help! Internet Explorer ignoring my HOSTS file

help! Internet Explorer ignoring my HOSTS file

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
help! Internet Explorer ignoring my HOSTS file kellygreer1 07-25-2005
Posted by kellygreer1 on July 25, 2005, 2:26 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi groups!

Anyone seen this before I got hit with some pretty nasty Spyware. Ran
Spybot S&D, Lavasoft Ad-aware, Hijack This, and the Microsoft
AntiSpyware Beta. Then as I continued to try to clean things up I
noticed Internet Explorer was ignoring my HOSTS file. I have lost the
ability to keep Internet Explorer from getting to certain sites by
using the HOSTS file. For example I noticed www.winfixer.com and
www.abetterinternet.com, I tried to redirect those to 127.0.0.1 and the
popups were still able to get to those sites. Ping from the command
line and Mozilla Firefox seem to be using my HOSTS file. Weird.

So I guess my question is.....
Is this some horrible form of "protection" from one of the Spyware /
Adware products..... OR is this Adware/Spyware/Virus program itself
making Internet Explorer ignore my HOSTS file.

Thanks,
Kelly Greer
kellygreer1@nospam.com
change nospam to yahoo


Posted by AvianFlux on July 25, 2005, 3:08 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Did you check the integrity of your HOSTS file?

Reload the HOSTS file and lock it with HostsMan or some other manager
program.


Posted by Col.Steve Austin Ret. on July 26, 2005, 4:06 am
If you were  Registered and logged in, you could reply and use other advanced thread options
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>
> Did you check the integrity of your HOSTS file?
>
> Reload the HOSTS file and lock it with HostsMan or some other manager
> program.


Personally, I prefer to do it the old fashioned way..

open does box

cd \windows (if not already in that dir, usually you will start
there)
command\attrib +r +s +h HOSTS

that locks the file by making it hidden, system, read-only. all
those doodads just have flashy ways to do that simple command

to unlock the file for editing simply reverse the command

attrib -r -s -h HOSTS


I made a simple batch file for editing the hosts file..

attrib -r -s -h HOSTS
edit HOSTS
attrib +r +s +h HOSTS
exit


- --
My email is bogus, don't bother using it.

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQEVAwUBQuXTOc/fycBOJ+clAQKjwQgAxmbeO4K9XrudmgUXJ3FVkMlVWnZWHvKG
jNyAd1rECDf6CTcLmSAYTMIr8UZ8wQUmtynkM+1DRXwzKOO80N+dB5148DnIq+ZJ
3eMAg5iBj4CECOODeApq7qdmoubfB1HrkXQbwvi/7QxI37dzxgqjk1FCw7DlmnTB
H8yFQb0TXS+FpG7l9zZp/C/j3IwrFLSVXe1PDAH10n8qQdAxcxMrX358op2exJd1
9lXXaiC9j3d+Dy1Y5a/6Hl3GTSfZ2nx8Q9TQQGNuEcOunqB8QcHRy38Pgl3KRltD
+zXJMSgHjOA0TT9Sa3KtdXVC8c0naHsXdi5GUS8eYU0qXU7a2SjhtQ==
=/FzY
-----END PGP SIGNATURE-----

~~~~~~~~~~~~~~~~~~~~~
This message was posted via one or more anonymous remailing services.
The original sender is unknown. Any address shown in the From header
is unverified. You need a valid hashcash token to post to groups other
than alt.test and alt.anonymous.messages. Visit www.panta-rhei.dyndns.org
for abuse and hashcash info.





Posted by Steve Winograd [MVP] on July 26, 2005, 4:26 am
If you were  Registered and logged in, you could reply and use other advanced thread options
>> Did you check the integrity of your HOSTS file?
>>
>> Reload the HOSTS file and lock it with HostsMan or some other manager
>> program.
>
>Personally, I prefer to do it the old fashioned way..
>
>open does box
>
>cd \windows (if not already in that dir, usually you will start
>there)
>command\attrib +r +s +h HOSTS
>
>that locks the file by making it hidden, system, read-only. all
>those doodads just have flashy ways to do that simple command
>
>to unlock the file for editing simply reverse the command
>
>attrib -r -s -h HOSTS
>
>I made a simple batch file for editing the hosts file..
>
>attrib -r -s -h HOSTS
>edit HOSTS
>attrib +r +s +h HOSTS
>exit

That looks like a good way to protect the Hosts file for people who
are comfortable with DOS commands.

Kelly's original question said that he/she has installed Microsoft
AntiSpyware Beta, which only runs on Windows 2000 and XP. In 2000 and
XP, the Hosts file is in %windir%\system32\drivers\etc, where %windir%
is usually "C:\WinNT" or "C:\Windows".
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

Posted by Far Canal on July 26, 2005, 6:04 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Col.Steve Austin Ret. wrote

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> >
> > Did you check the integrity of your HOSTS file?
> >
> > Reload the HOSTS file and lock it with HostsMan or some other manager
> > program.
>
>
> Personally, I prefer to do it the old fashioned way..
>


You're missing the point. Hostsman is 'using' the Hosts file all the
time it's running - therefore no other program can alter/edit the Hosts
file. Many spyware/trojans are able change the attributes of the hosts
file to gain access. What you're doing is pointless.







Similar ThreadsPosted
HOSTS File FAQ - Testing the HOSTS File November 4, 2005, 11:21 pm
hosts file "missing" February 21, 2006, 3:48 pm
Possible Hosts File Hijack June 2, 2006, 8:37 pm
Hosts file gets deleted automatically. July 16, 2007, 4:59 am
help cant run internet explorer... October 21, 2006, 7:24 am
Spyware in Internet Explorer 6 November 16, 2005, 3:51 pm
Re: Internet Explorer 7 Released December 19, 2006, 5:56 pm
RE: Internet Explorer 7 Released December 19, 2006, 11:29 pm
Internet Explorer Hijack September 20, 2007, 9:19 am
Internet Explorer Vulnerability Problematic September 21, 2006, 5:24 am

The site map in XML format XML site map

Contact Us | Privacy Policy