[TerenceM2]

Hi TSG,
I am having a problem with this persistent Tracking Cookie- Atmdt.
AVG resident shows me a warning about this everytime I open IE. AVG places it in the Virus Vault.
I have tried removing Atmdt thus:
>tools > internet options > settings > view files > right click to delete everything with Atmdt in the files list.

MBAM,SpyBot S&D yield no results for Atmdt. Secunia PSI score is 100%.

My privacy settings are set to block 3rd party cookies,but it still gets in!

I am unsure as to what to try next to prevent this Atmdt re-appearing.

I'm running Windows XP Home,service pack 3.

Thank you in advance for any help,
regards,
TerenceM2.

[hewee]

Add it to IE block list.

[TerenceM2]

Thankyou Hewee
Atdmt added to block list,just logged off and restarted IE, no warning from AVG resident- yay

[hewee]

You're welcome.

You can also use a hosts file to block out a whole lot of things.
Blocking Unwanted Parasites with a Hosts File.
Also read the links from the drop down at the top.
Like http://www.mvps.org/winhelp2002/cookies.htm

SpyBot S&D has the globe hosts but there are better hosts files.
Also a good hosts file manager helps a whole lot because you can edit update, restore, backup the hosts file.

SpywareBlaster has the same thing in it.

[perfume]

Dear TerenceM2,
hewee's advise is very sound as always. I have no shame in admitting that i have heard "HOSTS File" first from hewee!
BTW, in Internet options> privacy>set the slider to Medium High. That can help. Best wishes.

[TerenceM2]

Thanks guys for your help

Sad to report that the Atdmt cookie has come back

I have now downloaded Spyware Blaster and will see if that helps.

I did not fully understand about creating a Hosts File..but I will re-read all the information and try and work it out.

TerenceM2.

[TerenceM2]

OK, this is starting to get annoying. I just turned on my PC to check emails etc,guess what??

2 warnings from the AVG Resident:
File Name:
C:/Documents and Settings/Terry/Cookies/terry@atmdt[2]txt
Process ID:
4744 ( when I opened IE Browser)

Process Name:
C:/ Program Files/Common Files/MicrosoftShared/WindowsLive/WLLoginProxy.exe

Process ID:
3376 ( when I opened HotMail)

I do not understand how this cookie is constantly setting off warnings from AVG.
Maybe I should try rebooting and scans in Safe Mode?

[E-7]

Originally Posted by hewee

You're welcome.

You can also use a hosts file to block out a whole lot of things.
Blocking Unwanted Parasites with a Hosts File.
Also read the links from the drop down at the top.
Like http://www.mvps.org/winhelp2002/cookies.htm

SpyBot S&D has the globe hosts but there are better hosts files.
Also a good hosts file manager helps a whole lot because you can edit update, restore, backup the hosts file.

SpywareBlaster has the same thing in it.

Follow the good advice of adding a HOSTS file to your computer
The MVPS HOSTS file was recently updated [June-21-2009]
http://www.mvps.org/winhelp2002/hosts.htm

HOSTS File - Frequently Asked Questions
http://www.mvps.org/winhelp2002/hostsfaq.htm

What it does ...
The Hosts file contains the mappings of IP addresses to host names. This file is loaded into memory (cache) at startup, then Windows checks the Hosts file before it queries any DNS servers, which enables it to override addresses in the DNS. This prevents access to the listed sites by redirecting any connection attempts back to the local (your) machine. Another feature of the HOSTS file is its ability to block other applications from connecting to the Internet, providing the entry exists.
You can use a HOSTS file to block ads, banners, 3rd party Cookies, 3rd party page counters, web bugs, and even most hijackers. This is accomplished by blocking the connection(s) that supplies these little gems.
Example - the following entry 127.0.0.1 ad.doubleclick.net blocks all files supplied by that DoubleClick Server to the web page you are viewing. This also prevents the server from tracking your movements. Why? ... because in certain cases "Ad Servers" like Doubleclick (and many others) will try to open a separate connection on the webpage you are viewing.
For XP SP2 users you should see a Security Center prompt about allowing this connection. [screenshot]
Simply click No and continue. Yes the prompts can be annoying but at least you'll know, however you should not see these prompts if these entries are included in the HOSTS file.
Note: this prompt only occurs if (example) *.doubleclick.net is included in the "Restricted Zone".

More Examples
AdTech | BridgeTrack | Honesty | Mgnetwork | ValueClick | Google AdSense | Atdmt | Atdmt

[hewee]

Cookies can be like blocking web site and the address changes.

Plus there can be more then one cookie from a web site.

Hosts files can block sites but if you block "bad.com" then you can not go there but you may get taken to "www.bad.com" that is really the same site. Or even others if they ha.e .net at the end.

A hosts file is easy really if you use a hosts file manager.
I use HostsMan but there is HostsXpert there also and that one needs no install.
So try it out. They will also let you return to your default hosts file your PC has or do a backup of the one now so you can return to it.

[hewee]

OK doing a search on atmdt you may have spyware on your computer.

Get HijackThis v2.0.2 and run it and post a log.

[perfume]

Dear TerenceM2,
I have Googled around and found an old article (applies to now too) on how to delete "persistent cookies". It seemed very informative. Kindly read it and apply the solutions suggested. Here's the link. :[URL="http://answers.google.com/answers/threadview/id/238487.html"]http://answers.google.com/answers/threadview/id/238487.html[/URL

If it does not work, then take the HJT route.

I seem to have some trouble with Opera, and the link is not highlighting. Sorry about that. Kindly paste it. Got to go and mend Opera! Dear Gizzy, what's happening, come to my rescue! Even the smileys are not on!

[perfume]

Dear hewee,
Thanx for the HostsMan! That worked wonders and does not leave the fingers bleeding! Thumbs up!

[hewee]

You're welcome perfume.

If it list the "Mike's Ad Blocking Hosts" that is no longer getting updates.
So go to Host, Manage Update Sources... and open it.
Then high light it from the list and click the Hide Source button.

Also Hphosts started a "hphosts-partial" that gets updates all the time.
Then he does not update the bigger full list but every couple months or what ever. So you still get good needed updates from the "hphosts-partial".

To add the "hphosts-partial" click the "Add Source"
Under the Name put in hphosts-partial
Under the URL put this link in it. http://hosts-file.net/hphosts-partial.asp

Here is his web site too.
http://forum.hosts-file.net/

Now when you go to check for updates that one site will not show up and the other "hphosts-partial" will.

If you do have sites you go to that are blocked you can disable the hosts or just the site but you need to close down your browser and open it again to see the change take effect.
Then if it is a site you go to all the time you can uncheck it and or add it to the Exclusion list.
With the Exclusion list the sites you list there never get added to the hosts file.

[TerenceM2]

Hi Hewee and Perfume,
Thank you guys for all your help [thumbs up]
I have down loaded HostsMan from CNet and added Atdmt.com to it's database.
Kind regards,
TerenceM2.

[hewee]

You're welcome.

Just learn to use and keep the host file updated.