Well, here's a reference for how the default hosts file should look:http://support.microsoft.com/kb/972034
The hosts file may actually be there:
Start > Run > control folders
and press enter.
Under the View tab, make sure:Show hidden files, folders, and drives
is selected,Hide extensions for known file types
is cleared, andHide protected operating system files
Start menu > Run > cmd.execd %windir%\system32\drivers\etcdir
Look for "hosts" in the output.
It may be necessary to take control of the hosts file manually in order to be able to delete or edit it:
Start > Run > cmd.execd %windir%\system32\drivers\etctakeown /f %windir%\system32\drivers\etctakeown /f hostscacls %windir%\system32\drivers\etc /p administrators:fcacls hosts /p administrators:f
and at this point you should either be able to edit it back to its default values by dragging the hosts file onto an open notepad window (created with admin privileges), or:del hosts
Once it's deleted, you can try to create a new hosts file in notepad, but when you save it make sure you don't append an extension after the filename (just hosts
, not hosts.txt
You may have difficulty saving the newly created hosts file directly into the /etc folder, so instead try to save the file onto your desktop and drag the file into the /etc folder.
Be aware that it may prove exceptionally difficult to do anything to the hosts file if your system contains further infections. Your system may still be infected with residual infections if the hosts file seems invincible.
Edited by dodes, 02 November 2010 - 04:09 AM.