Re: New virus

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Steve Nielsen (steve_nielsen_at__blahX3_lincoln.k12.or.us)
Date: 03/26/04 

Date: Thu, 25 Mar 2004 16:27:30 -0800

There is a page hijacking trojan that surfaced a few months back, none
of the a/v vendors I know of list it. I don't even know if there's an
official name for it. A co-worker got hit by it from a vistit to a
supposedly techie site he found on a google search. I know he had a hell
of a time getting rid of it. I asked him about it last week and he
doesn't remember what he had to do, but there were a few registry edits
involved in addition to the host file edit. OP might do better askig in
a virus newsgroup such as alt.comp.virus

Might also try flagging hosts as read-only.

Steve

Head Hunter wrote:

> Sounds like a virus to me, not spy-ware. Look at what it is doing. It is
> making it so he can't go to any of the anti-virus vendors web sites for
> updates or information.
>
> Try the new Zone Alarm. It has an advanced option to lock the Hosts file
> (Firewall, Main tab, Advanced button). Install it, clean up the Hosts file,
> then tell Zone Alarm to lock the file.
>
> Then, update your antivirus.

Relevant Pages

  • Re: New virus
    ... Try the new Zone Alarm. ... It has an advanced option to lock the Hosts file ...
    (microsoft.public.win2000.general)
  • Re: Hosts File Save ?
    ... ZoneAlarm does have a 'lock the hosts file' option, ... nass wrote: ... was causing it and try to figure it out in the installation of both *Spybot ... The 'lock Hosts file' is not checked here. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Hosts file keeps changing every second
    ... You might try a free program called Spybot Search and Destroy. ... option to lock the hosts file: ... Many of the major brand antivirus and antispyware sites offer fee ...
    (microsoft.public.windowsxp.security_admin)
  • Re: protect HOSTS file from hijackers
    ... FWIW, Zone Alarm can "lock the hosts file" for you, ... look under "Firewall - Advanced". ... I personally recommend version ...
    (microsoft.public.windowsxp.general)