29207

Re: Trendmicro Sysclean deleted lines from MVPS HOSTS file - false positives?

MegABitt994211@geemail.nocom wrote:
Quoted text here. Click to load it

It is was me, I'd just go back to the MVPS HOSTS file and not worry
about it. If it wasn't creating any problems for you.



--
  JD..

Site Timeline