Over 1 million tech questions and answers.

Host file has strange characters. I can't add a host entry?

Q: Host file has strange characters. I can't add a host entry?

I was trying to enter a new host file on one of our remote user?s laptop and when I went to open the file it showed a bunch of Chinese symbols and wouldn?t let me do anything with it? I tried deleting it and then tried to build a new host file from scratch and the same thing happened??? I?ve never seen this before. Any suggestions?

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Host file has strange characters. I can't add a host entry?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 101.2

Just when you think you've seen it all, recently all the Xerox Phasers we have on the network, are going offline. When looking deeper into it, we found that there are strange characters such as what looks like a cross or weird looking plus sign showing up in the field. Does anyone have any experience with this and why it's happening? We can remove the characters, but they randomly pop up again.

Read other answers
RELEVANCY SCORE 101.2

Just when you think you've seen it all, recently all the Xerox Phasers we have on the network, are going offline. When looking deeper into it, we found that there are strange characters such as what looks like a cross or weird looking plus sign showing up in the field. Does anyone have any experience with this and why it's happening? We can remove the characters, but they randomly pop up again.

Read other answers
RELEVANCY SCORE 96.8

Ad-Aware 2007 scan found a Host File Entry - IP Address: 127.0.0.1 Host Name: FASTCLICK.NET. Ad-Aware is unable to remove it - how should I proceed?

Thank you all!!
kermit2
 

Read other answers
RELEVANCY SCORE 93.6

I recently moved back to my apartment after going home over the holidays. My internet connection was great at home, I was able to watch streaming videos from sites such as youtube and espn. Now that I am back to my apartment my internet has been very slow, all of my roommates connections are running fine though. Streaming videos are very slow to play and only videos from youtube.com have been able to play. Streaming videos from websites such as espn.com and break.com will not play, it just says the video is buffering. I have ran all sorts of virus scans and adware scans. Something recently came up while using ad-aware 2008. I have 9critical infections under the family name of Redirected host file entry. All of the infections are from the same IP address. Whenever I click remove or even quarantine a screen pops up for about 2 tenths of a second that looks like its states: deleting files. The screen disappears and the 9infections remain. Could these infections be the problem? Is there anything else I can do? Please help

A:very confused! Redirected host file entry adware detected

just to add:::: I received this error message when trying to play a video a friend of mine uploaded on facebook.com

Transport error (#1001) while retrieving data from endpoint `/ajax/location_refresh.php?_ecdc=false': A network error occurred. Check that you are connected to the internet.

I also can not connect to online gaming servers such as battle.net...it gives me an error message explaining that I am unable to log on because I may not be connected to the internet, it suggest I manually connect to the internet before attempting to log in...

Read other 2 answers
RELEVANCY SCORE 87.2

 Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host
# localhost name resolution is handled within DNS itself.
#       127.0.0.1       localhost
#       ::1             localhost

Read other answers
RELEVANCY SCORE 87.2

I am using Windows XP home edition.

I posted this in the wrong forum, a few days ago: and was advised to post it here,
with a new hjt log. They did say that I had more serious problems than just my host file needing to be restored. They also said that there didn't seem to be a firewall. How can I find out if I'm using Window's firewall?

Arovax Shield popped up a message: "Warning: Your Windows host file was hijacked. It is recommended to restore host file."

1. Now I can't use my anti-virus program, because it stalls (freezes) before it finishes.

2. I can't use Panda or any other on-line scanner, because it too freezes before it can
finish.

3. I can't shutdown my computer - not even cold boot! I have to completely unplug it!

4. I can't do a system restore, to a previous date. (I've tried several previous dates).

I have no idea how to restore the host file, and I have no idea how it was hijacked.

Here is my new HJT log: (I hope it will be of some help)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:37:56 PM, on 12/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwi... Read more

A:Solved: "Your Windows host file was hijacked. It is recommended to restore host file."

Read other 8 answers
RELEVANCY SCORE 86.8

Logfile of Trend Micro HijackThis v2.0.4Scan saved at 5:38:05 PM, on 27/06/2010Platform: Windows 7 (WinNT 6.00.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exeC:\Program Files (x86)\Dell 968 AIO Printer\memcard.exeC:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exeC:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exeC:\Program Files (x86)\Hp\HP Software Update\hpwuSchd2.exeC:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exeC:\Program Files (x86)\AVG\AVG9\avgtray.exeC:\Program Files (x86)\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exeC:\Windows\Dell\PanelMgr\SSMMgr.exeC:\Windows\twain_32\Dell\DELL2145\Scan2Pc.exeC:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exeC:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exeC:\Program Files (x86)\iTunes\iTunesHelper.exeC:\Program Files\SetPoint\x86\SetPoint32.exeC:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exeC:\Program Files (x86)\Lav... Read more

A:Computer hijacked - strange pop ups, host file access issues

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 85.6

Thanks for your advice. I've transferred my problem to "Malware Removal & Hijack This Logs", as you suggested.

How do I delete this thread??
 

A:"Your Windows host file was hijacked. It is recommended to restore host file."

Try deleting or renaming the Hosts file.
It will be recreated, so no harm to try.
It's at:
C:\WINDOWS\system32\drivers\etc
It's named "HOSTS- no extension.
You can open this file with Notepad of you're curious enough to see what it says.
 

Read other 3 answers
RELEVANCY SCORE 82

I have server 2003 with domain controller and 35 workstation with windows7 prof and windows XP prof
I want to change all workstation host entry with my above mentioned server are my workstation through in single command any bat file are any script.

please help me
 

Read other answers
RELEVANCY SCORE 81.2

Spyware Doctor recently alerted me after a full system scan that my computer is infected with Spyware.Possible_Website_Hijack. It shows 1 threat - 2 infections, and both infections are listed as 'Bad Host Entry'. When I click the 'Fix Checked' button, Spyware Doctor just gives me a popup that says 'Some threats have not been cleaned successfully", and will not remove it. I did a full system scan with Malwarebytes as well but it did not detect the threat. It seems to only be detected by Spyware Doctors full system scan. I tried contacting PC Tools for instructions on how to remove this but, even after a few days now, I can't seem to get any response from them If anyone here can help me I would be so so grateful!!

Here is my current HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:31:12 PM, on 2/8/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16981)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system... Read more

Read other answers
RELEVANCY SCORE 77.2

I'm running Windows 7 Pro 64-bit, and have installed the Virtual XP mode.  A long time ago Virtual XP was fully running, with access to host resources (drives etc).  But my system underwent some software changes, and then Virtual XP could no longer
access the host resources.  After trying (unsuccessfully) all the tricks found on several forums, I decided to uninstall then reinstall Virtual XP, which I have just done.  But I still can't access host drives.  Here's how Virtual XP is set
up:
Workgroup name is set to the same as my host (confirmed in 'My Computer'/Properties/Name);
Networking 'Adapter 1' set to my host's NIC;  I have assigned a fixed IP address to the Virtual XP (this has worked previously; all devices on my Win7 network have fixed addresses, for good reason).

Integration Features has ticks in the boxes for those host drives I want to access from VXP.
I can successfully ping the host, via name or IP address;  I can successfully ping web sites by name (e.g. 'yahoo.com').  But when I open Windows Explorer and open the 'My Network Places' tree, it opens down to the name of my host workgroup, but
when I click on that workgroup name, after several seconds it pops up an error box saying: "<workgroupname> is not accessible.  You might not have permission to use this network resource.  <blah blah>.  The service has not been
started."
Any suggestions on how to get access to my host... Read more

Read other answers
RELEVANCY SCORE 76.8

IBM Connect Direct application used for Host to Host connectivity has been picked up as a Trojan Virus by some Microsoft Security Products including Defender, System Centre Endpoint Protection, System Centre Endpoint
Protection 2012 and Security Essentials.

The result is that Connect Direct is deleted by the security software.
Question: What will be the implication of excluding this from the security policy?

Read other answers
RELEVANCY SCORE 74.8

Greetings,

I need drivers for an old cable mark as (Wiretec)  USB host to host bridge which contain the chip GL620USB-A , It has color like Green and aboud 2 meters.

Does someone know where I can find a device driver so that USB will work. Right now only my USB host to host bridge is not recognized/enabled. I can't find anywhere a device driver; neither on the included CD(It's damaged) nor the internet.

If there's no driver available, are there any alternatives so.

Read other answers
RELEVANCY SCORE 74.8

I have a local area network of four Windows 7 PCs. The PCs are named Term1, Term2, Term3 and Term4.

Term1 is the server PC.

When I map to Term1 from the other Terms(2,3 and 4) I always used the command:
Net use F: \\Term1\c /user:Admin 1234


This worked fine before; now it suddenly refuses to connect this way ? I have to replace Term1 with the actual IP address of Term1 for it to work.

I
have tried the following Admin CMD commands:


netsh
int ip reset
ipconfig
/flushdns

All of these commands make no difference; I just can't connect using the server name (Term1).

What I strangely noticed is that from any of the terminals connected to Term1 (using the IP address); if I use, for example, ping Term1,
I get an address return of 127.0.0.1.home;
this address of 127.0.0.1.home will
display if I ping to Term2, Term3 or Term4.

I cannot find any solution on the web for this strange problem.

Read other answers
RELEVANCY SCORE 74.8

I ran a small check with the "MiniToolBox," and this is what I found in the Hosts content:

54.204.28.26 imfpmncmbojnbdhnogcegojocabhpbnh. What is this, is it Ad-ware? I would appreciate it if someone could let me know. I can find it and delete it if necessary, I have no problem with that. But It just seems that it doesn't belong? I ran: Hitman Pro, Malwarebytes Pro, and Avast, but they never caught it.

MiniToolBox by Farbar Version: 18-12-2013
Ran by Dan (administrator) on 26-01-2014 at 23:34:06
Running from "C:\Users\Dan\Downloads"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************
========================= Hosts content: =================================

54.204.28.26 imfpmncmbojnbdhnogcegojocabhpbnh
127.0.0.1 localhost
Thanks for your time.

dwdraw2

A:Strange looking Host found?

It seems like Adware to me. You can use SuperAntiSpyware to remove it.

Read other 9 answers
RELEVANCY SCORE 74

My IE is freezing and I get "No Response" errors. Someone also managed to post a video on a social network site account that I never posted. It is painfully slow if it works at all. The computer is less than 3 months old. I question.....

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll

AND

O1 - Hosts: ::1 localhost

I'm guessing the first one is part of my AVG program. The second one is new to me. But I also have a new PC. When I googled it I realized it could be bad, as well as the other? The whole log is below. I'm defragging and running ad aware as well which found a few items. Please let me know if I need to remove any of the below. Thanks as always!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:58:19 AM, on 9/26/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Users\Cora\AppData\Roaming\mjusbsp\magicJack.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Sys... Read more

A:New host files and strange PC behaviors?

When I try to run hijack again I got:
---------------------------
HijackThis
---------------------------
For some reason your system denied write access to the Hosts file. If any hijacked domains are in this file, HijackThis may NOT be able to fix this.

If that happens, you need to edit the file yourself. To do this, click Start, Run and type:

notepad C:\Windows\System32\drivers\etc\hosts

and press Enter. Find the line(s) HijackThis reports and delete them. Save the file as 'hosts.' (with quotes), and reboot.

For Vista: simply, exit HijackThis, right click on the HijackThis icon, choose 'Run as administrator'.
---------------------------
OK
---------------------------
 

Read other 1 answers
RELEVANCY SCORE 72.4

I need help, not 30 lashes with a wet noodle. I feel stupid enough already.

I think I have a failed uninstall of Norton Internet Securities 2004 and I may not have completely removed MSN 9.0 either. The machine was handed down to me from my fifteen year old daughter, who feels that it has "a bunch of Trojans".

It is a Presario S5000NX running WinXP SP2. It has two XP clients, one of which can access the internet and be seen (usually) by other machines. The 95 client can be seen by all machines but cannot see any of them. The samba (Mandrake 10.1) client can't be seen but can (usually) see the host, 95 client, and one XP client, and can access the internet. The other XP client cannot be seen or go online, but can (usually) access files from (some of) the other computers. The samba client double-boots in Win2000 and can then access the host, 95 client, and accessible XP client, but cannot be seen. The 95 client cannot access the internet.

This ethernet LAN connectivity is subject to change without notice or apparent reason.

It is currently running AVG free and Sygate free; whenever I try to install stronger security software, I lose network connectivity (which is hardly perfect in the first place) and have to run an XP system restore.

I can also scan across the network with NOD32 on a client computer. Neither it nor AVG nor Ad-Aware nor Spybot turn anything up.

Let's start with a hijackthis log:

Logfile of HijackThis v1.97.7
Scan saved at 5:23:01 A... Read more

A:XP fileshare and ICS host with a host of problems

get the new HJT from here and repost the new log.

http://www.tomcoyote.org/hjt/
 

Read other 2 answers
RELEVANCY SCORE 72.4

Hello everyone,
I recently did a teamviewer session with a person. After that day, a teamviewer process would show up on my firewall as i started windows showing the name of a "macbook.XXX". I uninstalled Teamviewer but still this "MACBOOK" shows up in "windows host processes" when i start my computer. This person confirmed me he has a MacBook so I am pretty sure this is related to that teamviewer call. How do I fix this? And why does it make that connection when I start my laptop? Here is a screenshot of what happens.
 
http://imgur.com/a/lu8IE
 
 
The first in the list is the macbook i am referring to, the second in the list fully deleted is the name of my laptop.
 
what is happening?
thank you in advance for your help

Read other answers
RELEVANCY SCORE 72.4

Hello everyone,
I recently did a teamviewer session with a person. After that day, a teamviewer process would show up on my firewall as i started windows showing the name of a "macbook.XXX". I uninstalled Teamviewer but still this "MACBOOK" shows up in "windows host processes" when i start my computer. This person confirmed me he has a MacBook so I am pretty sure this is related to that teamviewer call. How do I fix this? And why does it make that connection when I start my laptop? Here is a screenshot of what happens.
 
http://imgur.com/a/lu8IE
 
 
The first in the list is the macbook i am referring to, the second in the list fully deleted is the name of my laptop.
 
what is happening?
thank you in advance for your help

A:strange host service in Glassdoor firewall after TW session

I would suspect this shows as one of the exceptions added within the "Firewall" tab of Glasswire? If you never intend to use it again, you can click on the 'grey flame' icon on the left to block it, if it being there concerns you.

Read other 1 answers
RELEVANCY SCORE 72.4

Hello,

I posted this in the Vista section as I didn't know what the problem was, but it appears it's an infection so I'm re-posting it here. I've recently been having a problem involving the Host Process on Vista Home periodically closing, the error message reading: "Faulting application svchost.exe, version 6.0.6001.18000, time stamp 0x47918b89, faulting module ntdll.dll, version 6.0.6002.18005, time stamp 0x49e03821, exception code 0xc000071b, fault offset 0x000888f5, process id 0x4c8, application start time 0x01cb470a75d7a5d5."

Also, Windows has been running notably slower since this has been occuring. I thought this might just be some wacky Windows malfunction but I also get strange pop-ups and redirections as if it were spyware or something. Hmm. Nothing comes up on a virus scan though.

Another problem tied with this is that Windows can't update or look for updates anymore. When I try to, it says "Windows could not search for new updates. Code 80072EFE". System Restore won't create new restore points either.

I did a HJT scan and a DDS scan and am posting the logs. However, I also did a GMER scan but it would crash every time it reached the "Device\HarddiskVolumeShadowCopy1" part of the scan and wouldn't finish, and even gave me a BSOD after the program closed.

HJT log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:45:05 AM, on 8/29/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: In... Read more

A:Host process closes, strange pop-ups, Windows won't update

Bump, problem is still occuring.
 

Read other 2 answers
RELEVANCY SCORE 72.4

I recently installed windows 7 x86 and when it was done I realised that my usb mouse and no other usb device would work, poking around I found out that disabling VIA USB Enhanced Host Controller in the device manager allowed USB devices to work. Also usb devices are detected as USB1.1 (USB2 options are enabled in BIOS).
Its probably a driver issue but its been hard to find the right one, maybe its just not fully supported in windows 7.

Now for the details, this motherboard I bought cheap online as a slight upgraded. It was advertised as a GA-K8 VM. Here is the CPU-Z info: http://i.imgur.com/M9jqmtX.png

Now getting this sorted out isn't that big of a issue but be nice being able to transfer thing to usb at decent speeds, and to get this issue out of my head some reason I feel like having the host controller disabled is bad.

A:Strange VIA USB Enhanced Host Controller problems win7

Hi Welcome to Seven Forums .. I think your Motherboard maybe to old and not supported .. But lets try finding the exact Model Number .. By doing the following at the Start type in start in the search box write in CMD right click on it and Run as Adim when the prompt open type the following ... wmic baseboard get product,Manufacturer,version

That will tell you the Manufacturer of your Motherboard and Model Number .. Then go to their webstie and download the Chipset Driver i think it will be for xp only though ...

Read other 2 answers
RELEVANCY SCORE 72.4

Hello,

I've recently been having a problem involving the Host Process on Vista Home periodically closing, the error message reading: "Faulting application svchost.exe, version 6.0.6001.18000, time stamp 0x47918b89, faulting module ntdll.dll, version 6.0.6002.18005, time stamp 0x49e03821, exception code 0xc000071b, fault offset 0x000888f5, process id 0x4c8, application start time 0x01cb470a75d7a5d5."

Also, Windows has been running notably slower since this has been occuring. I thought this might just be some wacky Windows malfunction but I also get strange pop-ups and redirections as if it were spyware or something. Hmm. Nothing comes up on a virus scan though.

Another problem tied with this is that Windows can't update or look for updates anymore. When I try to, it says "Windows could not search for new updates. Code 80072EFE". System Restore won't create new restore points either.

I scanned and here is the log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:45:05 AM, on 8/29/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Windows\RtHDVCpl.... Read more

A:Host process closes, strange pop-ups, Windows won't update

You need to fix:
R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - *{03402f96-3dc7-4285-bc50-9e81fefafe43} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
for sure, I am not an expert on Hijackthis so there may be other things you need to fix, but you can try these first.
 

Read other 3 answers
RELEVANCY SCORE 72

Multiple variations of this warning cause computer to lock up, as well as be inaccessible to Remote Desktopm

A:The protocol host process 1444 did not respond and is being forcibly terminated {filter host process 0}.

Can you try uninstalling the latest Windows Defender upgrade ?
Else you can try stopping the entire service itself.
 
See:
http://social.technet.microsoft.com/Forums/en-US/w7itproperf/thread/a5a10437-277a-45ec-b044-408aa37971b9 

Sumesh P - Microsoft Online Community Support

Read other 7 answers
RELEVANCY SCORE 71.6

Hello,

I've recently been having a number of problems on my Vista Home laptop, especially involving the Host Process periodically closing, with the error message reading: "Faulting application svchost.exe, version 6.0.6001.18000, time stamp 0x47918b89, faulting module ntdll.dll, version 6.0.6002.18005, time stamp 0x49e03821, exception code 0xc000071b, fault offset 0x000888f5, process id 0x4c8, application start time 0x01cb470a75d7a5d5."

And at random times, svchost will use almost 100% of the CPU causing it to run very slow.

Also, Windows has been running notably slower since this has been occuring. At first I just thought this might just be some wacky Windows problem, but it's gotten much worse and I also get strange pop-ups and redirections, so I'm sure it's been infected. And Google Chrome won't even load webpages anymore.

Another problem tied with this is that Windows can't update or look for updates anymore. When I try to, it says "Windows could not search for new updates. Code 80072EFE". System Restore won't create new restore points either.

I'm posting the DDS and GMER scans, but the GMER scan would crash every time it reached the "Device\HarddiskVolumeShadowCopy1" part of the scan and wouldn't finish, and even gave me a blue screen after the program closed. So, the GMER log includes only Sections and C drive included.

Thanks for any help!
-------------------------------------------------------------------------------... Read more

A:Host process hogs CPU/closes, strange pop-ups, Windows won't update

Hi -

I'm not sure we'll be able to resolve all those issues, but we can take a look. Sometimes it's better to simply reinstall the Operating System. There are a couple of indicators in those logs which have me wanting to investigate a bit more. Please run this rootkit scanner.

Scan With RootKitUnHooker
Please Download Rootkit Unhooker Save it to your desktop.
Now double-click on RKUnhookerLE.exe to run it.
Click the Report tab, then click Scan.
Check (Tick) Drivers, Stealth. Uncheck the rest. then Click OK.
Wait till the scanner has finished and then click File, Save Report.
Save the report somewhere where you can find it. Click Close.
Copy the entire contents of the report and paste it in a reply here.

Note** you may get the following warning, just click OK and continue.

"Rootkit Unhooker has detected a parasite inside itself!
It is recommended to remove parasite, okay?"

Read other 11 answers
RELEVANCY SCORE 69.2

After about a week I noticed that the only automatic virus/spyware/whatever protector AVG was no longer in auto mode. So I updated it and ran it. Since it takes forever to complete, I walked away. When I came back, on my screen was an message stating that a list of 14 file names would be added to my host file. And do I want to edit it. I said ok, of course, and deleted the files that they had listed, but there were over 400 file names, most did not look like any place I would go. (if that's even why the file names are there.) It would be handy to be able to look somewhere to see what a standard host file list is, and if it holds the names of the internet sites you have, or do visit, then mine should be a lot bigger and the names should be different. Anyway, the list of names that it showed in the message were www.80-music and 80-music, 82211.net, 8866.org, www.8ad.com, there were more with (numbers).com and one had numbers with searchbox.com following, the rest were, www.abestmanage.org, aaabesthomepage.com and the last was aaasexypics.com.My operating system is (slow beyond belief) Microsoft windows XP Professional with service pack 3 and the AuthenticAMD processor. It says on the tower that it is the media center TV PC, ya right! If it is, it does not work. And I have had the media center in a computer that was not an HP, and it worked great. So I know its not that I need better reception. I am convinced that HP is in the "how to make people buy a new compute... Read more

A:What Should Be On The Host File?

Suggested reading:http://www.bleepingcomputer.com/tutorials/hosts-files-explained/http://www.komando.com/tips/index.aspx?id=956http://www.logicaltips.com/LPMArticle.asp?ID=506Louis

Read other 1 answers
RELEVANCY SCORE 69.2

I have no host file in C, Windows, System 32, Drivers, Etc. I have the folder set to show hidden files and folders but its still not there. Any help would be greatly appreciated. I'm using Vista.
 

A:No Host File

The standard hosts file only has these 2 entries (plus some comments):

127.0.0.1 localhost
::1 localhost

Create a file in Notepad or other plain text editor, and add that data into it. The IP addresses must be written all the way to the left, followed by space, then the name. Typically the space in between is a tab. Each entry must be on its own line. Name the file hosts (notice the spelling) and save it without an extension. Notepad adds the .txt extension, so remove that. Place it into the same subdirectory that you provided.

As I said above, the standard file also has comments. Would you like those as well?

The big question is: What happened to the original? Malware will often mess with it.
 

Read other 2 answers
RELEVANCY SCORE 69.2

I've try to get rid of "127.0.0.1 ntkrnlpa.info" from the first line of my host file by using HijackThis host file editor, but every-time I restart my computer the file changes back. I don't know what this is but it might have something to do with this http://www.bleepingcomputer.com/forums/t/256831/cant-get-rid-of-this-pesky-virus/ ... any help would be appreciated.

A:Changes to my host file

I see you have a HJT topic here.. http://www.bleepingcomputer.com/forums/ind...p;#entry1421194Now that your log is properly posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a HJT Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.From this point on the HJT Team should be the only members that you take advice from, until they have verified your log as clean.Please be patient. It may take a while to get a response because the HJT Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.To avoid confusion, I am closing this t... Read more

Read other 1 answers
RELEVANCY SCORE 69.2

I need a hand here!
Host File Values 
If my question are in the wrong place, please move it where it's suppose to be, thanks!
I keep getting directed to none http sites on both my MSA and now on my Battle.net account.
Someone suggested I should - could clean up my host file.
So I need to know how my host file are suppose to be, and make sure the new values in it are correct.
Can you guys help me out here?
Atm I'm running  W10 17025.rs_perrelease.171020-1626.
Blizzard suggest this :

Will it work on my machine, current build?
Or do I need something else?
Regards

Windows 10 Home User

Read other answers
RELEVANCY SCORE 69.2

Where is the Host file located in Windows 7?


Clint

A:Host file

It would be located at C:\Windows\System32\drivers\etc
Jerry

Read other 7 answers
RELEVANCY SCORE 69.2

Host file format do not allowed the slash / format. Many unwanted website cannot be blocked due to this. Any way to
circumvent this?
One more question pls. Is it possilble to password the host file to
prevent others from modifying or accessing to it.

Thks for any help
 

A:host file

Read other 7 answers
RELEVANCY SCORE 69.2

While I'm waiting for possible answers to my other thread another question arose. I installed IE Host File as suggested in the Security Thread by dvk01 but I am getting a message that Win32/Hostblock is a virus located in C:/Windows/system32/drivers/etc/. Is this just a false alarm because I downloaded the IE Host File?

I am also getting the message something is unable to access its data dirctory. It's either invalid, unreachable or another program is accessing.

I'm sorry to be such a bother trying to figure all this out.
 

Read other answers
RELEVANCY SCORE 69.2

This is my first time with a 64 bit OS. I usually have to use the Hosts file to resolve my DNS on my XP machine. Do I use the hosts file in the same location that XP 32bit was for Win 7 64bit (windows\system32\drivers\etc\Hosts)? Or, is there another hosts file location that 64bit OS uses?

A:Which host file to use?

Same place...

Read other 1 answers
RELEVANCY SCORE 69.2

I'm seeing more and more software for editing your host file? Can someone explain what this is all about in simple terms

Thanks
Cowboy
 

A:Host File

As in what a host file is, or what? Not sure what you are asking.
 

Read other 1 answers
RELEVANCY SCORE 69.2

Does anyone know if there is there any particular malware that would want to specifically alter these three domains out of a list of thousands in the hosts file away from 127.0.0.1?

127.0.p.1 easy.adpowerzone.com
127.0.0.q secure-asia.imrworldwide.com
127.0.0n1 www.munky.com
 

A:Host file changes.

I would just restore your host file. Info here: http://forums.majorgeeks.com/showthread.php?t=138700

If the host file is changed again, then I would post a Hijackthis log in the Malware removal forum.
 

Read other 2 answers
RELEVANCY SCORE 69.2

how do i get to my host file?

A:host file

For XP, \WINDOWS\System32\Drivers\etc\HOSTS is the location.

For 2K, \WINNT\System32\Drivers\etc\HOSTS is the location.

I forget where it is in W9x, but a search for HOSTS will turn it up.

Read other 1 answers
RELEVANCY SCORE 69.2

hello where is the hosts file?

A:host file

Hi puma2004gu The hosts file is located in C:\Windows\system32\drivers\etc under the name hosts. To open it, launch your text editor (like Notepad), with Admin Rights, and open the file from within the application.

Read other 1 answers
RELEVANCY SCORE 69.2

I am looking to block some inappropriate sites from computer by adding them to the hosts file. A while ago I was directed (on this website) to the location:

C:\Windows\system32\drivers\etc

Here I found the host file, opened it in Notebook and made the appropriate changes.

I went back to add a website and it is not there. Does anyone know where I can find this file? All I had to do in the past was type in an IP address in the form of 192.168.2.x, where "x" goes up each time, and after saving the browser wasn't able to load the page. I cannot find that file anymore and I'm slightly beyond frustrated at this point.

Any and all suggestions are welcome.

Thanks
 

A:Host file

This link and more from drop down at http://winhelp2002.mvps.org/hosts.htm will help you.

You Firewall or AV or Anti-Malware or even Windows may be protecting the hosts file so it gets restored.
Get a hosts file manager. I like HostsMan and it gets updated by more then one hosts file.
Then I have my own little hosts file list saved on my PC that I added to the HostsMan list so when I update it makes a all new list each time and mine get added back from my list.

You can not edit the hosts file from a limited user account either because you need Admin rights.
HostsMan loads at start up and has limited rights. But I can close it down and use the run-as to open it with Admin rights from a limited user account and that is what I do all the time to update and edit it or to just turn it off or disable it so I can get to a site.
 

Read other 1 answers
RELEVANCY SCORE 69.2

I've always been able to update my "Host" file from time to time. C:\WINDOWS\system32\drivers\etc\HOSTS

I add something to the file bur Win7 wouldn't let me save it in the "etc" folder becase of lack of permission.

How can I override that?

A:Can't add new Host file

save it to Desktop first then copy it to etc that way you will be asked for permission, punch in your admin PW and Bingo

-DG

Read other 6 answers
RELEVANCY SCORE 69.2

Where and how do I configure the host file?
 

A:Host file

have alook in your C:\WINNT\system32\drivers\etc

you will find it there (win 2000)

open in notepad to edit and don't save with any extension
 

Read other 2 answers
RELEVANCY SCORE 69.2

Hi .i have been trying without success to block certain websites with the host file .can you help me ?
i have win 7 sony intel i3 2.40Ghz 500 Gg hd 4 gRam ddr3. thank you

A:host file

http://winhelp2002.mvps.org/hosts.htm

Read other 4 answers
RELEVANCY SCORE 69.2

is it correct that a full or filling host file can slow down spyware /antivirus up dates, my host file windows/system32/ drivers /ect after 127.0.0.1 local host as on the next line, #start of entries inserted by spybot. as far as my best guestimate there is 6600 entries followed by # end of entries inserted by spybot. on the same page as host file 260kb i have two more host files one says host.20081011-213432backup and the other says host.20081015-211605backup but when i open the backup hosts they seem to have the same begining and ending, so my question is, can i delete any of or all of the host file after 127.0.0.1 local host and any of or all of the two backup files or will this leave me with a load of adware to contend with, advice on hosts would be gratefully received

A:host file

You can delete them all and run spybot and the updates and it will recreate the host file.

Read other 2 answers
RELEVANCY SCORE 69.2

I have no ideas where to put this post, not sure if here is okay, please correct me if I misplace it. I have read about the tutorial page of the host file. There are a few site that have offered good host file in details, the question is, if the information is huge I mean, if its one or two line of IPs and domain name included, we could easily know if an extra line is been added, but how when it includes a large information of IPs and domain names? How do we know our host file remain the original and the IP is not modified?Mod edit: Since the hosts file is web browser related, I've put your topic into that forum. - Platypus

A:Host File

How do we know our host file remain the original and the IP is not modified?This depends on the type Hosts files programs you have included - My Hosts file includes - There are 15219 more lines starting with "127.0.0.1" -I have downloaded HostsXpert / hpHosts / and another Hosts file also that cover many programs not covered by basic Hosts files.Searching for answers on these forums quite often mean you like to block many sites and extras.I also use WOT advisory program while surfing / searching on the web -You can find others and I recomend you download MVP Hosts - Read This Blocking Unwanted Connections with a Hosts File -Thank You -

Read other 5 answers
RELEVANCY SCORE 69.2

I just aquired a MVP HOST file ...i have extrracted all of it and changed it to name MVP...It has updated and i don't know what i am suposed to do with it from this point on..

can someone please explain to me what it does and how to use it...

Thank you to whoever can help...
 

A:what to do with MVP HOST File ????

Read other 7 answers
RELEVANCY SCORE 69.2

Is it best to set the properties of the host file to read only so it can't be hi jacked?
 

A:Host file

Read other 6 answers
RELEVANCY SCORE 69.2

I sent an email to rackspace.com, the ISP of that 69.20.16.183. This is the response I got back from them :

Recently you requested personal assistance from our on-line support
center. Below is a summary of your request and our response.

If we do not hear from you within 48 hours we will assume your issue
has been resolved.

Thank you for allowing us to be of service to you.


Subject
---------------------------------------------------------------
Spyware abuse from your ip block

Suggested Answer
---------------------------------------------------------------
Hello,

The adware was downloaded to your computer when someone there agreed to
receive it or other third party software. You can remove our customer?s
application by going to http://www.look2me.com/cgi-bin/UnInstaller.
Please keep in mind that this will only remove our customer?s software,
not anything from another party. Before you could have downloaded the
adware, you had to agree to the terms and agreement listed here:
http://www.look2me.com/eula.html. If you would like to get in contact
with the people at look2me.com, you can send an email to
[email protected] Please let us know if you have any further questions.

Thank you,

Phil Van Ingen
AUP Admin
Rackspace Managed Hosting
The Managed Hosting Specialist?

Question
---------------------------------------------------------------
There is some type of spyware on my wife's laptop that keeps adding
this ip address ... Read more

A:69.20.16.183 in Host file!

It's probably being retained in the system restore files, happens all the time. You need to use an app to get rid of it then turn off system restore, system restore will purge the stored files.

You do run firewalls, virus scan and malware scans right?

MD

Read other 2 answers