Over 1 million tech questions and answers.

Saving Windows 7 HOSTS file to drivers\etc folder

Q: Saving Windows 7 HOSTS file to drivers\etc folder

Hi all! Hope someone can be of assistance with this. Removed virus "Security Shield" from my system with the help of Bleeping Computer. At the point where I deleted the file C:\Windows32\Drivers\etc\HOSTS file, I cannot copy the new link to the folder "etc". It does not show when I right click the "Windows 7 HOSTS File Download Link", selecting "Save Target As..." I need to complete this last step in the process. Any suggestions?

RELEVANCY SCORE 200
Preferred Solution: Saving Windows 7 HOSTS file to drivers\etc folder

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Saving Windows 7 HOSTS file to drivers\etc folder

Hello -If you are sure that your computer is free of infections, please follow directions in this this M/soft Fix It To reset the Windows7 Hosts file back to the default automatically, click the Fix it button or link, click Run in the File Download dialog box, and then follow the steps in the Fix it wizard.http://go.microsoft.com/?linkid=9668866 <<= FixIt link -Thank You -

Read other 2 answers
RELEVANCY SCORE 73.2

Hi,

I was infected with System Tool and used the brilliant bleedingcomputer self-help guide to remove it. It all went fine, until the very end (number 23) where I tried to save a version of my HOSTS file. Point 22 says to delete the file C:\windows\system32\Drivers\etc\HOSTS. I did this. Point 23 says to save the appropriate new version in the same place (for me, vista). I tried to do this, and it wouldn't let me saying the administrator had to do this. I am on my home computer and don't have any administrator settings.

My questions are:
1) do I need to re-save the HOSTS file?
2) if so, how do I do this?
3) does this mean I haven't got rid of the virus?

Any help greatly appreciated!

Mark

A:Saving HOSTS file

Have a read of this How do I reset the hosts file back to default?

Read other 3 answers
RELEVANCY SCORE 72.8

hi i have been getting this result after scanning with AVG Antivirus for this file C:\WINDOWS\system32\drivers\etc\hosts; Result: Change, Status: Changed. Even when I scan again I am getting the same result. Has the file really been changed/healed or do I have a problem. Thank You. here is my processes logfile:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:40:35 AM, on 10/20/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeF:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeF:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeF:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exef:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exeF:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINDOWS\Explorer.EXEF:\PROGRA~1\Grisoft\AVG... Read more

A:Is This File Infected? C:\windows\system32\drivers\etc\hosts

Hello flossist,It is normal that AVG shows that files, the MBR or Boot record to have changed. These are done during normal maintainance, when you or windows updates files or have had to correct errors on the drive. The only time that you should worry is if they also show as infected. To get AVG to quit showing them as changed, open the AVG Test Center, click the F3 key on your keyboard and tell it to accept the changes. If it still shows something as changed after this.. delete the file named AVG7QT.DAT in C:\ and AVG will rebuild it the next time it is run. General system maintenance can change the Hosts file even when it isn't apparent by visual inspection. AVG uses a checksum to compare a file before and after and a minor change or correct to the file would have caused it to appear changed.Lets check your HOSTS file. It's located at c:\windows\system32\drivers\etc\hosts. You can open it up in Notepad. If it's just some lines on top with a # in front of it and followed by 127.0.0.1 localhost, then you don't need to post it;however, if there are others following 127.0.0.1 localhost, you may have to fix it. Post it here if that's the case.

Read other 2 answers
RELEVANCY SCORE 72.8

I've been following the instructions for removing Security Tool Malware that has infected my computer. One of the last steps instructs me to delete the C:\Windows\System32\Drivers\etc\HOSTS file. I used Windows Explorer to try and find the file, but I am unable to see it anywhere in any of the folders under my Windows folder.

Any ideas where I would find this file?

Thanks!

A:Cannot Find C:\Windows\System32\Drivers\etc\HOSTS File

Problem solved! I was able to get the answer on the live chat!

Read other 3 answers
RELEVANCY SCORE 71.2

Ok, im new here, but I just had this trouble. I downloaded and opened an adobe reader file and since im paranoid about viruses i scanned my laptop after i did this. Spybot didn't find anything but Avg Free Edition 7.5
found that there was a Avg Hosts change in C:WINDOWS\system32\drivers\etc\hosts

So i think i might have gotten something so heres my hijackthis log file

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:01:22 PM, on 8/2/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:... Read more

A:Avg 7.5 detected a Host Change In C:windows\system32\drivers\etc\hosts (log file too)

bump
 

Read other 1 answers
RELEVANCY SCORE 65.2

My computer is running fine without this file I just wanted to restore a older version of iOS for my iPod Touch and I apparently need to edit this file. Step 3

I know that I can create the 'hosts' file with MS Notepad but when I go to save it I get the message attached.

In the etc folder I have 'lmhosts' 'networks' 'protocol' and 'services'

This may help:
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft® Windows Vista™ Home Premium, Service Pack 2, 64 bit
Processor: Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz, Intel64 Family 6 Model 23 Stepping 10
Processor Count: 2
RAM: 4057 Mb
Graphics Card: Mobile Intel(R) 4 Series Express Chipset Family, 1805 Mb
Hard Drives: C: Total - 290204 MB, Free - 63897 MB; D: Total - 14999 MB, Free - 5592 MB;
Motherboard: Dell Inc., 0G848F
Antivirus: Microsoft Security Essentials, Updated and Enabled

Thanks
 

A:No 'hosts' file in system32\drivers\etc

Read other 6 answers
RELEVANCY SCORE 64

Hi there,
 
Woke up this morning to a Malware bytes notice that I had this and it was listed 5 times. Ran MBR again twice, removed them, then ran Spybot. Rebooted, ran both again and it looks like they are gone however I just want to be sure I don't need to do anything else.
 
I've posted my FRST and Addition files below. Please let me know if there's anything to be concerned about or if I need to run anything else to ensure I've cleaned everything out. Thanks in advance!
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-01-2016
Ran by Lysa (administrator) on LYSA-PC (22-01-2016 14:34:44)
Running from C:\Users\Lysa\Desktop\FIX
Loaded Profiles: Lysa (Available Profiles: Lysa)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Andrea Electronics Corporation) C:\Pr... Read more

A:Hijack.Host file in System32\drivers\etc\hosts

Hello Han2013 and Welcome to the BleepingComputer.
My name is Yılmaz and I'll help you with the cleanup of malware from your computer.
Before we move on, please read the following points carefully.
Please complete all steps in the specified order.
Even if tools don't find malware, I want you to post the logfiles anyway.
Please copy and paste the logfiles directly into your posts. Please do not attach them unless you are instructed to do so.
Read the instructions carefully. If you have problems, stop what you  were doing and describe the problems you encountered as precisely as  you can.
Don't install or uninstall software during the cleanup unless you are told to do so.
If you can't answer for the next few days, please let me know. If  you haven't answered within 5 days, I am assuming that you don't need  help anymore and your topic will be closed.
I can not guarantee that we will find and be able to remove all  malware. The cleaning process is not instant. Please continue to review  my answers until I tell you that your computer is clean
Please reply to this thread. Do not start a new topic
As my first language is not English, please do not use slang or idioms. It could be hard for me to understand.
Please open as administrator  the computer. How is open as administrator  the computer?
Disable your AntiVirus and AntiSpyware applications, as they will  interfere with our tools and the removal. If you are unsure how to do ... Read more

Read other 29 answers
RELEVANCY SCORE 61.2

I am using IE or FF and when i click on say a .jpg and do a save image as a windows browser opens to the fodler i was last in the issue is i want to move up the hiearchary and save in a different folder, this option was available in XP so i have to take the long way and go to music\folder\folder\ folder etc this takes too long where is the UP button?

A:when saving a file in IE or FF i have to select the folder

I believe Classic Shell - Start menu and other Windows enhancements has that function, the maker of this program is a member here on the forum.
ANN: Classic Shell - start menu and other features

Jerry

Read other 7 answers
RELEVANCY SCORE 59.2

HpHosts-Setup-Win32.exe on hosts-file.net appears to contain a very nasty malware.  I went there from the BC HOSTS tutorial and installed it on two computers.
 
On my HP, I also disabled DNS using that program.
 
On my HP, MBAM quarantined the resulting HOSTS file and there were two Hijack.hosts entries in quarantine - one was not restorable.  I downloaded and added the HOSTS file from the "hosts.zip" file (from the same site) and it did not get quarantined, so it appears this has to do with just the app.
 
On my Toshiba, I got a very nasty malware, possibly Symmi.  It does several wonderful things.  I have not yet figured out how to rid myself of it, and have sent a message to Malwarebytes asking for help.
 
It turns off the Internet, removes MBAM (paid) from startup, prevents opening MBAM, SAS free and avast! free (from the start menu, systray and desktop), disables right-click of those programs, causes Windows Explorer to hang if you right-click in it or the desktop, disables run as admin, removes MBAM from the start menu, prevents MB Chameleon from working and, if I actually get MBAM to open, MBAM's scan cannot get past "updating" because there is no Internet access.  It does NOT stop access to WinPatrol.  I even ran EEK from WinPE (flashdisk boot) and it only found one Symmi infection, but the system is still infected.
 
I just noticed that it also changed msconfig to selective startup.
This occurred at the same time... Read more

Read other answers
RELEVANCY SCORE 59.2

HpHosts-Setup-Win32.exe on hosts-file.net appears to contain a very nasty malware.  I went there from the BC HOSTS tutorial and installed it on two computers.
 
On my HP, I also disabled DNS using that program.
 
On my HP, MBAM quarantined the resulting HOSTS file and there were two Hijack.hosts entries in quarantine - one was not restorable.  I downloaded and added the HOSTS file from the "hosts.zip" file (from the same site) and it did not get quarantined, so it appears this has to do with just the app.
 
On my Toshiba, I got a very nasty malware, possibly Symmi.  It does several wonderful things.  I have not yet figured out how to rid myself of it, and have sent a message to Malwarebytes asking for help.
 
It turns off the Internet, removes MBAM (paid) from startup, prevents opening MBAM, SAS free and avast! free (from the start menu, systray and desktop), disables right-click of those programs, causes Windows Explorer to hang if you right-click in it or the desktop, disables run as admin, removes MBAM from the start menu, prevents MB Chameleon from working and, if I actually get MBAM to open, MBAM's scan cannot get past "updating" because there is no Internet access.  It does NOT stop access to WinPatrol.  I even ran EEK from WinPE (flashdisk boot) and it only found one Symmi infection, but the system is still infected.
 
I just noticed that it also changed msconfig to selective startup.
This occurred at the same time... Read more

A:WARNING: hosts-file.net HOSTS installation program adds malware

FYI, I thought the HPHosts program was a standalone (portable).  It turns out that it was installed on my system and reinfecting the HOSTS file.  I have uninstalled it and will run MBAM.  If it gets infected again, I'll advise..

Read other 22 answers
RELEVANCY SCORE 59.2

Hi, I'm having grief with the MS Hotmail security/linking email address thing. (Separate thread.)

It looks to me at least, that I'll lose access to my email address as MS want to link it to one I have
no idea what either the address or passwords are!

So, can I export all my email addresses, (friends etc.) from my Hotmail to my computer, or another email address, without having to type them all out?

Much appreciated.

Tony.
 

A:Solved: Saving email addresses to external folder/file.

You can use outlook or a web client to sync it with your email account and save it there.

Dima
 

Read other 3 answers
RELEVANCY SCORE 58.8

I'm having various problems with both XP and Vista PC's but the XP problem is more urgent. I have not been able to view some websites correctly. Whether this 'thing' that AVG has picked up is anything to do with it I obviously haven't a clue. The PC is running very slow and IE keeps closing. When I go to some webites I am getting the page 'Internet Explorer cannot displaythe web page' or I can get to the first page but cannot view the category pictures - there is a small box with a red cross. I hope I've explained this in enough detail. It's doin' mi 'ead in!Thanks in anticipation.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 18:27:33, on 23/02/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16608)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\Program Files\Goog... Read more

A:C:windows\system32\drivers\etc\hosts

Hello Dand-e-lionApologize for the delay in response we get overwhelmed at times but we are trying our best to keep up.If you have since resolved the original problem you were having would appreciate you letting us know If not please perform the following below so I can have a look at the current condition of your machine.Thanks and again sorry for the delay.Please download Deckard's System Scanner (DSS) and save it to your Desktop.Close all other windows before proceeding. Double-click on dss.exe and follow the prompts.When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.NextPlease do an online scan with Kaspersky WebScannerClick on Accept ButtonYou will be promted to install an ActiveX component from Kaspersky, Click Yes.The program will launch and then begin downloading the latest definition files:Once the files have been downloaded click on NEXT
Now click on Scan SettingsIn the scan settings make that the following are selected:Scan using the following Anti-Virus database:Extended (if available otherwise Standard)
Scan Options:Scan Archives
Scan Mail BasesClick OKNow under select a target to scan:Select My ComputerThis will program will start and scan your system.The scan will take a while so be patient and let it run.Once the scan is complete it will display if your system has been infected.Now click on the Save as Text button:Save the f... Read more

Read other 4 answers
RELEVANCY SCORE 58.8

Hi,

I was having porblem accessing some webistes and was told to remove line(s) in this file using notepad. It only made things worse and I can't access things like google/gmail or other websites.

I need help, what do I have to do?

Read other answers
RELEVANCY SCORE 58.8

Since this change i have been unable to access my external hard drive. AVG antivirus picks up that dir C:\windows\system32\drivers\etc\hosts has changed but doesn't do anything about it. was wondering if you could help?Logfile of Trend Micro HijackThis v2.0.2Scan saved at 21:15:06, on 03/10/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeC:\WINDOWS\System32\alg.exeC:\Program File... Read more

A:C:\windows\system32\drivers\etc\hosts

Hello daisacre,It is normal that AVG shows that files, the MBR or Boot record to have changed. These are done during normal maintainance, when you or windows updates files or have had to correct errors on the drive. The only time that you should worry is if they also show as infected. To get AVG to quit showing them as changed, open the AVG Test Center, click the F3 key on your keyboard and tell it to accept the changes. If it still shows something as changed after this.. delete the file named AVG7QT.DAT in C:\ and AVG will rebuild it the next time it is run. General system maintenance can change the Hosts file even when it isn't apparent by visual inspection. AVG uses a checksum to compare a file before and after and a minor change or correct to the file would have caused it to appear changed.Lets check your HOSTS file. It's located at c:\windows\system32\drivers\etc\hosts. You can open it up in Notepad. If it's just some lines on top with a # in front of it and followed by 127.0.0.1 localhost, then you don't need to post it;however, if there are others following 127.0.0.1 localhost, you may have to fix it. Post it here if that's the case.

Read other 2 answers
RELEVANCY SCORE 58

Hello HJT Team,This is my first time posting. I have had problems with my computer for a while and I just do not know how to fix it. I am ready to do anything and everthing to get it running at optimum performance. I am running windows XP and below is my HJT log. I do not know what other info you may need but hopefully this is enough to get started.When I run AVG it finds C:\WINDOWS\system32\drivers\etc\hosts and says that it was changed and it does not find anything else. Also, the control center will not open. Any other scans that I do get interrupted during the middle of the scan and I do not know why. There are a lot of other little things that I notice as well.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:31:40 PM, on 3/1/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16608)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeH:\Program Files\aawservice.exeC:\WINDOWS\system32\spoo... Read more

A:C:\windows\system32\drivers\etc\hosts "changed"

I apologize for the very long delay. We have a huge backlog of HijackThis Logs to handle and it has been taking us greater time than normal to get caught up. If you are still having a problem, and want us to analyze your information, please post a brand new hijackthis log. If we do not hear back from you within a couple of days we will need to close your topic.When posting your logs please post them directly into the reply. Do not attach them.Also make sure you have already followed the steps outlined below:Preparation Guide For Use Before Posting A Hijackthis LogThank you for your patience.

Read other 13 answers
RELEVANCY SCORE 58

I am not sure what section this fits into so this seems the closest match.
_____________

After doing much researching into a probelm I am having Im am 98% sure that at one time I had spy/ad-ware but that it has been removed. However, said malicious program left changes in my HOSTS file that is causing random redirets when using any search engine on any browser (specifically Safari, IE, and FF).
I did some further searching and found that HOSTS file optimizers and hijack removers do exist. However, I dont want to use some cheap ass program that does more harm than good so here is my question:
Can anyone recommend such a program or somewhere that I can get a clean HOSTS file?

BTW, im using Xp SP3

A:HOSTS File Cleaner or a Clean HOSTS file?

somewhere that I can get a clean HOSTS file?Take a look here: http://www.bleepingcomputer.com/forums/t/123980/mvps-hosts-file-update/

Read other 1 answers
RELEVANCY SCORE 57.6

Sometimes my avg shows windows/system32/drivers/etc/hosts as a "changed" file. It has done this 3 times now. However, it was not 3 scans in a row, there were completely clean scans between them. I have scanned with Adaware and Spybot S&D, both scans came up clean. I followed the steps listed on these forums and have gotten a HijackThis log file. Any help would be very much appreciated. Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:09:56 PM, on 2/27/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16608)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\CTHELPER.EXEC:\Program Files\Logitech\G-series Software\LGDCore.exeC:\Program Files\Logit... Read more

A:Avg Shows Windows/system32/drivers/etc/hosts As Changed

Please delete this post, I have fixed the problem.

Thanks.

Read other 2 answers
RELEVANCY SCORE 57.6

My computer has been having problems lately. I couldn't figure it out and then I saw this forum about "host" change (c:\\WINDOWS\SYSTEM32\DRIVERS\etc\HOSTS CHANGED) in AVG and realized I have the same thing! If it is a trojan of some sort, I have no clue on how to fix it and realize I will need guidance just as another member was guided through it to fix the problem. I have a HIJACK THIS log to share and would love some help to resolve this problem. I am pretty sure that if it is a trojan of some sort that is responsible for slowing my computer and such, it is probably because I was using BITLORD and most likely downloaded some corrupt file or something. So far I have removed mostly all of my files from my computer, I have removed programs and defrag'd my pc... I scanned it with Norton, AVG and SPYSWEEPER as well as SpyBot and Hijack... AVG picked up the host change thing and my Norton keeps telling me a recent attack to my computer was blocked. I don't know if that message keeps popping up because I have AVG and Norton or if is this possible trojan or what. Here is my hijack this log... please help!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:09:05 AM, on 10/4/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services... Read more

A:My Avg Found C:\\windows\system32\drivers\etc\hosts Changed

Hello jazzyul23, It is normal that AVG shows that files, the MBR or Boot record to have changed. These are done during normal maintainance, when you or windows updates files or have had to correct errors on the drive. The only time that you should worry is if they also show as infected. To get AVG to quit showing them as changed, open the AVG Test Center, click the F3 key on your keyboard and tell it to accept the changes. If it still shows something as changed after this.. delete the file named AVG7QT.DAT in C:\ and AVG will rebuild it the next time it is run. General system maintenance can change the Hosts file even when it isn't apparent by visual inspection. AVG uses a checksum to compare a file before and after and a minor change or correct to the file would have caused it to appear changed.Lets check your HOSTS file. It's located at c:\windows\system32\drivers\etc\hosts. You can open it up in Notepad. If it's just some lines on top with a # in front of it and followed by 127.0.0.1 localhost, then you don't need to post it;however, if there are others following 127.0.0.1 localhost, you may have to fix it. Post it here if that's the case.*******************************************I don't know if that message keeps popping up because I have AVG and Norton or if is this possible trojan or what.I (as well as MicroSoft, McAfee and Symantec) recommend that you DO NOT have more than one anti virus product installed and running on your computer at ... Read more

Read other 18 answers
RELEVANCY SCORE 57.6

Hello. I am trying to use the hosts file. However both pings and web addresses still bypass the hosts file. I noticed that there is another file in the C:\Windows\System32\drivers\etc directory called 'hosts.original'. When ever I delete this file, it reappears seconds later. I have made sure that the hosts file is properly formed, using tabs and returns. Please advice. I have tried disabling AV and security. The programs that might be interfering: Kaspersky 2013 ,Malwarebyts, comodo firewall... Thank you!

A:Hosts file ignored and replaced with hosts.original

Are you using a HOSTS File Editor? Or just Notepad?

In any case the first thing to do is copy your original HOSTS file and rename it to HOSTS.old then you can mess about with your new HOSTS file.

The HOSTS file only blocks domain names and not ip addresses so if you use an ip address to connect the connection will succeed.

Comodo Firewall won't monitor changes to your hosts file but other security software could have been configured to block changes. You'd need to dig about in the settings.

You need admin rights in Noepad to edit the hosts file.

Read other 8 answers
RELEVANCY SCORE 56.4

Hi, my AVG anti-virus says that the status of "C:\WINDOWS\system32\drivers\etc\hosts" is 'changed', should i be worried and if so how do i fix it?ThanksDeckard's System Scanner v20071014.68Extra logfile - please post this as an attachment with your post.---------------------------------------------------------------------------------- System Information ----------------------------------------------------------Microsoft Windows XP Professional (build 2600) SP 2.0Architecture: X86; Language: EnglishCPU 0: Intel Pentium III processorPercentage of Memory in Use: 43%Physical Memory (total/avail): 575.54 MiB / 325.61 MiBPagefile Memory (total/avail): 1407.72 MiB / 1178 MiBVirtual Memory (total/avail): 2047.88 MiB / 1942.52 MiBA: is Removable (No Media)C: is Fixed (FAT32) - 12.11 GiB total, 2.27 GiB free. D: is CDROM (No Media)E: is Fixed (FAT32) - 38.33 GiB total, 17.28 GiB free. F: is CDROM (No Media)\\.\PHYSICALDRIVE1 - ExcelStor Technology J340 - 38.34 GiB - 1 partition \PARTITION0 (bootable) - Unknown - 38.34 GiB - E:\\.\PHYSICALDRIVE0 - FUJITSU MPD3130AT - 12.13 GiB - 1 partition \PARTITION0 (bootable) - Unknown - 12.13 GiB - C:-- Security Center -------------------------------------------------------------AUOptions is set to notify before download.Windows Internal Firewall is enabled.AV: AVG 7.5.524 v7.5.524 (Grisoft)[HKLM\System\CurrentControlSet\Services\SharedAccess\Param... Read more

A:Avg Anti Virus Found C:\windows\system32 \drivers\etc\ Hosts Changed How Do I Fix It?

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you.
That frequently comes up in scans from AVG and does not usually indicate malware.

I don't see any indication of malware in your log. As long as you are not experiencing problems I don't think you have anything to worry about.

Read other 3 answers
RELEVANCY SCORE 56.4

Hi, my AVG anti-virus says that the status of "C:\WINDOWS\system32\drivers\etc\hosts" is 'changed', should i be worried and if so how do i fix it?

Thanks.

A:Avg Anti Virus Found C:\windows\system32 \drivers\etc\ Hosts Changed.

Something nasty may have changed it. Do the following to confirm.Read this: Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computer Then post a Hijack This log here: HijackThis Logs and Analysis

Read other 3 answers
RELEVANCY SCORE 56

I've got a browser search redirect imbedded somewhere in my hosts configuration but can't find the file to edit it out and hijackthis cannot fix it. The c:/windows/system32/etc/hosts is merely a sample and it's not buried in the registry. Where is the file that contains this rubbish?

Hosts: 64.27.9.109 www.google.com.
Hosts: 64.27.9.109 google.com.
Hosts: 64.27.9.109 google.com.au.
Hosts: 64.27.9.109 www.google.com.au.
... many more

A:Windows 7 hosts file

Copy and paste these lines in Note [email protected] onpushd\windows\system32\drivers\etcattrib -h -s -r hostsecho 127.0.0.1 localhost>HOSTSattrib +r +h +s hostspopdipconfig /releaseipconfig /renewipconfig /flushdnsnetsh winsock reset allnetsh int ip reset allshutdown -r -t 1del %0Save as flush.bat to your desktop. Right click on the flush.bat file to run it as Administrator. Your computer will reboot itself. If that doesn't work, then post a new topic in this forum --> Am I infected? What do I do? http://www.bleepingcomputer.com/forums/forum103.html

Read other 4 answers
RELEVANCY SCORE 56

I updated the Windows\System32\drivers\etc\hosts file to include static ip addresses of computers on my local network; just like I do it in Vista and XP. But now I tried to access the computers by name, it complains that host 'xyz' cannot be resolved. Why?

Simon

A:how to set etc/hosts file in windows 7

Maybe you have Bonjour service on your pc? Check for mdnsresponder.exe in task manager.

Are you able to access the remote pcs by ip address?

make sure that

127.0.0.1 localhost

it the first entry in the hosts file. Must be first.

Read other 9 answers
RELEVANCY SCORE 55.6

Hi, my AVG anti-virus says that the status of "C:\WINDOWS\system32\drivers\etc\hosts" is 'changed', should i be worried and if so how do i fix it?ThanksLogfile of HijackThis v1.99.1Scan saved at 20:21:06, on 31/01/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\WINDOWS\system32\Ati2evxx.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\WINDOWS\sy... Read more

A:Avg Anti Virus Found C:\windows\system32 \drivers\etc\ Hosts Changed., What Do I Do, Is This A Problem...

Hello Phil, my name is David, welcome to Bleeping Computer!My first remark is to say that yes, unfortunately you are infected. To be more specific, from the Hijackthis log you posted I can see you are infected with Sdbot trojans/worms, which are capable of backdoor activity. To be brief, due to the status of some of the files you have on your computer, I strongly recommend that you do the following immediately. Disconnect the infected computer from the internet until the computer can be cleaned. From a clean computer, change your online passwords-- for email, for banks, eBay, forums etc.... Do not change passwords or do any transactions while using the infected computer because the attacker may get the new passwords and transaction information. I've research the entries, and found this information, in case you find it useful:Netverchk.exe is Trojan/Backdoor. It has the ability to change the hosts file.So, that's the first thing, I recommend you change your passwords.Here are two useful links, in case you wish to read more on the infection you have:http://fileinfo.prevx.com/spyware/qqe7ee46...VERCHK.EXE.htmlOk, now onto the removal, please follow these instructions exactly as posted, it's important. Also it is a good idea to print off these instructions. There is a possibility some of the instructions will need to be carried out where internet access is not available. It is important that you complete the instructions in the right order, and that you don't miss out any ste... Read more

Read other 16 answers
RELEVANCY SCORE 55.6

Hi, my AVG anti-virus says that the status of "C:\WINDOWS\system32\drivers\etc\hosts" is 'changed', should i be worried and if so how do i fix it?ThanksLogfile of Trend Micro HijackThis v2.0.2Scan saved at 10:25:39 a.m., on 5/11/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16544)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\WINDOWS\system32\HPZipm12.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\SOUNDMAN.EXEC:\PROGRA~1\Grisoft\AVG7\avgcc.exeC:\Program Files\HP\HP Software Update\HP... Read more

A:Avg Anti Virus Found C:\windows\system32 \drivers\etc\ Hosts Changed., What Do I Do, Is This A Problem...

Hello there and welcome to Bleeping Computer's security forum.My name is David, I will be helping you with your log today.Your Hijackthis log is clean, but I hope the following quote from the AVG website will help:http://forum.grisoft.cz/freeforum/read.php...6,backpage=,sv=It is normal that AVG shows that files, the MBR or Boot record to have changed. These are done during normal maintainance, when you or windows updates files or have had to correct errors on the drive. The only time that you should worry is if they also show as infected. To get AVG to quit showing them as changed, open the AVG Test Center, click the F3 key on your keyboard and tell it to accept the changes. If it still shows something as changed after this.. delete the file named AVG7QT.DAT in the %ALLUSERSPROFILE%\Application Data\avg7\ folder and AVG will rebuild it the next time it is run. The %ALLUSERSPROFILE% is different for each version of Windows. The following are the typical locations for XP and Win9x XP - C:\Documents and Settings\All Users\Application Data\avg7 Win9x -C:\Windows\All Users\Application Data\avg7

Read other 3 answers
RELEVANCY SCORE 55.2

in my windows HOSTS file, I added
127.0.0.1 abc.com
and it works fine for me.

How can I setup so that I can use [anystring].abc.com?

Thanks,
Sachin

A:windows HOSTS file setup

You would have to list each one. No wildcards will work.

Read other 2 answers
RELEVANCY SCORE 55.2

Hello,
I have been experiencing problems with the Windows Firewall Constructor for months. I finally googled how to remove the problem and found your website (http://www.bleepingcomputer.com/virus-removal/remove-windows-firewall-constructor) I followed all the steps successfully until reaching step 22. When I click on the link "hosts-perm.bat Download Link" and click "run" an error window comes up that shows the url/location and then simply says "unspecified error" so then when I click on "save and run" its appears to work as the small black window opens and then quickly goes away as the directions says it will do. But no icon appears on the desktop as the directions says will happen. I continued onto step 23 and deleted the HOSTS file but when I right click on the link for Windows 7 HOSTS File Download and "Save Target As" it does not allow me to save under "C:\Windows\System32\Drivers\etc" an error comes up saying "You don't have permission to save in the location. Contact the administrator to obtaion permission" and asks if I'd like to save it to a different folder. I am logged into an administrator account - its the only account I have on the computer. Please tell me what I need to do to continue fixing this issue.
 
Thanks!
Angelica

A:Windows 7 HOSTS File Download

TRy the Fix It button. To do it automatically.Reset the HOSTS fileAs this infection also changes your Windows HOSTS file, we want to replace this file with the default version for your operating system.Some types of malware will alter the HOSTS file as part of its infection. Please follow the instructions provided in How do I reset the hosts file back to the default?To reset the hosts file automatically,go [url="http://support.microsoft.com/kb/972034"]HERE[/url] click the button.  Then just follow the prompts in the Fix it wizard.ORClick Run in the File Download dialog box or save MicrosoftFixit50267.msi to your Desktop and double-click on it to run. Then just follow the prompts in the Fix it wizard.

Read other 1 answers
RELEVANCY SCORE 55.2

Hello, I am new to this forum. I have a laptop that I think is still infected with some sort of malware. AVG has found (and I think removed) the following:Trojan horse SHeur.AZZX in C:\Documents and Settings\Owner.laptop\Local Settings\Temp\comsvr32.exe.bakTrojan horse Generic8.ACMU in C:\Documents and Settings\Owner.laptop\Local Settings\Temp\laf1.exeTrojan horse Dropper.Agent.HHK in C:\Program Files\tmp0.exeTrojan horse Dropper.Agent.HHK in C:\Program Files\tmp1.exeTrojan horse Dropper.Agent.HHK in C:\Program Files\tmp2.exeTrojan horse Dropper.Agent.HHK in C:\Program Files\tmp3.exeTrojan horse Downloader.Adload.J in C:\WINDOWS\altvxvm.dllTrojan horse Downloader.Zlob.ACS in C:\WINDOWS\bokpkov.dllTrojan horse SHeur.AZZX in C:\WINDOWS\cpodedcd.exeTrojan horse Downloader.Zlob.AAQ in C:\WINDOWS\drnpfdxwgv.dllTrojan horse Downloader.Zlob.SE in C:\WINDOWS\etlrlws.dllTrojan horse Downloader.Zlob.SR in C:\WINDOWS\fmsxwqs.exeTrojan horse Downloader.Agent.ADPL in C:\WINDOWS\Installer\{6165e5e8-16f6-4670-89f4-5ee83f1e77ac}\WinSrv.dllTrojan horse Dropper.Agent.HHL in C:\WINDOWS\Installer\{9ee01140-4ce8-4ec8-ac27-ac56b5e0cd7d}\zip.dllNow when I run AVG, it finds a change in C:\windows\system32 \drivers\etc... Read more

A:Laptop With Avg Anti Virus Found A Change In C:\windows\system32 \drivers\etc\hosts Changed, How Do I...

Hi,I see you have Viewpoint installed...Viewpoint Manager is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything "bad". This will change from what we know in 2006 read this article: http://www.clickz.com/news/article.php/3561546I suggest you remove the program now. Go to Start > Settings > Control Panel > Add/Remove Programs and remove the following programs if present.ViewpointViewpoint ManagerViewpoint Media Playerthen, * Please download Malwarebytes' Anti-Malware from Here or HereDouble Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply along with a fresh HijackThis log.Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with ... Read more

Read other 4 answers
RELEVANCY SCORE 55.2

Is there any program that can move drivers from Windows.old to Windows?

Read other answers
RELEVANCY SCORE 54.8

Hello everybody! I am looking for information about how to protect the hosts file in windows vista... any ideas?

I am trying to re-enforce my security with layers...

so far I have

antivirus antivir
superantispyware
malwarebytes
threatfire
spywareblaster
winpatrol
comodo firewall

is these too much? am I over reacting?
thanks for any piece of advice
 

A:Solved: windows vista hosts file

Webroot Spy Sweeper has a sheild that protects the hosts file.
 

Read other 2 answers
RELEVANCY SCORE 54.8

I can't find the hosts file in the usual drivers/etc location on Vista Business. In fact, "etc" is missing from the computer entirely. Where has it gone?

Tried searching the forums for a solution, BTW, but search isn't working currently.

A:[SOLVED] Can't find Windows hosts file

Hi, I don't think search in Vista has ever worked correctly. What are you trying to do? Playing with the Hosts file can cause you to not be able to access internet, so be careful. You do know it is a hidden file by default. You will need to go to folder options and enable "show hidden files and folders".

Read other 6 answers
RELEVANCY SCORE 54.8

Hi there, hope you can help. After contracting the security shield 2011 last night, I have followed BC's uninstall guide to remove Security Shield from my computer.All went smoothingly well until we got to deleting the hosts file.After deleting the hosts file, we clicked onto the windows 7 hosts file download link, which prompted us to save target asbut when we go to locate the etcto load the new hosts it doesnt exist.but we can locate the etc when not trying to download the link.is the hosts necessary? and if so how do I load the new hosts so that the removal of the virus has been completed?thanks in advanceRegards Loopyluu

A:unable to download windows 7 hosts file

Please download SystemLook from one of the links below and save it to your Desktop.Download Mirror #1Download Mirror #264-bit users go HEREDouble-click SystemLook.exe to run it.Vista\Win 7 users:: Right click on SystemLook.exe, click Run As AdministratorCopy the content of the following box into the main textfield:

:dir
C:\WINDOWS\SYSTEM32\DRIVERS\ETC

Click the Look button to start the scan.When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.Note: The log can also be found on your Desktop entitled SystemLook.txt

Read other 7 answers
RELEVANCY SCORE 54

I know the title is a little misleading, I do have another problem with opening an email but this is the issue that needs to be addressed.
 
A work computer presented this message when trying to open Internet Explorer. 
 
"1 or more parts of this message could not be displayed.  
there was an error opening this message there is not enough memory.
file download
do you want to save this file
google_com.htm"
 
Google was no help.  I put 2 flash drives into the computer to access some info and later took them home and put one of them in my home computer.  Now both computers are infected (and maybe 4 more at work).  I am unable to access the hosts file (which I have modified) or download any possible software tools like tdsskiller,rkill, combofix or adwcleaner.  I am also unable to open most of the administrative tools.  Both computers are running Windows XP.  I would greatly appreciate any suggestions.
 
Urge

A:can't open email, windows utilities or hosts file

Hi -
I sent you a message on how to reset Hosts file, but this is much worse -
 
Please follow the instructions in the Malware Removal and Log Section Preparation Guide starting at Step 6.
If you cannot complete a step, then skip it and continue with the next.
In Step 6 there are instructions for downloading and running DDS which will create two logs. Post both logs.
When you have done that, Copy and Paste your logs in the Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT here, for assistance by the Malware Response Team.
Start a new topic, give it a relevant title and post your log(s) along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own.
If you cannot produce any of the required logs then still start the new topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happened when you tried to create them. A member of the Malware Removal Team will walk you through, step by step, on how to clean your computer.
After doing this, please reply back in this thread with a link to the new topic so we can close this one, to prevent others answering incorrectly.
 
Thank You -

Read other 3 answers
RELEVANCY SCORE 54

When I download a pdf file (A billing statement in this case), I would like to select "Save As" and be able to select the folder directly from one of the folders shown in Quick Access that is shown in File Explorer without having to rummage through all the folders on my three drives. Right now, "Save As" causes the folder selection to start with My PC. Is there an easy way for the list of folders in Quick Access to be displayed when I select "Save As" to save the file? Starting in My PC makes me go through the mess of finding the folder in which I want to save the file.

Thanks for any help.
Keith

A:Saving a file to a folder listed in "Quick Access"

Hi keithet,

You are able to change the default output locations for saving files, but I'm not sure if you can do what you're trying to do.
How to change your default save locations on Windows 10

I, too, hate navigating through the Explorer Tree, just to find a single folder. What I have found to be much easier is to set up shortcuts, which it sounds like that's what you've done along your Taskbar. From that point I just download everything to the Desktop and use the Drag & Drop method. Using third party programs, such as Folders Popup, makes it even easier.

I do hope there is a way to do what you're asking though, as that would be a nice alternative.
Good luck,
b1rd

Read other 0 answers
RELEVANCY SCORE 53.6

I'm having a problem saving pictures to my personal folder with Windows 7. I never had a problem with Vista solftware. I was given options as to where I wanted to save the pictures. I'm not able to do this with my new computer since the name of the folder doesn't come up.
 

A:Solved: Saving pictures to my personal folder on Windows 7

Read other 8 answers
RELEVANCY SCORE 53.6

My laptop got the Security Master AV Virus. I did the virus removal steps outlined on Bleeping Computer. Everything went smoothly until Step 18, which is deleting the Windows HOSTS File. I was able to download the hostsperm.bat file, however I'm not sure which HOSTS file to delete. In the designated folder (under the Drivers folder), I don't have a file named simply HOSTS. I have files named lmhosts.sam, networks, protocol, and services. I wasn't sure if the lmhosts.sam file was the one I should delete so I haven't yet. I tried to download the file that corresponds to Vista in Step 19 but I kept getting a message saying I didn't have administrator access. I saved the file instead to the desktop and then copied and pasted and that seemed to work. However, I did not delete any other host file and I'm not sure if this is a problem.

I still think the virus is on my laptop, though I don't have the constant popups anymore. I believe this because when I open Windows Security Center, it says "Security Master AV is on but is reporting its status to Windows Security Center in a format that is no longer supported." I'm not sure if this is because I did not finish the steps or what. My current antivirus (Avira) is also not completely working. AntiVir Guard's status says "Service Stopped" and there is no start link. So I know my computer is not fully being protected. I don't know if I need to uninstall and reinstall the antivir... Read more

A:Security Master AV Virus - Windows HOSTS File and other questions

Hello jax1221, I too have the same questions. I only saw hosts.ics or imhosts.sam. but if i uncheck hide system folders then i can see a file simply named hosts as a system file. Maybe somebody could clarify this is the correct file to be deleting?

Read other 1 answers
RELEVANCY SCORE 53.2

Is it possible to archive / save all of my current windows 7 evaluation hardware drivers prior to doing the clean install of full 7 ultimate?

Is there another method for Achieving the same goal?

Thank you for your support.....

A:Saving Current Drivers with Windows Easy Transfer

I've ready that if you save the contents of \Windows\System32\DriverStore\FileRepository off to USB, you can later point the Driver Update function in Device Manager to that saved folder and it will find the drivers and reinstall all of them.

But ... I've not tested this and confirmed it works.

Read other 2 answers
RELEVANCY SCORE 53.2

My computer has been running slower lately. I found this forum and read about someone else having a similar problem, but not exactly here. In the log from the link I posted, SifuMike, posted this:Lets check your HOSTS file. It's located at c:\windows\system32\drivers\etc\hosts. You can open it up in Notepad. If it's just some lines on top with a # in front of it and followed by 127.0.0.1 localhost, then you don't need to post it;however, if there are others following 127.0.0.1 localhost, you may have to fix it. Post it here if that's the case.I opened up my HOSTS file at that location and there were other lines following 127.0.0.1 localhost. This is what was in there:# Copyright ? 1993-1999 Microsoft Corp.# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.# This file contains the mappings of IP addresses to host names. Each# entry should be kept on an individual line. The IP address should# be placed in the first column followed by the corresponding host name.# The IP address and the host name should be separated by at least one# space.# Additionally, comments (such as these) may be inserted on individual# lines or following the machine name denoted by a '#' symbol.# For example:#102.54.94.97 rhino.acme.com # source server #38.25.63.10 x.acme.com # x client host 127.0.0.1 localhost 127.0.0.1 bin.errorprotector.com 127.0.0.1 br.errorsafe.com 127.0.0.1 br.winantivirus.com 127.0.0.1 br.winfixer.com 127.0.0.1 cdn.drivecleaner.com 127.0.0.1 cdn.errorsafe.com 127.0... Read more

A:Avg Free Edition Scan: Found C:\windows\system32\drivers\etc\hosts And C:\windows\system32...

The entries you see below the local host are really BAD sites which are being redirected back to nowhere (your computer), so they can't call out. I don't know what put those entries in, quite possibly AVG or some other application you've used. They're a good thing. But ...In some computers, mine included, if a large hosts file is used, the DNS service has to be disabled. Otherwise the computer can get very, very slow for the internet access.More and better details herehttp://www.mvps.org/winhelp2002/hosts.htmand a quote:Editors Note: in most cases a large HOSTS file (over 135 kb) tends to slow down the machine. This only occurs in W2000/XP/Vista. Windows 98 and ME are not affected.To resolve this issue (manually) open the "Services Editor"Start | Run (type) "services.msc" (no quotes)Scroll down to "DNS Client", Right-click and select: PropertiesClick the drop-down arrow for "Startup type"Select: Manual, or Disabled (recommended) click Apply/Ok and restartrestart = REBOOT is a must. You can also stop and then disable the DNS service from Control Panel.See about the middle of that writeup. If I were you, I'd read the whole article. The thing that puzzles me a bit is that your hosts file isn't all that long and it sure is missing a lot of other very bad things.

Read other 5 answers
RELEVANCY SCORE 52.8

Hi,
I can't open my hosts file. i want to block websites. when i right click on the hosts file to run as administrator i get . I cant open windows defender. When i click on it i get error message
i can't install microsoft essentials. this just happened recently when i had a virus or malware that's removed now.

A:error messages with windows defender, hosts file & microsoft essential

This is the preferred way to post screen shots.

By Brink:
Screenshots and Files - Upload and Post in Seven Forums

Read other 9 answers
RELEVANCY SCORE 52.4

Since yesterday when I send a message in Outlook Express it does not record a copy in Sent Items. The option to do so is checked off in tools with the send tab accessed.

I switched from dial up to DSL yesterday and that is when this started.
 

A:Saving Copies Of Sent Messages In Sent Items Folder In Outlook Express In Windows XP

Open Outlook Express - Click on Tools - Options - Send - if there is a check mark in the "save a copy of sent emails in Sent Folder" is checked - uncheck it and then recheck it and then see if it works.

If that doesn't work, try a repair of OE by clicking on Start -Run - SFC /scannow and hit ok. Have your Xp disk handy if it asks for it.
 

Read other 1 answers
RELEVANCY SCORE 52.4

I notice that this is a new addition in an update.From what was displayed, everything seemed fine, until it reaches this part: Cannot edit the HOSTS file. * Permissions Fixed. Administrators can now edit the HOSTS file. * HOSTS file entries found: --- Strange looking URLs follows ---Should I be concerned about this? Thank you!

A:XX out of XXX HOSTS entries shown. Please review HOSTS file for further entries.

Hello,what is the operating system?What comes after this --- Strange looking URLs follows ---Please download MiniToolBox, save it to your desktop and run it. Checkmark the following checkboxes: Flush DNS Report IE Proxy Settings Reset IE Proxy Settings Report FF Proxy Settings Reset FF Proxy Settings List content of Hosts List IP configuration List Winsock Entries List last 10 Event Viewer log List Installed Programs List Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

Read other 2 answers
RELEVANCY SCORE 50.8

Hello from Steved88

Can some body explain to me the below please.

I have an Application in XP Mode. I would like to save a document to the C:\Drive in Windows 7

What do I need to do for this to happen.

I thankyou in advance
 

A:Saving A File from XP Mode to Windows 7

Read other 16 answers
RELEVANCY SCORE 50.4

I have been using various desktops with XP Pro installed for years and have never had many issues or needed to spend much time changing many system settings as my needs have been reasonably straightforward.

I use my PC with MS Office, e-mail and Internet browsing.

I have just purchased a new Desktop with Windows 7 Pro SP1 - 64 bit and have set up the system with a single user as a password protected Administrator.

I have also bought an External Hard Drive (LaCie 1TB) which I installed this morning.

There are some engineering files that I would like to be portable.

I have created a new folder on the External Drive without issue and can save Word 2007 and Excel 2007 files without problem.

I have a PDF file from a website I opened with IE10 that I would like to save to this folder but when I select 'save as' from the IE menu I receive the following message:

'You don't have permission to save in this location.
Contact the administrator to obtain permission.
Do you want to save in the 'Chris' folder instead'

I assumed that I had logged on as the administrator - which may not be the best practice.

I have searched the web and this seems to be a common issue with Windows 7 but so far I have not found a fix that I have understood.

I am currently running Norton Anti-virus but don't see why this should be an issue.

Is there a simple fix?

Thanks

A:File saving problem with new Windows 7 installation

Norton bloatware could be responsible as removing it solves many problems we see here. I notice you also have AVG which is not recommended by anyone here since it bloated up years ago. For best performance with least problems I would use Microsoft Security Essentials with the Win7 firewall.

Make sure the external HD also has all permissions ticked on its Security tab for your Admin Account. You may also need a setting changed in IE10 Options Security tab.

Read other 1 answers
RELEVANCY SCORE 50.4

Hi,

I'm encountering a serious and strange problem with my notebook ASUS F3E, Windows 7 Pro x64 with SSD disk.
I have recently performed a clean operating system install. Every hardware driver installed correctly and automatically without any problems and everything is working fine except one problem...
If I use wifi connection and try to save files to network folders I don't have any problems, but if I try to do the same thing with cable connection, musch faster, as soon as I click "save" on browser (any) or click paste with explorer, windows suddenly freezes and I have to force switch off.

I have tried these so far:

- save or copy/paste file while using Safe Mode
- save or copy/paste file after clean boot
- disable and uninstall antivirus software
- update LAN card drivers (Atheros L1 Gigabit Ethernet 10/100/1000Base-T - driver v. 2.4.7.172)
- try different network destinations: different computers, Mac, NAS
- install all windows updates

I cannot find a solution to this and I'm surely ruining my notebook disk...

Could you help me please to find a solution or a better method to discover problem's origin?
Thank you for your support

Ciao

Karina

A:Windows freezes saving file over network

I don't use "copy/paste" to move or copy files from computer to computer so I'm not sure exactly what your doing (my reading comprehension skills are weak).

Are you trying to move or copy files to other computers on your home network - or are you trying to download some file off a website?

If you are moving/copying on your home network, can you open windows file explorer (not internet explorer) go to the network icon, expand that to see the other computer and move/copy your files directly from your computer to the networked computer (usually just click on the file and drag to the other location).

If you are trying to download a file off the internet, can you click on the file's download button and then do you get a popup box for "Save or Save As"? You could try downloading a file from this tutorial to see what happens (cancel or delete it once you see what happens) Folder View Settings - Reset All to Default[2]=File Folder Settings

Read other 9 answers
RELEVANCY SCORE 50.4

I transferd all of my music files from my old laptop whih is a toshiba windows vista. Most of the files have the artist, album and genre. Howvere, when i view them on my new laptop a lenovo ideapad iwndows 7, it isn't showing the properties for most of them...some yes...but very few. i just dont get it. I tried t save to a hard drive and then save to the new comp and to save to a flash drive and upload...same result both ways. I dont want to have to go through all 2000+ musc files and reenter all the properties....HELP!!
 

A:Music File Properties not saving from Windows Vista Comp to Windows 7

Read other 9 answers
RELEVANCY SCORE 50.4

Mcafee found this as a PUP.I learned my lesson once before about messing with system32 files so don't wanna remove unless told to by you guys.

A:system32\drivers\etc\hosts

Bump

Read other 6 answers