[Reddoug]

Hi

 

 

I am trying to figure out how to understand the entires in the C:\WINDOWS\system32\drivers\etc\hosts  file. It looks to me like it will try and send anything in it to 127.0.0.1 to block it from going out to the web, is that correct?

Some of the entries from my host file

 

O1 - Hosts: 127.0.0.1    www.123topsearch.com
O1 - Hosts: 127.0.0.1    123topsearch.com
O1 - Hosts: 127.0.0.1    www.132.com
O1 - Hosts: 127.0.0.1    132.com
O1 - Hosts: 127.0.0.1    www.136136.net
O1 - Hosts: 127.0.0.1    136136.net

 

Thanks, Doug

[Advertisements]

Hi Doug. Those URL addresses are prevented from gaining access to your Computer.

[DSTM]

Hi Doug. Those URL addresses are prevented from gaining access to your Computer.

[admin]

It looks to me like it will try and send anything in it to 127.0.0.1 to block it from going out to the web, is that correct?

 

That is correct. The hosts file overrides DNS lookup of a domain name, and 127.0.0.1 is localhost, or your own system. So any attempts to access those sites are basically reflected back to your own system, Since you likely don't have a webserver setup the result is a 404, or not found error.

 

However, hosts file can be and often are used maliciously. Malware can install a webserver and redirect legitimate traffic to other sites.

[Reddoug]

Thanks for the quick replies! How do the entries get in the host file? I never edited the file.

 

Thanka, again.

[admin]

Probably malware 

 

http://www.geekstogo...cleaning-guide/

[SpywareDr]

The "hosts" file (no extension) is usually located in "c:\windows\system32\drivers\etc".

[godawgs]

Thanks for the quick replies! How do the entries get in the host file? I never edited the file.

Some anti-malware programs alter the HOSTS file. Have you ever had a program like SpyBot S&D installed? It's Immunize module will add sites to the HOSTS file.

[Reddoug]

I do have Malwarebytes, SuperAntiSpyware and SpyBot installed on the computer along with AVG Free.

 

Thanks again for the help, Doug