Re: To clarify the link for CWShredder Update

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Gary S. Terhune (grystnews_at_mvps.org)
Date: 02/28/04 

Date: Fri, 27 Feb 2004 16:19:15 -0800

I have it scheduled for 6 am daily. Last HOSTS update was 2/24, mine has
2/25 date, but the time on it is 10:49 PM--which is when I manually updated
to make sure I had a fresh one before passing it on to my daughter. Because
I add back in Custom URLs, that would make my timestamp sync to whenever I
run update.

I don't know if your app checks timestamp and only updates if newer is
available (which might get strange if newer comes out but I then add custom
URL before update kicks in--timestamp would be later on my file than that of
MVPS...), or if it just replaces file regardless. If the former, then it
would appear to be working properly--if the latter, then something's wrong.
Best I can do is make sure I check every morning until a new one appears,
and keepa my hands off until then. 

-- 
Gary S. Terhune
MS MVP for Windows 9x
George (Bindar Dundat) wrote:
> Well, I do have a VPC that I could try it on.  I haven't even tried
> connecting that to the net.  I do know that if the entire file gets
> hijacked that HFM will catch it. but in those cases the whole file is
> being over-written and the check number that is in there goes missing
> so it's easy to detect.  Then you get a warning that the file has
> been tampered with and a message box to start a restore from backup
> or a fresh download.  Which reminds me I have to ask GST how that
> command line is working out since I haven't been using it.  I think
> what I might do is add a line count function to the app somehow so if
> anything gets added or deleted (it shouldn't, but.....) it would get
> picked up by HFM.  Right now the System/Hidden/Read Only attributes
> are set so the file is locked but if Spybot can get around that then
> something else could too.
>
>
> "PA Bear" <PABear@mvps.org> wrote in message
> news:OItiHMY$DHA.2800@tk2msftngp13.phx.gbl...
>> TonyKlein, our Spyware God, just wrote:
>>
>>> There are a couple of CWS variants that hack the Hosts file
>>
>> e.g., I suspect, CWS.SmartKiller.
>>
>> Suggestion: Intionally infect your
>> machine-running-HOSTS-File-Manager with CWS.SmartKiller 'n see what
>> pans out. --
>> ~PA Bear
>>
>> George (Bindar Dundat) wrote:
>>> Spybot got them.  I just had the same report from Mike Burgess.
>>> See if you were using my HOSTS file manager there would be a backup
>>> there and you could just restore.  That'll teach ya.
>>>
>>> "PA Bear" <PABear@mvps.org> wrote in message
>>> news:OcbIH5Q$DHA.2432@TK2MSFTNGP11.phx.gbl...
>>>> Not only are those two HOSTS file entries not working now but
>>>> something (Spybot? CWS.SmartKiller?) had removed them from my list!

Relevant Pages

  • Re: strange characters in ping results
    ... You did update Spybot before scanning? ... Look for a hosts based hijack first. ... Spyware Info: ... Block possibly dangerous websites with a Hosts file. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Message for...Zee = "oops!!"
    ... Locate and delete again the HOSTS (no extension) file. ... Download SpyBot Search & Destroy available here: ... Launch Spybot S&D, click the “Mode” button and select “Advanced Mode”. ... Again, looking at the left hand pane, click “Tools” and “Hosts file”. ...
    (microsoft.public.windows.inetexplorer.ie6.setup)
  • Re: Annoying http:/***
    ... Get SpyBot AND Ad-Aware 6 -- you probably have other spyware too. ... edit your HOSTS file and clean out any entries it may have made. ... Windows editors and word processors always try to stick a ...
    (alt.computer.security)
  • Re: To clarify the link for CWShredder Update
    ... Last HOSTS update was 2/24, ... > "PA Bear" wrote in message ... >>> Spybot got them. ... >>> See if you were using my HOSTS file manager there would be a backup ...
    (microsoft.public.security)
  • Re: Backing up freebsd to 1 file?
    ... I'll send you my dump scripts if you're interested. ... - I am running FreeBSD hosts within ESXi. ... Basically what I need to do is create a fully restorable backup for 2 ...
    (freebsd-questions)