Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Custom HOSTS file to prevent sites from tracking data


  • Please log in to reply
3 replies to this topic

#1 drwmbt

drwmbt

  • Members
  • 98 posts
  • OFFLINE
  •  
  • Local time:06:34 AM

Posted 11 October 2012 - 01:57 PM

*** Mod Edit: Moved topic from Windows 7 to a more appropriate forum. bloopie ***

Hey guys two quick questions, I was running some anti-malware software on one system and started with Rkill and it apparently reset the HOSTS file. I looked more into this, and the entries there (that didnt look normal as I saw the default file only lists the 127.0.0.1 address and nothing else) well, first of all, did rkill reset it to default? because when I checked it it was defaulted, but Rkill showed some entries from suspicious addresses like google-analytics.com and ad.ea-manager.com or some crap etc.

And when I went to the microsoft article to look into resetting it myself, it asked me to copy their version, which said to create the file named HOSTS without an extension however my windows 7 machine's HOSTS file ends with .TXT (and also the 127.0.0.1 address was commented out with a # unlike my [rkill defaulted?] Hosts file...? For refrence here is the MS link, click "Fix it myself and scroll down to windows 7 to see what im talking about, they commented out the HOSTS part which is not commented out in my hosts file is this a mistake? http://support.microsoft.com/kb/972034

Also, I found this custom file on the net that says it blocks many common spyware,malware,tracking websites, and banner ads from running on your machine, is this of any real use? http://someonewhocares.org/hosts/

Just trying to make some sense of all this as I can understand that the microsoft website being wrong because of a slight editing mistake, but just mainly curious

-drwmbt

Edited by bloopie, 11 October 2012 - 05:10 PM.
Moved to AII from Windows 7


BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:34 AM

Posted 11 October 2012 - 04:55 PM

You're infected.Lets fix hosts file after checking for infections

Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results

Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here.If you get crashes in normal mode,run it in safemode with networking

Download

ESET online scanner

Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply

#3 drwmbt

drwmbt
  • Topic Starter

  • Members
  • 98 posts
  • OFFLINE
  •  
  • Local time:06:34 AM

Posted 11 October 2012 - 05:13 PM

Well I followed another users post on the type of issue i was dealing with (and your subsequent course of action) and cleared up the infection on the computer. Just wondering if replacing the hosts file would be beneficial to block or filter crap websites from being accessed in my browser.

#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:34 AM

Posted 11 October 2012 - 05:17 PM

Well I followed another users post on the type of issue i was dealing with (and your subsequent course of action) and cleared up the infection on the computer.


Your hosts file is still hijacked

Just wondering if replacing the hosts file would be beneficial to block or filter crap websites from being accessed in my browser.


I'm not sure what you mean by this.Your hosts file is hijacked and you need to replace it with a clean one to stop redirects.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users