Ask Experts Questions for FREE Help !
Ask

Virus in Hosts File inside Windows System32 folder

Asked Jun 6, 2007, 08:23 PM — 25 Answers
I have a virus in C:\\WINDOWS\system32\drivers\etc\hosts I'm using AVG free edition. I've put the file in the virus vault, it says it's possible to heal the file except that there isn't enough info to do so. Any ideas of what I should do?

25 Answers
invisibleman_productions's Avatar
invisibleman_productions Posts: 207, Reputation: 55
Full Member
 
#2

Jun 7, 2007, 06:30 AM
You will need to reset your host file to the default Microsoft configuration,. To do that

Please download HostsXpert.zip


1. Unzip HostsXpert.zip
2. Double click on HostsXpert.exe
3. Then click on "Restore Original Hosts" to restore your Hosts file to its default condition..
4. Click on Make Hosts Read Only to secure it against further infection.
5. Close program when complete.

To be sure you computer is spyware free you need to run all the security essential programs.
Helpful
5hano19's Avatar
5hano19 Posts: 3, Reputation: 1
New Member
 
#3

Mar 1, 2008, 05:17 AM
I can't Answer That Question I tried hostxpert but it keeps saying - can't Create File C:\\WINDOWS\system32\drivers\etc\hosts
I Need Help Can Any Body Help?
Helpful
invisibleman_productions's Avatar
invisibleman_productions Posts: 207, Reputation: 55
Full Member
 
#4

Mar 1, 2008, 06:29 AM
What is the name of the file? If it is in the virus vault then it has been quarantined. And it is not in the hosts file. The hosts files is a text file.

Let the experts take a look at what's happening on your computer.Visit the HijackThis Logs and Analysis forum. HijackThis Logs and Malware Removal forum or SWI Forums or
Or Alliance of Security Analysis Professionals™
Helpful
5hano19's Avatar
5hano19 Posts: 3, Reputation: 1
New Member
 
#5

Mar 1, 2008, 07:03 AM
Its a host file I keep getting it come up with AVG and it says it has been changed what can I do?
Helpful
5hano19's Avatar
5hano19 Posts: 3, Reputation: 1
New Member
 
#6

Mar 1, 2008, 09:23 AM
I found out its a desktop hijacker.spysheriff can any one help
Helpful
invisibleman_productions's Avatar
invisibleman_productions Posts: 207, Reputation: 55
Full Member
 
#7

Mar 4, 2008, 09:18 AM
How To Remove Spysheriff / Winstall.exe / Spysheriff.exe
Helpful
adeyohannes's Avatar
adeyohannes Posts: 1, Reputation: 1
New Member
 
#8

Mar 4, 2008, 07:58 PM
Hello all I have same question with invisableman_production. I have virus too ( C:WINDOWSsystem32driversetchosts ) can I erase that folder etc ?
Helpful
invisibleman_productions's Avatar
invisibleman_productions Posts: 207, Reputation: 55
Full Member
 
#9

Mar 5, 2008, 07:43 PM
Adeyohannes which programs have your run till now(antivirus,antispyware) . Can you post a screen shot of the screen

Download and run the Malwarebytes' Anti-Malware
Post the log from the program

The best protection for your computer is a 3-tiered approach:
[1] anti-spyware software [2] anti-virus software, and a [3] firewall
[1] Latest Security News from the net: Latest list of Firewalls (use only one at at time)

[2] Latest Latest list of Anti Virus programs (use only one at at time)

[3] Latest Latest list of Anti Spyware removal tools
Helpful
LUANG's Avatar
LUANG Posts: 2, Reputation: 1
New Member
 
#10

Mar 10, 2008, 05:37 PM
Hi Invisable man, I also have the same problem with regards to the host file showing up on AVG virus scan and I tried all that you indicated above and it still keeps showing up. Any suggestions on what it might be?
Helpful

Not your question? Ask your question View similar questions

 
Thread Tools Search this Thread
Search this Thread:

Advanced Search



Check out some similar questions!

C:\windows\system32\drivers\etc\hosts virus [ 14 Answers ]

I went to a site and I think it was a java drive-by Now NOD32 is constantly giving a warning that there is a Qhost virus in the hosts file Only thing is, I don't know how to delete the virus I opened the hosts in notepad and found this: 127.0.0.1 www.virustotal.com 127.0.0.1 virustotal.com...

I have a virus in C:\WINDOWS\System32\drivers\etc\hosts [ 3 Answers ]

I have a virus in C:\WINDOWS\System32\drivers\etc\hosts I have tried everything! I have used Spybot, Maleware-bytes, Spyware Doctor, Ad-aware, and a couple others. All of them say that there is a virus, however only spybot said it couldn't be removed, access denied. I tried going into the host...

C:\windows\system32\drivers\etc\hosts virus [ 4 Answers ]

Last night got a virus, I don't know how.. Might of been in a torrent or something. But yeah my avg is going crazy the resident shield is popping up every few minutes C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS virus Although when I click heal or move to vault nothing happens Done a bit of...


View more Spyware, Viruses, etc. questions Search