c:\windows\system32 changed

Hi!
Eventualy i was trying to scan my windows for virus with AVG 8...the following massage appeared......
"c:\windows\system32\drivers\etc\hosts has changed". I've looked around on the internet and people with the same problem were told to use "HostsXpert" to correct the problem. However, when I do a scan with AVG again, the same problem shows up. I am nervous because I recently set up a wireless router and someone I didn't know actually logged onto my wireless network before I was able to set up the security for it. I've also recently uninstalled "spybot search and destroy" from my computer. Hopefully this additional information will be of some help.

Can anyone help me!

If you want to reset your Hosts file to the default, do the following:


* Go to C:\WINDOWS\System 32\drivers etc
* Right click on the host file and select Open.
* When prompted, choose the option to "select the program from a list" and Open with Notepad
* Remove ALLentries except the default entry for localhost: 127.0.0.1 localhost
* Close the Hosts file and save it when asked (Note: the file is saved without an extension. It is "HOSTS" not hosts.txt)



There is an example on this page of what the default Hosts file looks like.

If that is what your Hosts file looks like now, the AVG alert is advising you of the change after uninstalling SBSD.

But before I remove ALL entries except the default entry for localhost: 127.0.0.1 localhost, I am just curious about what all the websites listed in the file are for? Is it from the "HostsXpert" or did the list build up overtime from something?

"Funkytoad" (toadbee at GSF) created HostXpert for managing the Hosts file. The files in the Hosts File were added by SpyBot Search and Destroy. Essentially, a Hosts File can be used to redirect a bad site to "home" so you cannot reach the site. Some people also use the hosts file to navigate to sites (i.e., the put the IP Address in their Hosts file with the corresponding URL). To understand the Hosts file, I suggest you read Mike Burgess site here: http://www.mvps.org/winhelp2002/hosts.htm In fact, if you are going to use the Hosts file as an added layer of protection, I recommend MVPS Hosts.

Since I don't what is in your Hosts File but you said you had Spybot Search & Destroy on your computer, I expect the entries were made in your Hosts file by SBSD.

I might actually have MVPS Hosts listed in the file without knowing it because right below "127.0.0.1 localhost" it says "start of lines added by WinHelp2002" (might be from hostsxpert when i ran it earlier today). I might've already cleared out the entries from sbsd when I ran ccleaner today.

But none the less, I just want to set my host file back to default. However when I go to hit save, a window pops up and says "connot create the c:\windows\system32\drivers\etc\hosts file" "make sure that the path and filename are correct".

Yes, the lines by WinHelp2002 would be from MVPS Hosts file. It is actually an excellent addition to your security profile and I would encourage you to consider keeping it.

That said, to set your Host file back to default, please download the "Host File Reader" © Option^Explicit. It is a 65K program which will allow you to find/view/open/read/edit/restore to default settings your HOST file. Instructions are on the display screen of the program. You will want to restore to the default settings.

http://rcip.com/mitch/HostsFileReader.zip

Just unzip the file and launch the HostFileReader.exe. Select "Reset Default"