Re: help! Internet Explorer ignoring my HOSTS file

From: kellygreer1 (kellygreer1_at_yahoo.com)
Date: 07/26/05 

Date: 26 Jul 2005 10:46:25 -0700

Well the HostsMan program seemed to do something on the install that I
thought fixed it.

But now after doing Windows XP SP2 and the latest updates its gone back
to ignoring my HOSTS file. The registry key looks ok. I'll have to
rewrite it and see if that helps...... it's weird though. If it was
the reg key wouldn't all programs be affected? Not just IE? Ping and
Firefox still using the HOSTS file. Weird.

How does an individual program decide to ignore the HOSTS file?

When I do solve this I will post back to the group the best way to
protect yourself from this. Not sure if I will find the fix before
Spybot or Lavasoft discover this malware.

Does anyone know of a free proxy server I could run locally(?), then I
could tell IE to use the proxy and through the proxy block
www.winfixer.com, abetterinternet.com, vx2.com, etc...?

Thanks,
Kelly

David H. Lipman wrote:
> From: "kellygreer1" <kellygreer1@yahoo.com>
>
> | Hi groups!
> |
> | Anyone seen this before I got hit with some pretty nasty Spyware. Ran
> | Spybot S&D, Lavasoft Ad-aware, Hijack This, and the Microsoft
> | AntiSpyware Beta. Then as I continued to try to clean things up I
> | noticed Internet Explorer was ignoring my HOSTS file. I have lost the
> | ability to keep Internet Explorer from getting to certain sites by
> | using the HOSTS file. For example I noticed www.winfixer.com and
> | www.abetterinternet.com, I tried to redirect those to 127.0.0.1 and the
> | popups were still able to get to those sites. Ping from the command
> | line and Mozilla Firefox seem to be using my HOSTS file. Weird.
> |
> | So I guess my question is.....
> | Is this some horrible form of "protection" from one of the Spyware /
> | Adware products..... OR is this Adware/Spyware/Virus program itself
> | making Internet Explorer ignore my HOSTS file.
> |
> | Thanks,
> | Kelly Greer
> | kellygreer1@nospam.com
> | change nospam to yahoo
>
> Kelly:
>
> Some malware will redirect the location of the TCP/IP statics tables.
>
> The following is the Registry key and proper setting.
>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
> DataBasePath=%SystemRoot%\System32\drivers\etc
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm

Relevant Pages

  • Question4 Sponge,et.al-Hosts File;Proxies
    ... I ran across this old answer from Sponge concerning the use of Hosts File with ... external proxy list. ... Instead it passes all DNS lookups to the ... this feature of the Hosts file WITH Proxomitron and WITH using the external ...
    (comp.security.firewalls)
  • Re: Error on Page & Login Issues, also MS Money 2004 problem
    ... If you use a HOSTS file, ... > I am unable to login to websites ... > Internet Explorer which will state "Done, ... > I also have a problem logging in with Microsoft Money ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: page not found errors all over webpage
    ... > graphics, different sections of the page, and many links on the page ... 283807 - Pictures Are Not Displayed on Web Sites in Internet Explorer ... HOSTS file that contains entries that are blocking access to the desired ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Cant open Internet Explorer
    ... 'Microsoft Internet Explorer has encountered a problem' etc; ... I have tried to re-install from the Windows Update Files folder ... > attributes and renames the HOSTS file incorrectly to hosts. ... then copy/paste your HijackThis .log file in your message. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Internet Explorer cannot display the webpage
    ... I'm new to Vista. ... and have tried disabling ADD ONs in IE. ... Make sure that these sites aren't in the HOSTS file. ... 'How to optimize Internet Explorer' ...
    (microsoft.public.windows.vista.general)