DEFENDER BETA2 "possible hosts file hijack" & Alert levels

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Windows defender beta2 has consistently identified a file as a "possible
hosts file hijack": C:\ ____\_____\_____\etc\hosts. Originating from
WINNT files. There is no specific "NAME" attached in the file, as in the
case of the other initiated thread from Betty under the subject: DEFENDER 2
HOST FILE (or something similar)

I have no idea what this file is, nor its purpose! I admit to possessing
little to no tech knowledge....hence my ignorance regarding what a "HOST
FILE" is.

Initially defender beta2 listed this as a HIGH alert level when I first
installed defender, suggesting that the file be removed immediately, which I
did. Then, defender began listing this file as a LOW alert level, suggesting
that I choose an action. (Chose quarantine, since I have NO CLUE!)

Defender is now.....as of TODAY, listing this file as a MEDIUM alert level.

Initially I removed this file as suggested. Since receiving the low alert
level & now medium alert level and since I have no idea what ACTION to
choose, I consistently request defender to quarantine the file.

What is this file, where did it come from, what is it's purpose & function
and is it safe?

Do I choose IGNORE, ALLOW, QUARANTINE OR REMOVE?

All HELP in this matter is welcome and unbelievably APPRECIATED! :)

Thanks!
 
Do you happen to use Webroot Spysweeper? Its common ads sites shield adds
web sites to the host file to block advertisements from appearing on your PC.
Other programs do that also for protection. Some malware will hijack the
host file to prevent you from reaching web sites for anti-virus or
anti-spyware protection. Please see the following information:
http://www.aumha.org/a/parasite.htm
http://www.mvps.org/winhelp2002/hosts.htm
http://wiki.castlecops.com/Malware_Prevention:_Prevent_Re-infection
Defender detects all changes to the host file as a possible threat, but some
should be allowed, depending on what other security programs you have on your
PC.
 
Hi!

I do have Spysweeper! I will immediately go to the links you provided as
well, but I did want to respond about having Spysweeper and say THANKS for
responding!

Going to those links now.................
BK :)
 
Back
Top