TechSpot

hosts file info

By ejames82
Oct 22, 2006
  1. if i search all files and folders for hosts, what should i expect to find? my operating system is windows XP. thanks, Ed James
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 25,948   +19

    You should find one host file and one imhosts.sam file both in C:\windows\system32\drivers\etc

    In a normal hosts file if you open it in notepad, the only entry should be 127.0.0.1 localhost.

    Regards Howard :)
     
  3. Nodsu

    Nodsu TS Rookie Posts: 9,431

    \windows\system32\drivers\etc
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 25,948   +19

    Oops, thanks Nodsu, I forgot the system32 bit(corrected now) doh.

    Regards Howard :)
     
  5. jobeard

    jobeard TS Ambassador Posts: 13,449   +324

    various programs (spywareblaster included) install many lines in this file
    to defeat adware and access to other websites which are known to host trojans and virus programs. this is known as a black list defence.
    the lines will all look like

    127.0.0.1 black.listed.com ​

    anything else CAN be valid and will not have an IP of 127.0.0.1,
    but you should be the person that put it there :)

    for example, I added these to the list:
    192.168.0.1 router
    192.168.0.4 linux7​
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 25,948   +19

    That`s weird, cause I have Spyware Blaster installed and it hasn`t altered my hosts file at all.

    As far as I`m aware, Spyware Blaster works by setting killbits in the registry.

    I did say in a "normal hosts file" the only entry would be 127.0.0.1 localhost.

    Regards Howard :)
     
  7. jobeard

    jobeard TS Ambassador Posts: 13,449   +324

    mia clupa! :knock:
    Spywareblaster performs a backup of your host file --
    Spybot S&D adds the blacklist protect!
    (no coffee yet this morning! :eek: )
     
  8. ejames82

    ejames82 TS Enthusiast Topic Starter Posts: 145

    i wish i knew how to make a screenshot, you could see the exact icon. this is what i have there.
    HOSTS C:\WINDOWS\I3861KB File 2/12/2004 908PM
    LMHOSTS.SA C:\WINDOWS\I386 2KB SA_File 2/12/2004 909PM
    hosts C:\WINDOWS\system32\drivers... 1KB File 9/11/2006 424PM
    lmhosts.sam C:\WINDOWS\system32\drivers... 4KB SAM File 2/12/2004 909 PM

    i have only had this computer for 2 months. the only entry that occured on my watch was 9/11/2006, all other entries took place when my neighbor owned it. both he and his wife are not the types that would intentionally make entries to the hosts file. from what i know about them, they played games with the computer. they didn't even know how to make online purchases. my guess is that any entries that were made while they had the computer were a bi-product of a program that they had installed. i know that the hosts file is very important and everything in there must be legit. could you experts tell me if these items are legit, if not, how could i find out for myself? thanks for the replies from howard h, nodsu, and jobeard. Ed James
     
  9. jobeard

    jobeard TS Ambassador Posts: 13,449   +324

    these are the COPIES
    used to create these
    strip the host file to one line 127.0.0.1 localhost
    and EMPTY the lmosts.sam file

    then set BOTH to r/o. cd to \windows\system32\drivers\etc and
    attrib +r host lmhosts.sam​
     
  10. ejames82

    ejames82 TS Enthusiast Topic Starter Posts: 145

    jo,
    newbie here. most of what you're telling me has not sunk in. but what i think you're saying is that I386 means install.
    strip the host file to one line. do you mean make deletions? where?
    empty the lhosts.sam file. does this mean delete everything?
    i think what you mean by r/o is read only, but how do i do that?
    cd to \windows\system32\drivers\etc and attrib +r host lmhosts.sam, to be honest, i am totally lost by this quote. if you are willing to work with me, i can tell you that i haven't even begun to wear down. i'll be glad to do everything that's needed. thanks again, Ed James
     
  11. jobeard

    jobeard TS Ambassador Posts: 13,449   +324

    like to help but I'm catching a plane ... someone will gladly pick from here.
     
     
  12. ejames82

    ejames82 TS Enthusiast Topic Starter Posts: 145

    this was in my system32>drivers>etc>hosts file
    # Copyright (c) 1993-1999 Microsoft Corp.
    # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
    # This file contains the mappings of IP addresses to host names. Each
    # entry should be kept on an individual line. The IP address should
    # be placed in the first column followed by the corresponding host name.
    # The IP address and the host name should be separated by at least one
    # space.
    # Additionally, comments (such as these) may be inserted on individual
    # lines or following the machine name denoted by a '#' symbol.
    # For example:
    # 102.54.94.97 rhino.acme.com # source server
    # 38.25.63.10 x.acme.com # x client host
    127.0.0.1 localhost


    i was unable to open the system32>drivers>etc>lmhosts file, but i will continue to try. does this file look ok? thanks, Ed James
     
  13. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 25,948   +19

    That`s a normal hosts file and nothing to worry about there.

    Regards Howard :)
     
  14. ejames82

    ejames82 TS Enthusiast Topic Starter Posts: 145

    howard,
    that's the important one isn't it? the lmhost.sam in the etc file i was unable to open, i tried to open it with internet explorer and now i still can't open it and i turned the icon into internet explorer. this is about the twentieth file that i have been unable to open. i have yet to check the other two hosts files. thanks again, Ed James
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.