PDA

View Full Version : ME AGAIN


jabbathehutt
14 Nov 2007, 12:35am
hello i'm still haveing problems with my hosts file AVG scans memory prograns regually and it now declares the file to be in error and as such has but it in a virus report weather this is caution or not i have no idea can i safely remove the hosts file or get another one w/o needing to refromat reinstall windowes any help would be thanked

thanks jabbathehutt

peku006
15 Nov 2007, 11:00am
Hi jabbathehutt....again :wink:

Hosts File Corrupted

Download HostsXpert v4.1 (http://www.funkytoad.com/download/HostsXpert.zip) and unzip it to your computer, somewhere where you can find it.
Double click on HostsXpert.exe to launch the program.
Click on Restore MS Hosts File to restore your Hosts file to its default condition.
Click on Make ReadOnly to secure it against further infection.
Exit the program.Visit the Website (http://www.funkytoad.com/content/view/13/31/) for more information.
-----------------------------------------------------------------------------------------------------------------------------
MVPS Hosts file (http://mvps.org/winhelp2002/hosts.htm)<= The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your coputer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer

After you have completed the above, please provide:
new HijackThis log
description of any problems you are having with your PC

jabbathehutt
16 Nov 2007, 02:53am
ok i'm haveing an issue whe useing this link i get a message saying that my security setting will not allow you to download this file even after i shut down all my AV programs maybe i should reformat?

also a recient AVG sacn reveilde a change in file size of the shell32.dll file in windows32 subfoulder should this be of concern?

peku006
16 Nov 2007, 09:05am
Hi jabbathehutt

ok i'm haveing an issue whe useing this link i get a message saying that my security setting will not allow you to download this file even after i shut down all my AV programswhich link ?

maybe i should reformat?WHY ?

also a recient AVG sacn reveilde a change in file size of the shell32.dll file in windows32 subfoulder should this be of concern?It is normal that AVG shows that files, the MBR or Boot record to have changed. These are done during normal maintainance, when you or windows updates files or have had to correct errors on the drive. The only time that you should worry is if they also show as infected.

jabbathehutt
16 Nov 2007, 09:21pm
i can't download the file from HostsXpert v4.1 (http://www.funkytoad.com/download/HostsXpert.zip) which you told me too

kryyst
16 Nov 2007, 09:27pm
You could try manually fixing your hosts file

go to c:\windows\system32\drivers\etc

edit hosts (notice no extension)

a normal hosts file will have a text blurb at the top and then 1 hosts entry
127.0.0.1 localhosts

if anything else is there delete it.

jabbathehutt
16 Nov 2007, 09:32pm
OK now i'm worried the whole folder ect IS MISSING i even tried looking through the dossshell

kryyst
17 Nov 2007, 01:46am
are you sure your looking in the right spot?

do a search for hosts and see where it's located.

jabbathehutt
17 Nov 2007, 01:56am
hosts file was not found i mean there were similar files assosiated with other programs but none for the OS

peku006
17 Nov 2007, 10:21am
Hi jabbathehutt
Please download Hosts file

MVPS Hosts file (http://mvps.org/winhelp2002/hosts.htm)<= The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your coputer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer

jabbathehutt
17 Nov 2007, 10:49am
thanks Peku006 that helps everything seems to be fine now thanks again

peku006
17 Nov 2007, 11:47am
Glad I could be of assistance! The help you received here was free. Please read through some of these Prevention Tips (http://icrontic.com/forum/showthread.php?t=39435) that Short-Media offers.

This topic is now closed. If you wish it reopened, please send a Private Message (PM) to one of the Spyware Mods with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required.

If you are not the user who started this thread, you must start a new Thread (http://icrontic.com/forum/newthread.php?do=newthread&f=57) instead :)

Would you also be interested to join Short-Media (Team #93) with the Folding@Home Project? More information available here (http://icrontic.com/forum/showthread.php?t=29803)