Jump to content


Photo

Something is modifying hosts file

hosts

  • Please log in to reply
1 reply to this topic

#1 baga

baga

    New Member

  • Members
  • Pip
  • 1 posts

Posted 11 June 2012 - 04:28 AM

In order to prevent ads from stealing my bandwidth i am adding to my hosts file lines like
127.0.0.1 ads.pile-of-crap.com
i copied file to other machines, and once noticed that file changed. i started making local copies and found out that two lines (out of about 100) constantly disappear from the file:

127.0.0.1 ad.doubleclick.net
127.0.0.1 www.google-analytics.com

clearly this is an action of some malicious entity. Unfortunately both NOD32 which i have constantly running, and manual scan by my favorite Malwarebytes, don't show anything wrong with my system.

Any ideas?

#2 fivealive

fivealive

    Elite Member

  • Honorary Members
  • PipPipPipPipPip
  • 960 posts
  • Gender:Male
  • Location:canada

Posted 11 June 2012 - 01:54 PM

no idea if its an actual infection or not but if it is follow steps below
-----------------------------------------------------------------

Sorry to hear you might be infected.
We cannot work on malware removal in this sub-section of the forum, so please read below for assistance with cleaning your system.

IMPORTANT: Please do NOT use any temporary file cleaners unless instructed to do so - they can cause data loss, making it hard to recover your system.

There are some excellent, self-help tutorials on getting MBAM to run on an infected system in the FAQ: HERE.

IF YOU PREFER EXPERT ASSISTANCE WITH MALWARE REMOVAL, PLEASE CHOOSE ONE OF THE FOLLOWING 3 OPTIONS:
OPTION 1: Free, one-on-one, expert assistance in the Malware Removal Forum.
OPTION 2: For paid users of MBAM PRO, free, one-on-one, expert assistance from MBAM support.
OPTION 3: Fee-based, one-on-one, expert assistance from Premium Support.

OPTION 1:
  • Please print out, read and carefully follow the instructions in the "I'm Infected - What Do I Do Now?" article.
  • If the infection has so crippled the computer that you cannot complete some or all of the steps, then just do the best you can and start a new topic as described below.
  • Then please start a new post in the Malware Removal Forum.
  • When starting your new post, please note the following:
  • Please do NOT post in a topic started by someone else, even if their problem sounds similar.
  • Please COPY/PASTE the requested logs into your post, rather than attaching them.
  • Under options, please be sure to select "track this topic" and "immediate email notification", so you'll know when a helper responds.
  • Please be patient - it may be 48 hours or more before a helper can assist you, especially when the forum is very busy.
  • Please do NOT "bump" your topic or reply back to it for at least 48 hours.
  • Doing so may cause your topic to be overlooked, as it will appear that you are already being helped.
OPTION 2:
If you are a paid user of MBAM PRO and would like support via the helpdesk, please contact them here.

OPTION 3:
If you prefer the Malwarebytes Premium Services (comprehensive solutions to all your computer support needs – from installation and set-up to troubleshooting and tune-ups), please go to the Premium Support site here.

Please be patient – someone will assist you as soon as possible.

Thank you very much,

fivealive





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users