hosts file, BitDefender, AVG

hosts file, BitDefender, AVG

Secure Home | Search | About
 Anti-Virus Software    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
hosts file, BitDefender, AVG sobriquet 09-24-2007
Posted by sobriquet on September 24, 2007, 4:00 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

Hello.
Since a while, when I look up words in the online dictionary, Merriam-
Webster I encounter a problem, presumably due to certain ads on the
page:
http://www.m-w.com
Sometimes IE suddenly navigates away from the page unexpectedly and
jumps to the bottom right corner of the screen pointed at a different
url with a notification popping up, as can be seen in the following
screenshot:
http://www.ibbu.nl/~nsprakel/drivecleaner_x.jpg

So the notification from IE pops up with a msg in Dutch and the choice
to accept or cancel installing drivecleaner,
http://www.ibbu.nl/~nsprakel/drivecleaner_note.jpg
as well as a small browser window in the bottom right corner pointed
at their site.
When I cancel or close the notification, I end up at the site visible
in the next screenshot:
http://www.ibbu.nl/~nsprakel/drivecleaner_url.jpg

Or at a similar site, visible in this screenshot:
http://www.ibbu.nl/~nsprakel/errorsafe.jpg

So, I thought, maybe I can use the hosts file:
C:\WINDOWS\system32\drivers\etc\hosts

to redirect urls like that with the line

"127.0.0.1 nl.errorsafe.com"

added to that hosts text file.

But it seems something recovers the original hosts file and eliminates
the line that was added manually. Does anyone know if this is done by
BitDefender, AVG or by the Windows XP Pro (SP2) system itself and
whether and how I can modify these settings?
Or perhaps a better way to get rid of this annoying behavior of
unwanted websites that spontaneously come up when I look up words at
www.m-w.com?

Thx in advance for any feedback, Niek


Posted by Mike on September 24, 2007, 4:08 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
>
>But it seems something recovers the original hosts file and eliminates
>the line that was added manually. Does anyone know if this is done by
>BitDefender, AVG or by the Windows XP Pro (SP2) system itself and
>whether and how I can modify these settings?
>
Try spybot S&D - this has the option to block updates to the hosts file
--
Mike News

Posted by What's in a Name? on September 24, 2007, 6:30 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> snip <
> But it seems something recovers the original hosts file and
> eliminates the line that was added manually. Does anyone know if
> this is done by BitDefender, AVG or by the Windows XP Pro (SP2)
> system itself and whether and how I can modify these settings?

I don't think that the free version of BitDefender has a setting for
locking the hosts file. AVG Anti-Spyware does. XP doesn't lock it
either.

> Or perhaps a better way to get rid of this annoying behavior of
> unwanted websites that spontaneously come up when I look up words
> at www.m-w.com?

How about using Firefox with NoScript and AdBlock extensions
installed instead of IE?
Try SuperAdBlocker or a better AV solution like NOD32.

max
--
Virus Removal http://max.shplink.com/removal.html
Keep Clean http://max.shplink.com/keepingclean.html
Tools http://max.shplink.com/tools.html
Change nomail.afraid.org to gmail.com to reply.

Posted by Jim on September 24, 2007, 10:30 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>
> Hello.
> Since a while, when I look up words in the online dictionary, Merriam-
> Webster I encounter a problem, presumably due to certain ads on the
> page:
> http://www.m-w.com
> Sometimes IE suddenly navigates away from the page unexpectedly and
> jumps to the bottom right corner of the screen pointed at a different
> url with a notification popping up, as can be seen in the following
> screenshot:
> http://www.ibbu.nl/~nsprakel/drivecleaner_x.jpg
>
> So the notification from IE pops up with a msg in Dutch and the choice
> to accept or cancel installing drivecleaner,
> http://www.ibbu.nl/~nsprakel/drivecleaner_note.jpg
> as well as a small browser window in the bottom right corner pointed
> at their site.
> When I cancel or close the notification, I end up at the site visible
> in the next screenshot:
> http://www.ibbu.nl/~nsprakel/drivecleaner_url.jpg
>
> Or at a similar site, visible in this screenshot:
> http://www.ibbu.nl/~nsprakel/errorsafe.jpg
>
> So, I thought, maybe I can use the hosts file:
> C:\WINDOWS\system32\drivers\etc\hosts
>
> to redirect urls like that with the line
>
> "127.0.0.1 nl.errorsafe.com"
>
> added to that hosts text file.
>
> But it seems something recovers the original hosts file and eliminates
> the line that was added manually. Does anyone know if this is done by
> BitDefender, AVG or by the Windows XP Pro (SP2) system itself and
> whether and how I can modify these settings?
> Or perhaps a better way to get rid of this annoying behavior of
> unwanted websites that spontaneously come up when I look up words at
> www.m-w.com?
>
> Thx in advance for any feedback, Niek
>
None of the above will do that. Instead, it is the malware that is sending
you to all of those strange places.
Since it is well known what the contents of the HOSTS file must be, malware
can just download its own copy.
I would try setting the file as read only.

Jim



Similar ThreadsPosted
disappearing hosts file March 27, 2006, 10:30 am
w32.chod.d and the hosts file July 4, 2006, 9:40 am
Problema AVG e file "hosts" February 1, 2008, 5:01 am
Trend Micro & HOSTS file February 3, 2006, 4:16 pm
Virus/Trojan/Ad/Spy/Malware that modifies hosts file when any program is run? July 20, 2006, 12:40 am
Trendmicro Sysclean deleted lines from MVPS HOSTS file - false positives? December 26, 2008, 9:13 pm
AVG: HOSTS reading error. May 19, 2006, 1:07 pm
Anti Virus--Hosts Files--Internet Security September 28, 2006, 3:42 pm
RE:AVG Error Message- Reading Error c:\windows\system32\drivers\etc\hosts January 9, 2007, 5:33 pm
BitDefender June 12, 2005, 8:37 pm

The site map in XML format XML site map

Contact Us | Privacy Policy