Re: Hosts File vanished again !
- From: "RJK" <nosuch@xxxxxxxxxxx>
- Date: Sat, 2 May 2009 13:37:58 +0100
Hi, many thanks for your response, ...sorry for delay - am sometimes unable
to post several days due to work pattern and an ISP with NNTP that only
works now and again.
....my ISP is Tiscali
....router is Linksys WAG354G with NAT always switched on :-)
AVG internet security suite has a firewall :-) ...Windows f'wall of course
switched off :-)
.... Malwarebytes sweep found nothing other than 3 XP keys to do with
security notification (f'wall/ a/v updates), ...I prefer to keep them
switched off and do it myself !
....anyhooo, to cut a long story short, ...after av-cls sweeps in Safe and
Normal mode, and AVG 8.5 a/v / malware sweeps in Safe then Normal mode,
Malwarebytes etc.
....nothing found, ...and a few other sweeps !
....I've installed Spybot S&D ...yet again, ...dunno why I keep taking it out
! ...now I have placed a small Windows Explorer pane on the desktop
displaying the contents of etc ...so that I can, hopefully, spot, the next
time, when hosts disappears !!!
....interestingly, after S&D "Immunize" the hosts file size jumps from
around 550k to 880k !!!!!!
....I wonder what all that is about !!!
regards, Richard
"1PW" <barcrnahgjuvfgyr@xxxxxxx> wrote in message
news:gtdh4d$g8d$1@xxxxxxxxxxxxxxxxxxxxxx
On 04/30/2009 04:22 PM, 1PW sent:
On 04/30/2009 05:42 AM, RJK sent:
...and a little earlier on, I added *.888.com to IE7's Restricted Sites
Zone, and just did a "Find" in the registry and it had vanished !!
...just added it in again !!!
I'm starting to think that this is all to do with my not knowing how AVG
and
S&D are interacting with my XP registry !!!!
regards, Richard
Hello Richard:
1) Did you ever run MBAM & SAS? To those, I'd add GMER.
2) Until the mystery is solved, a batch file could be written and run
every few hours that tests for the presence of the HOSTS file, and if
present, end. However, if absent, the batch file would unzip the latest
zipped version from <http://www.mvps.org/winhelp2002/hosts.htm> and
place it correctly. This isn't a fix. This is a bandaid till you know
more.
Some interesting third party software might be adaptable for this.
IMHO you are still infected by a yet to be identified malware. When &
if it's located, please take great care to isolate it for later
identification as it's obviously getting passed your antimalware efforts.
Does your computer live behind a good NAT router?
Who is your ISP?
Do your AVG settings turn off the Windows Home SP3 Firewall?
Are your running another Personal Firewall application?
Do you have any other nearby computers & if so, are they experiencing
troubles?
HTH
Pete
BTW The next step, if all the above is negative, is to get Trend Micro's
HijackThis v 2.0.2 from TrendSecure but you aren't quite there yet and
we request you don't post it here, but submit to one of many sites that
specialize in its interpretation. Let's see how the above goes first.
Pete
--
1PW @?6A62?FEH9:DE=6o2@=]4@> [r4o7t]
.
- Follow-Ups:
- Re: Hosts File vanished again !
- From: Geoff
- Re: Hosts File vanished again !
- From: Mees de Roo
- Re: Hosts File vanished again !
- References:
- Re: Hosts File vanished again !
- From: 1PW
- Re: Hosts File vanished again !
- From: 1PW
- Re: Hosts File vanished again !
- Prev by Date: Re: Hosts File vanished again !
- Next by Date: Re: Hosts File vanished again !
- Previous by thread: Re: Hosts File vanished again !
- Next by thread: Re: Hosts File vanished again !
- Index(es):
Relevant Pages
|
