|
Posted by Max on July 4, 2006, 11:33 pm
If you were Registered and logged in, you could reply and use other advanced thread options
>> Roland wrote:
>>
>>> My sister had this virus and I removed it according to symantecs
>>> website and it fixed everything except the area of the browser hijack
>>> not allowing access to security related sites(i.e. symantec, mcaffee,
>>> etc.). Symantec says this was done by adding lines to the hosts file
>>> located in c:\windows\system32\drivers\etc. It also said that not all
>>> computers will have this file and of course hers doesn't. Since she
>>> doesn't have this file where did the changes occur? She has a Dell
>>> running the XP Media Center.
>> Did you make sure you have Windows set to view all files?
>>
>> The HOSTS file has no extension.
>>
>> --
>> -bts
>> -Warning: I brake for lawn deer
>
> We did that yesterday but I gave her a call back just now to make sure and
> it worked. She checked the wrong box yesterday. Two additional files did
> show up in the folder that I do not think should be there.
>
> "1hosts" and "hosts.msn"
>
> It is safe to delete these two files isn't it? I know the the virus came
> from msn messenger.
>
> Thanks for the help.
>
Yes it is safe to delete them.
The hosts file should look like this:
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
and is found here:
C:\WINNT\system32\drivers\etc\hosts
there is another one here:
C:\WINNT\system32\drivers\etc\lmhosts.sam
Spybot Search and Destroy has a hosts file locking feature that works
well,I have a link to it on my pages(see below)
--
Playing Nice on Usenet:
http://oakroadsystems.com/genl/unice.htm#xpost
My Pages:
Virus Removal Instructions
http://home.neo.rr.com/manna4u/
Keeping Windows Clean
http://home.neo.rr.com/manna4u/keepingclean.html
Windows Help and Tools
http://home.neo.rr.com/manna4u/tools.html
Change nomail.afraid.org to gmail.com to reply.
| 
XML site map