Windows 10: Someone's FISHING on my computer

The link did not work for me either, it was from the OpenDNS site. Must have changed.

https://support.opendns.com/hc/en-us/articles/228008127

Perhaps I am not following the instructions:

Change the DNS servers on her NICs to Open DNS
See post #23 here:
Protect Your Privacy - Page 3 - Solved - Windows 10 Forums

 

Run CMD as admin and copy/paste (Windows overrides router's settings):
Code: wmic nicconfig where DHCPEnabled=TRUE call SetDNSServerSearchOrder ("208.67.222.222","208.67.220.220")[/quote]

 

Okay, they are saying you can't designate DNS servers in the router. That would be if you want to make sure that everything that connects to the router uses OpenDNS.

Our setup is to designate the DNS servers on the particular computer's network adapter:

right-click Start>Network Connections>Change adapter options






Right-click the adapter being used to access the internet, select properties.
Follow the instructions to add OpenDNS to the DNS settings for that adapter.

 

OK Confused again:
The tutorial referenced in your list of suggestions says to do the following:

Then enter here :
On the first line in the red box enter: 2620:0:ccc::2
On the second line in the red box enter: 2620:0:ccd::2

---------------------------------------------------------------------
But the OpenDNS site says the following:

Thanks for choosing OpenDNS! To get started, you’ll need to set up one or more of your devices to use OpenDNS’s DNS nameservers. For instructions on how to do this, choose your device type from one of the categories below.

Our nameservers are always:

208.67.222.222
208.67.220.220

I will await your response before committing this change.

 

2620:0:ccc::2 & 2620:0:ccd::2 are for IPv6
208.67.222.222 & 208.67.220.220 are for IPv4

 

OK Done. Don't understand what OpenDNS had to do with this though.

ESET Online Scanner is running now...

Then a final Restore Point

ESET log file
C:\Program Files (x86)\IncrediMail\Bin\AE\ActionEngine.dll a variant of Win32/ClientConnect.A potentially unwanted application
C:\Program Files (x86)\IncrediMail\Bin\AE\aeldr.exe a variant of Win32/ClientConnect.A potentially unwanted application
R:\INSTALL\16. Incredimail\IncrediMail.exe a variant of Win32/ClientConnect.A potentially unwanted application

I don't believe these are issues. Will look them up on the internet...see what they are...
Part of her e-mail client(Incredimail)

 

The three files are normal for the Incredimail program, located where they should be.

Restore point created. Time will tell...

 

Do not let ESET quarantine those first 2 Program files or incredimail will no longer work. If that's all it found, you are golden.

OpenDNS provide DNS resolver service. They have constantly updated servers which block known bad sites. Every time your computer makes an internet request, it has to be "resolved". By using OpenDNS servers to do the work, you avoid bad sites. It's a safeguard, and even speeds up DNS requests (as opposed to your ISP's DNS resolvers).

Every place you can go on the web is identified by a unique octet - a string of numbers xxx.xxx.xxx.xxx.

What is the IP address of www.google.com





So, if you want to go to www.google.com, you type these "words" in the address bar. DNS servers parse this information into an IP address (which is the real identity of the site). The DNS servers resolve www.google.com to 172.217.3.36 and take your browser there.

By having the OpenDNS DNS servers designated on your computer's network adapter, if you try to go to a known malicious site, OpenDNS will block it, even if your ISP's DNS servers would normally allow it.

 

Great. Let it run a few days before marking the thread as solved.
Cheers! *Thumbs