Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Rkill brought up host entries


  • Please log in to reply
11 replies to this topic

#1 Thormage

Thormage

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:58 AM

Posted 24 September 2015 - 07:38 AM

How do i get rid of them?

Thomas


Edited by hamluis, 24 September 2015 - 09:20 AM.
Moved from Win 7 to AV/AM Software - Hamluis.


BC AdBot (Login to Remove)

 


#2 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:11:58 PM

Posted 24 September 2015 - 07:43 AM

Hi there,

The HOSTS entries can be good or bad depending on what they are used for.

Can you copy and paste the list of entries that Rkill detected here?

#3 Thormage

Thormage
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:58 AM

Posted 24 September 2015 - 07:47 AM

  127.0.0.1    www.007guard.com
  127.0.0.1    007guard.com
  127.0.0.1    008i.com
  127.0.0.1    www.008k.com
  127.0.0.1    008k.com
  127.0.0.1    www.00hq.com
  127.0.0.1    00hq.com
  127.0.0.1    010402.com
  127.0.0.1    www.032439.com
  127.0.0.1    032439.com
  127.0.0.1    www.0scan.com
  127.0.0.1    0scan.com
  127.0.0.1    1000gratisproben.com
  127.0.0.1    www.1000gratisproben.com
  127.0.0.1    1001namen.com
  127.0.0.1    www.1001namen.com
  127.0.0.1    100888290cs.com
  127.0.0.1    www.100888290cs.com
  127.0.0.1    www.100sexlinks.com
  127.0.0.1    100sexlinks.com

 

Adresses i newer used, and i truly dont want them...
 



#4 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:11:58 PM

Posted 24 September 2015 - 08:00 AM

Hi there,

Do you have Spybot Search & Destroy or SpywareBlaster installed?

These entries are designed to redirect access attempts to malicious links back to your own computer so you can't access them - which is actually beneficial. I wouldn't bother removing them since they don't do any harm.

Edited by Alexstrasza, 24 September 2015 - 08:00 AM.


#5 Thormage

Thormage
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:58 AM

Posted 24 September 2015 - 08:07 AM

Spyboot, did report them, but didnt remowe them.

Thanks for advice.

Thomas



#6 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:11:58 PM

Posted 24 September 2015 - 08:10 AM

AFAIK those entries are set by Spybot's Immunize function, so you can remove them by undo the Immunization.

I wouldn't use Spybot though, its performance is very poor and there are better alternatives out there.

#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,771 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:58 PM

Posted 24 September 2015 - 02:48 PM

Rkill will display the first 20 valid entries in the HOSTS file which sometimes is altered (modified) by malware infection. Modification of this file does not necessarily mean your system is infected since some legitimate security programs and custom HOSTS files can also add numerous entries. Rkill will also check the permissions on the HOSTS file and reset them if the administrator does not have proper permissions.

If you open the Hosts file, the note at the top and bottom will confirm the entries were inserted by Spybot:
# Start of entries inserted by Spybot - Search & Destroy
# This list is Copyright 2000-2008 Safer Networking Limited
127.0.0.1	007guard.com
127.0.0.1	www.007guard.com
127.0.0.1	008i.com
127.0.0.1	008k.com
127.0.0.1	www.008k.com
127.0.0.1	00hq.com
127.0.0.1	www.00hq.com
127.0.0.1 	legal-at-spybot.info
127.0.0.1 	www.legal-at-spybot.info
127.0.0.1...
# This list is Copyright 2000-2007 Safer Networking Limited
# End of entries inserted by Spybot - Search & Destroy
More example entries shown here.

If you perform an "Undo" via the Immunize button on the Spybot main screen, the entries Spybot added should be removed. From the Immunize panel, deselect the Hosts file protection as follows:
  • Click the Undo option at top of screen to remove all immunizations.
  • Uncheck Global Hosts...the last item in the list.
  • Click Immunize option at top of screen to re-apply immunization without the Hosts entries.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#8 Thormage

Thormage
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:58 AM

Posted 03 October 2015 - 03:24 PM

Ok, sorry, I have been away, what do you rekommend instead of Spyboot then?

Thanks for helping adwise!



#9 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:11:58 PM

Posted 03 October 2015 - 03:28 PM

I would use Emsisoft Anti-Malware or Malwarebytes Anti-Malware :)

#10 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,771 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:58 PM

Posted 03 October 2015 - 03:28 PM

See my comments in Supplementing your Anti-Virus Program with Anti-Malware Tools as to why I recommend Malwarebytes Anti-Malware Premium and Emsisoft Anti-Malware.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#11 Thormage

Thormage
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:58 AM

Posted 03 October 2015 - 03:33 PM

Thanks for Adwise, happy kid now... :bananas:



#12 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,771 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:58 PM

Posted 03 October 2015 - 03:35 PM

You're welcome on behalf of the Bleeping Computer community.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




2 user(s) are reading this topic

1 members, 1 guests, 0 anonymous users


    Curson