ie snare/mp snare

www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html


You`ll see a `Website Storage Settings` `panel; within that, scroll down to find iesnare/mpsnare, highlight it (them?), then tick the `Always Deny` option.

Thanks Tim for trying to help. Followed those instructions, restarted PC, ie snare now listed as 'deny' in Settings Manager, but ie/mp snare metadata fil still stubbornly starts upon opening IE. Not to worry..have to continue daily maual delete. Really appreciate your response.

OK, Plan B it is, then. On

www.geegeez.co.uk/iesnare-update-victim-fights-back-urges-others-to-do-likewise/



he gives a couple of links, with solutions.

http://www.geegeez.co.uk/iesnare-how-bookmakers-are-spying-on-you-from-your-own-computer/

http://justiceforpunters.org/iesnare-reputationmanager-find-delete-stop-re-infection/

Take particular note of the fact that he says it sometimes comes under a different name, possibly `Reputation Manager`. thereby fooling people into leaving it on their computers, inadvertently.

If none of this works, sorry, but you`re on your own!

How to remove iesnare

Visit this site
http://www.macromedia.com/support/docum ... ger07.html

In the website storage settings box, click the down button to see what's been left on your pc
if you come across iesnare or mpsnare, highlight it and click delete website.

How to prevent iesnare being left on your Pc

Click the Start button, click notepad or enter notepad in the bar at the bottom
Right-click on the Notepad item which appears at the top of the list
Choose "Run as administrator"

In "untitled - notepad" go to file and click open, then under "files of type" click all files
Enter "C:\WINDOWS\system32\drivers\etc" in file name and click open

Right click on "hosts" file (make sure it only says hosts, not hosts.bak or hosts.txt), select properties and uncheck read-only box at bottom beside attributes, then click "Apply" then OK.

Now double-click "hosts" again
Copy and paste the following lines, in the next line below where it says "127.0.0.1 localhost"

127.0.0.1 iesnare.com
127.0.0.1 iesnare.co.uk
127.0.0.1 www.iesnare.co.uk
127.0.0.1 mpsnare.iesnare.com
127.0.0.1 mpsnare.iesnare.co.uk
127.0.0.1 www.mpsnare.iesnare.com
127.0.0.1 www.mpsnare.iesnare.co.uk
127.0.0.1 ci-mpsnare.iesnare.com
127.0.0.1 ci-mpsnare.iesnare.co.uk
127.0.0.1 www.ci-mpsnare.iesnare.com
127.0.0.1 www.ci-mpsnare.iesnare.co.uk
127.0.0.1 admin.iesnare.co.uk
127.0.0.1 www.admin.iesnare.com
127.0.0.1 www.admin.iesnare.co.uk
127.0.0.1 iovation.com
127.0.0.1 iovation.co.uk
127.0.0.1 www.iovation.com
127.0.0.1 www.iovation.co.uk
127.0.0.1 www.iesnare.com
127.0.0.1 admin.iesnare.com
127.0.0.1 dra.iesnare.com
127.0.0.1 impsnare.iesnare.com
127.0.0.1 mpsnare.iesnare.com
127.0.0.1 mx.iesnare.com
127.0.0.1 snare.iesnare.com
127.0.0.1 iovation.com
127.0.0.1 accountlock-demo.iovation.com
127.0.0.1 admin.iovation.com
127.0.0.1 bam-pilot.iovation.com
127.0.0.1 batch.iovation.com
127.0.0.1 ci-accountlock.iovation.com
127.0.0.1 ci-admin.iovation.com
127.0.0.1 ci-mpsnare.iovation.com
127.0.0.1 ci-snare.iovation.com
127.0.0.1 dv-fw-a-nat.iovation.com
127.0.0.1 ioit.iovation.com
127.0.0.1 mx.iovation.com
127.0.0.1 p.iovation.com
127.0.0.1 rm-admin-demo.iovation.com
127.0.0.1 soap.iovation.com
127.0.0.1 test.iovation.com
127.0.0.1 testgw.iovation.com

Save the text file back to its existing location, then close notepad

Now, open the command prompt (start -> all programs->accessories->command prompt)
and check that it is working by...

Type in the word "ping" followed by any of the entries
(without the numbers)..e.g ping mpsnare.iesnare.com

Press enter

You're looking to see similar to this:

Pinging mpsnare.iesnare.com [127.0.0.1] with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time

Thank you Tim and Punter for the info. Punter - I followed the procedure you described above above many months ago. The ping still returns the required 127.0.0.1, so I guess its reasonable to presume the ie/mpsnare file that starts up every time IE is opened, is not actually communicating with the enemy. It just bugs me that I can't get it to stop at IE start up. Could be that either (a) the clever clogs at iovation.com have fixed a patch to overcome the fixes out there on the net or (b) my supplier of the betting platform knows damn well ie/mp snare comes in every time but is telling me fibs about its origin.

Will just keep going with the daily 'search/delete'rigmarole I guess. But sincere thanks to you both for your help and input here.

bump, everyone should do this.