BleepingComputer.com: Should I Bother with SpywareBlaster

Jump to content

  • 3 Pages +
  • 1
  • 2
  • 3
  • You cannot start a new topic
  • You cannot reply to this topic

Should I Bother with SpywareBlaster Install or don't Install?

#31 User is offline   JJ2K 

  • Forum Regular
  • PipPipPip
  • Find Topics
  • Group: Members
  • Posts: 162
  • Joined: 23-January 09

Posted 10 March 2009 - 01:10 PM

Hi extremeboy.


View Postextremeboy, on Mar 9 2009, 07:18 PM, said:

For example: Me, I don't bother disabling it because my hosts file is only 1 KB. However, even if you disable it, there's nothing 'bad' is going to happen.



So I assume you wrote your own hosts file, what does it contain?

I'm tyring to use all the arguments put forward by different people to make a logical decision on this.

The reason that it may block good sites, or bad sites which are now good sites does not bother me.

I still need to read up on the DNS via your helpful links, but it bothers me when I read:

"Note The overall performance of the client computer decreases and the network traffic for DNS queries increases if the DNS resolver cache is deactivated. "

and that it may put unnessecary load on my ISP!

Please if you are reading this thread leave your opinion on your use of the hosts file.

Bluesjunior: I've pretty much got the same setup as you now, will look forward when Comodo implements BOClean into it's security suite.

#32 User is offline   extremeboy 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 12,974
  • Joined: 21-March 08
  • Gender:Male

Posted 10 March 2009 - 03:17 PM

Hello.

Quote

So I assume you wrote your own hosts file, what does it contain?

No. Sorry for the confusion, should of been a bit more formal on what I was trying to say. I meant that my hosts has nothing added, meaning it's the default with no hosts.

The normal HOSTS file usually looks like this:

Quote

# Copyright © 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a "#" symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
#
127.0.0.1 localhost


My Hosts file:

Quote

127.0.0.1 localhost
I just simply took out those other "extra information" with the #.

Quote

Please if you are reading this thread leave your opinion on your use of the hosts file.

This is another question that can be debated and there isn't necessarily a "wrong" or "right" answer. I used to have Spybot installed (several months ago). When I allowed it to compile all the list of bad sites to block into my hosts file, it slowed down my browser speed. However, then if you read what FiOS Dan mentioned, it didn't slow his browsing speed at all. That may just be something related to the computer or he might have the DNS Service disabled..

For me, I don't use any hosts file. I have to say my reasons are similar to what Papakid has mentioned but I also have another reason as well. Take a look here for a long list of hosts file. Some of those sites are indeed not bad, but probably most are. Hosts file in a way is like an Anti-Malware program in general. It's "definition" of "bad" (adware, spyware, virus etc...) are usually different from another companies product. In the same way, hosts file have their definition of "bad", however hosts file have a greater similarity than anti-malware products/softwares. Some of those sites blocked may just be blocked because it has ads or it can track what your doing, also known as "tracking-cookies" sometimes.

I don't find hosts file that too useful sometimes. If a site was indeed very malicious and can cause sever damage to your computer, your anti-virus program or any other real-time protection should be able to detect that out. They will warn you before you can even view the contents of that page. I know Avira and AVG does that. Some rogue programs such as the most common ones: "Anti-virus 2009", "spywareprotect 2009", "AntiSpyware 3000" etc... cannot merely infect you just by visiting that web page, as long as you don't download the file it's fine in most cases.

I actually agree on this part with the link Papakid provided:

Quote

Any Malware/Spy ware can easily modify the Hosts File at will, even if it is set to Read-only. It is impossible to "lock-down" a Hosts File. Considering how easily a Hosts File can be exploited, redirected and potentially block good sites, it is strongly recommended NOT to waste time using Special Hosts Files."

I don't agree with everything on that page but that is something I do agree on in a way.

Hosts file helps you block certain sites, good or bad. There are many malware out there, that can do many nasty things. For example, there's this rootkit that kills your Anti-virus program and prevents you from updating it (hosts file is fine however). Does this mean you should NOT have an anti-virus program? Or, there are many infections that exploit Java so it is important you update it. Even updating it sometimes won't prevent it. Does this mean you should not use Java at all ?This example may not be as great but that is my main point here regarding the hosts and what that guy said in that link.

Bottom line. Hosts files are helpful increase some security but IMO, I don't consider it a MAJOR part of my security. For my security this is what I have to say (ranked from MOST IMPORTANT to LEAST, IMO)

1) Good Surfing Habits
2) Your own Knowledge.
3) Real-time protection AV program activated
4) A Firewall
5) 1-2 Anti-spyware program (real-time or on-demand)

I don't find security VERY important but what I do find important is what I do on the computer. I haven't got infected for a while and I don't scan with my AV or AS for an extended period of time either. This does NOT mean to not let you scan with your security programs, but all I'm trying to say is that having security softwares isn't the only thing you need.

This is just my opinion.

With Regards,
Extremeboy
Note: Please do not PM me asking for help, instead please post it in the correct forum requesting for help. Help requests via the PM system will be ignored.

If I'm helping you and I don't reply within 48 hours please feel free to send me a PM.

The help you receive here is always free but if you wish to show your appreciation, you may wish to Posted Image.

#33 User is offline   FiOS Dan 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 80
  • Joined: 22-February 09
  • Location:Redondo Beach, CA

Posted 10 March 2009 - 04:13 PM

A reminder that Hosts is nothing more than a big text file and, as such, it is easy to add/delete entries. So if the user finds a site blocked that he or she would like to visit, just open the file and remove the entry. In all of my years running a Hosts file I have only had to do this once.
Courage is being scared to death but saddling up anyway.

Share this topic:


  • 3 Pages +
  • 1
  • 2
  • 3
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users