Re: c:\winnt\system32\drivers\etc\hosts

From: Eric McG (dontbother_at_att.net)
Date: 07/24/04 

Date: Sat, 24 Jul 2004 16:15:32 -0400

A hosts file can indeed be considered infected if it's populated for devious
reasons. See how this trojan works:

Trojan.Ecure.C is a Trojan horse that modifies the Hosts file and the Internet
Explorer home page.
http://securityresponse.symantec.com/avcenter/venc/data/trojan.ecure.c.html 

-- 
Hope this helps..Reply in newsgroup only.
Eric McGillicudy
"George Hester" <hesterloli@hotmail.com> wrote in message
news:OYZdQfYcEHA.1656@TK2MSFTNGP09.phx.gbl...
The hosts file cannot be "infected."  Infected usually implies a binary
discrepency.  hosts is just a ASCII text file wich you can easily make by just
making a text file in that location and then removing the .txt extension.  Thus
new hosts file.
-- 
George Hester
__________________________________
"Mat" <anonymous@discussions.microsoft.com> wrote in message
news:345601c47165$b3a64370$a301280a@phx.gbl...
> This file was infected and was deleted.  How do I replace
> it?

Relevant Pages

  • Re: Trojan Horse SecThought.A and Trojan Horse SecThought.B
    ... It may be hidden so make sure you can view hidden files ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ... >>> drive and found that it was infected with Trojan Horse ...
    (microsoft.public.security.virus)
  • Re: Trojan horse Downloader.Bridge A
    ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ... One of them is this Trojan horse ...
    (microsoft.public.security.virus)
  • Re: c:winntsystem32driversetchosts
    ... True but I wouldn't call that an "infection." ... > Trojan.Ecure.C is a Trojan horse that modifies the Hosts file and the Internet ... > "George Hester" wrote in message ...
    (microsoft.public.win2000.general)
  • Re: http://images.only-virgins.com/cgi-bin/warning.cgi
    ... least the whole section that includes the (coolwebsearch) major affiliates. ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ... "George Hester" wrote in message ... > Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ...
    (microsoft.public.security)
  • Re: Whats this?
    ... George Hester ... > Humm, I think that if you rely on HOSTS to prevent this, the "script" ... > could just as easily "edit" the HOSTS file and bypass your redirection .. ...
    (microsoft.public.win2000.general)