Possible Hosts File Hijack !!!!

Discussion in 'Malware Help (A Specialist Will Reply)' started by Maggie_61, Apr 6, 2006.

  1. Maggie_61

    Maggie_61 Private First Class

    Please see the attached message from WINDOWS DEFENDER !

    What do I do now ?? :rolleyes:


    HEEEEEELPPPP !!!!!


    Thanks !
     
    Last edited: Aug 21, 2006
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.
    • Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    • Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    • After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
    • When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
      • Bitdefender
      • Panda Scan
      • HijackThis
    .
     
  3. Maggie_61

    Maggie_61 Private First Class

    Windows Defender in order to remove this hijack threat, it completely removes the "hosts" file found in C:\WINDOWS\system32\drivers\etc\hosts.

    Do I need this hosts file ? :rolleyes:

    What will hapen if Windows Defender erases it from my system ???


    HEELP ME, PLEASE !

    Thanks,
    Maggie
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    It will probably just create a default hosts file. If not, you can just use the below to create a default hosts file. It's no big deal!

    Download HOSTER and then follow the below steps.
    • Unzip Hoster to a convenient folder such as C:\Hoster
    • Run Hoster.exe, click Restore Original Hosts and then click OK.
    • Click the X to exit the program
    The key thing you need to determine is who/what was attempting to modify the hosts file to begin with.
     
  5. Maggie_61

    Maggie_61 Private First Class

    You say "The key thing you need to determine is who/what was attempting to modify the hosts file to begin with."

    What do you mean? I dont know what happened.... :rolleyes:

    I only downoaded Spyware Doctor and Spy Sweeper.

    Thanks !
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What I'm saying is that you need to check to see if you have malware that is attempting to modify the hosts file. You should just run the READ & RUN ME sticky procedure to make sure you are clean.

    Did you run Hoster to reset the hosts file back to default? You will have to accept the change if Windows Defender popups up and warns you that the hosts file is being changed because you will be the one changing it.
     
  7. Maggie_61

    Maggie_61 Private First Class

    Windows Defended ERASED the hosts file and I just created a new with HOSTER.

    Is this OK now ? :rolleyes:
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Well that depends on whether you are still having any problems or not.

    Are you?
     
  9. Maggie_61

    Maggie_61 Private First Class

    Not yet....

    We´ll see.... ;)

    Thanks !!!!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds