Spyware question!

I have a problem...

User avatar
matt1314
MM2X VIP Member
MM2X VIP Member
Posts: 4946
Registered for: 16 years 8 months
Location: Berlin, Germany

Spyware question!

Postby matt1314 » Mon Apr 14, 2008 7:16 pm

Hello, guys.

I have a question: Does anyone know, is it spyware or not:
My Outpost Firewall Pro has detected this file: Windows-Hosts-File

(For german users it's really name is: Windows-Hosts-Datei) :cry:

Is it really spyware or not?
If yes, what should I do?
I have browsed through the web, but couldn't find a good answer.

Thanks.
:cry:

User avatar
Franch88
MM2X Admin
MM2X Admin
Posts: 15758
Registered for: 16 years 10 months
Location: Italy
Been thanked: 1 time
Contact:
Italy

Postby Franch88 » Mon Apr 14, 2008 9:02 pm

I don't know if you've looked here, but this seems to be a Windows file that controls teh Internet browsing. I believe that it isn't a spyware (is hasn't a spyware name). :wink:
Fiat 500 = Italian motorization. Franch88, MM2 eXtreme forum and website Administrator.
|Franch88's MM2 Releases|

User avatar
matt1314
MM2X VIP Member
MM2X VIP Member
Posts: 4946
Registered for: 16 years 8 months
Location: Berlin, Germany

Postby matt1314 » Tue Apr 15, 2008 4:52 pm

Yes, I know that it hasn't a spyware name.
But I have found the problem! :D :D

In this path of the file: 'D:/Program Files ("Programme" in german)/WINDOWS/system32/drivers/etc/hosts' I've found the problem. There were 8O THOUSANDS 8O of other IP addresses and adult sites added by this virus or some malware.

I have removed them and they're not coming again. :)
I'm very happy and excited!

Only one entry has to be there and that's: "127.0.0.1 localhost" and nothing more!

However thanks for your help. :D

P.S.: Check your hosts file in my upper path of your hard drive to get sure, that your file is OK.

User avatar
Franch88
MM2X Admin
MM2X Admin
Posts: 15758
Registered for: 16 years 10 months
Location: Italy
Been thanked: 1 time
Contact:
Italy

Postby Franch88 » Tue Apr 15, 2008 8:54 pm

I've only two addresses and the example part. However, that file is used to control the websites addresses, but I have no idea of how it works.
If a virus had added other IP addresses, maybe you've done the best thing deleting it.

This is what there's:

127.0.0.1 localhost
::1 localhost
Fiat 500 = Italian motorization. Franch88, MM2 eXtreme forum and website Administrator.
|Franch88's MM2 Releases|

User avatar
awalwang
MM2X VIP Member
MM2X VIP Member
Posts: 1211
Registered for: 16 years 11 months
Location: Illinois, United States
Contact:

Postby awalwang » Wed Apr 16, 2008 3:12 am

Good. Glad to hear it's taken care of. :)
Image