need help with windows hosts file

Discussion in 'Hardware' started by Still Learning, Jun 19, 2008.

  1. Still Learning

    Still Learning Private First Class

    ok i found the hosts file directory

    windows/system32/drivers/ect/

    and would like to know what are all these weird entrys showing with my local host IP? what will happen if i delete them? The only thing i host on my machine is a shared drive with other computers on my home network. here is an example of what i am talking about..


    127.0.0.1 localhost
    # Start of entries inserted by Spybot - Search & Destroy
    127.0.0.1
    127.0.0.1 007guard.com
    127.0.0.1 008i.com
    127.0.0.1
    127.0.0.1 008k.com
    127.0.0.1
    127.0.0.1 00hq.com
    127.0.0.1 010402.com
    127.0.0.1
    127.0.0.1 032439.com
    127.0.0.1
    127.0.0.1 1001-search.info
    127.0.0.1
    127.0.0.1 100888290cs.com

    it goes on with all these weird domain names for like 8000 entrys all from local host. then ends with..

    # This list is Copyright 2000-2008 Safer Networking Limited
    # End of entries inserted by Spybot - Search & Destroy

    these dont sound like safe websites to me, are these useing my computer as a zombie? all of them are coming from 127.0.0.1

    there also seems to be a backup file with only one entry saying..

    127.0.0.1 localhost

    should i delete the other one and use that back up hosts file?
    what do those entrys mean? does that mean all of those sites can access my computer? thanks in advance for any help
     
    Last edited by a moderator: Jun 21, 2008
  2. lbmest

    lbmest MajorGeek

    Hi Still Learning,

    127.0.0.1 is the loopback address for any computer.
    By having the host file like this, if you try to go to one of the bad sites (wwwdot007guarddot com) your computer is loopbacked to itself because it checks the host file 1st in the DNS chain of events so you can't go there and are protected.
    Spybot S & D and Spyware Blaster both put entries in the host file to accomplish this.
    A good explanation of the host file - http://www.ezlan.net/host.html

    Hope this helps.
     
  3. Still Learning

    Still Learning Private First Class

    I see, so i should only be worried if there is a diffrent ip then 127.0.0.1 or my own ip? and if i would manually like to block a site i can add an entry into the hosts file useing notepad? thanks!!


     
  4. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi Stilllearning

    I have removed a few of the links in your first posts as they are added by spybot as mentioned for being known nasty sites, so as they where live urls I wouldnt want anyone clicking them and becoming infected.


    To your other question above, that is a yes, you can add your own urls to block to the Hosts File but follow the same rules as spybot does by adding the 127.0.0.1 then the url, you can also do this as Spywareblaster does by adding them to the blocked site lists , in IE this is Tools > Internet Options > Privacy > add the URL to the top box and click Block. In FF this is Tools > Options > Pricavy and then click Exceptions button and add your url and click Block.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds