Computing.Net > Forums > Windows XP > System32 hosts folder

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to get for your free account now!

System32 hosts folder

Reply to Message Icon

Name: baza999
Date: May 7, 2004 at 21:53:15 Pacific
OS: XP Pro
CPU/Ram: amd 1 gig
Comment:

Hi,i was just checking the system32 hosts folder and found a lot of entries there i feel should not be there. Can anyone tell me what all the entries are in this folder and is it safe to delete them as there are some references to porn and gay sites in there. ?? Many thanks....



Report Offensive Message For Removal

Sponsored Link
Ads by Google

Response Number 1
Name: Tufenuf
Date: May 8, 2004 at 04:54:51 Pacific
Reply:

baza999, The hosts (no extension) file located in your C:\WINNT\System32\drivers\etc folder for Windows XP comes as shown below between the lines.

____________________________________________


Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

____________________________________________


If you have downloaded some type of Spyware Removal Program it may have added those porn links so that you can't access them as a safety precaution or did you download another hosts file for protection against porn sites which are responsible for most spyware/adware/malware/hijackers entering your system? There are some viruses/trojans that add entries to AV sites/Spyware Removal Programs sites/etc. so that you can't reach any of them to fix the viruses/trojans and what you have to do is go into the hosts (no extension) file open it in Notepad and delete all entries below the 127.0.0.1 localhost.

DO NOT delete the 127.0.0.1 localhost.

Close Notepad and accept the changes when it asks, then right click the HOSTS (no extension)file, choose Properties and put a checkmark in front of Read only, click Apply/OK. This will prevent anything from altering it or writing to it.

HTH,
Tufenuf



Report Offensive Follow Up For Removal

Response Number 2
Name: Grimples
Date: May 8, 2004 at 05:34:47 Pacific
Reply:

SOrry i have to disagree with you Tufenuf. The hosts file is a VERY GOOD substitute firewall. Whatever domain name you put in there will not get access to your PC. Try it & see. Just be sure to keep a backup & copy over it if you think it has been tampered with.
Another for those who use the hosts file. Instead of directing to 127.0.0.1, redirect to 0.0.0.0. this speeds it up a bit. As Tufenuf said do not alter the 127.0.0.1 localhost.

Is Ye Alreet


Report Offensive Follow Up For Removal

Response Number 3
Name: Tufenuf
Date: May 8, 2004 at 08:28:03 Pacific
Reply:

Grimples, I agree with you 100% but maybe you misunderstood what I replied with in this paragraph of my Response.

"If you have downloaded some type of Spyware Removal Program it may have added those porn links so that you can't access them as a safety precaution or did you download another hosts file for protection against porn sites which are responsible for most spyware/adware/malware/hijackers entering your system? There are some viruses/trojans that add entries to AV sites/Spyware Removal Programs sites/etc. so that you can't reach any of them to fix the viruses/trojans and what you have to do is go into the hosts (no extension) file open it in Notepad and delete all entries below the 127.0.0.1 localhost".

I was just trying to say that anything added after the 127.0.0.1 will block access to the entries (sites) listed. I just went thru dealing with the W32.Gaobot.AFG virus/worm which added every AV site/Repair Tool site/etc. and I couldn't even run my Norton Live Update because it was blocked also by an entry in my hosts file. I finally figured it out and deleted all of the entries below 127.0.0.1 in my hosts file and was able to run Live Update again and get rid of the virus.

Tufenuf


Report Offensive Follow Up For Removal

Response Number 4
Name: chidave
Date: June 10, 2004 at 13:24:10 Pacific
Reply:

Hello,

I am having this problem with a twist. I have followed your instructions but when I reboot my PC, I get a message from my watch dog software that my HOSTS file has been altered. When I check it again, the same entries are there again. Could there be some exc. file that writes these to the HOSTS file everytime I reboot?

I have run SpyBot and some other apps but can't seem to get rid of this problem. Every few seconds, a new explorer window opens up.

Any suggestions?

Thank You

Dave S.


Report Offensive Follow Up For Removal
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: System32 hosts folder

System32 file folder www.computing.net/answers/windows-xp/system32-file-folder/96985.html

System32\Config Folder Unreadable www.computing.net/answers/windows-xp/system32config-folder-unreadable/92414.html

what's the system32\dllcache folder? www.computing.net/answers/windows-xp/whats-the-system32dllcache-folder/26018.html