In a recent phone call, I directed a customer to the page for establishing a GoToAssist support session, but their browser said it couldn't make a secure connection. I confirmed that their ISP wasn't #TalkTalk, who block such stuff in DNS by default, and had them try turning off Norton — but it was no good.

Today, making an in-person visit, I found their #hosts file contained a comprehensive list of domains used by #RemoteSupport services, all mapped to 127.0.0.1. They had until recently paid an annual subscription to a shady-looking remote support offering, who could apparently access their PC just fine. I removed all obvious traces of this, recommended they cancel the payment card used, and fixed the hosts file.

With their permission, and after a brief explanation of my rationale, I removed and cancelled Norton as an unrelated bonus.

Throwback to when I first learned about the #ElephantShrew. #sengi

Photo: John P. Dumbacher, Elizabeth J. Carlen & Galen B. Rathbun https://commons.wikimedia.org/w/index.php?curid=50028183