hosts file info

[ejames82]

if i search all files and folders for hosts, what should i expect to find? my operating system is windows XP. thanks, Ed James

 

[howard_hopkinso]

You should find one host file and one imhosts.sam file both in C:\windows\system32\drivers\etc

In a normal hosts file if you open it in notepad, the only entry should be 127.0.0.1 localhost.

Regards Howard

 

[Nodsu]

\windows\system32\drivers\etc

 

[howard_hopkinso]

Oops, thanks Nodsu, I forgot the system32 bit(corrected now) doh.

Regards Howard

 

[DelJo63]

You should find one host file and one imhosts.sam file both in C:\windows\system32\drivers\etc

In a normal hosts file if you open it in notepad, the only entry should be 127.0.0.1 localhost.

various programs (spywareblaster included) install many lines in this file
to defeat adware and access to other websites which are known to host trojans and virus programs. this is known as a black list defence.
the lines will all look like

127.0.0.1 black.listed.com​

anything else CAN be valid and will not have an IP of 127.0.0.1,
but you should be the person that put it there

for example, I added these to the list:

192.168.0.1 router
192.168.0.4 linux7​

 

[howard_hopkinso]

That`s weird, cause I have Spyware Blaster installed and it hasn`t altered my hosts file at all.

As far as I`m aware, Spyware Blaster works by setting killbits in the registry.

I did say in a "normal hosts file" the only entry would be 127.0.0.1 localhost.

Regards Howard

 

[DelJo63]

That`s weird, cause I have Spyware Blaster installed and it hasn`t altered my hosts file at all.

As far as I`m aware, Spyware Blaster works by setting killbits in the registry.

I did say in a "normal hosts file" the only entry would be 127.0.0.1 localhost.

Regards Howard

mia clupa! :knock:
Spywareblaster performs a backup of your host file --
Spybot S&D adds the blacklist protect!
(no coffee yet this morning! )

 

[ejames82]

i wish i knew how to make a screenshot, you could see the exact icon. this is what i have there.
HOSTS C:\WINDOWS\I3861KB File 2/12/2004 908PM
LMHOSTS.SA C:\WINDOWS\I386 2KB SA_File 2/12/2004 909PM
hosts C:\WINDOWS\system32\drivers... 1KB File 9/11/2006 424PM
lmhosts.sam C:\WINDOWS\system32\drivers... 4KB SAM File 2/12/2004 909 PM

i have only had this computer for 2 months. the only entry that occured on my watch was 9/11/2006, all other entries took place when my neighbor owned it. both he and his wife are not the types that would intentionally make entries to the hosts file. from what i know about them, they played games with the computer. they didn't even know how to make online purchases. my guess is that any entries that were made while they had the computer were a bi-product of a program that they had installed. i know that the hosts file is very important and everything in there must be legit. could you experts tell me if these items are legit, if not, how could i find out for myself? thanks for the replies from howard h, nodsu, and jobeard. Ed James

 

[DelJo63]

these are the COPIES

this is what i have there.
HOSTS C:\WINDOWS\I386 1KB File 2/12/2004 908PM
LMHOSTS.SA C:\WINDOWS\I386 2KB SA_File 2/12/2004 909PM

used to create these

hosts C:\WINDOWS\system32\drivers... 1KB File 9/11/2006 424PM
lmhosts.sam C:\WINDOWS\system32\drivers... 4KB SAM File 2/12/2004 909 PM

i have only had this computer for 2 months. the only entry that occured on my watch was 9/11/2006, all other entries took place when my neighbor owned it. both he and his wife are not the types that would intentionally make entries to the hosts file.

strip the host file to one line 127.0.0.1 localhost
and EMPTY the lmosts.sam file

then set BOTH to r/o. cd to \windows\system32\drivers\etc and

attrib +r host lmhosts.sam​

 

[ejames82]

jo,
newbie here. most of what you're telling me has not sunk in. but what i think you're saying is that I386 means install.
strip the host file to one line. do you mean make deletions? where?
empty the lhosts.sam file. does this mean delete everything?
i think what you mean by r/o is read only, but how do i do that?
cd to \windows\system32\drivers\etc and attrib +r host lmhosts.sam, to be honest, i am totally lost by this quote. if you are willing to work with me, i can tell you that i haven't even begun to wear down. i'll be glad to do everything that's needed. thanks again, Ed James

 

[DelJo63]

like to help but I'm catching a plane ... someone will gladly pick from here.

 

[ejames82]

this was in my system32>drivers>etc>hosts file
# Copyright (c) 1993-1999 Microsoft Corp.
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
# For example:
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost


i was unable to open the system32>drivers>etc>lmhosts file, but i will continue to try. does this file look ok? thanks, Ed James

 

[howard_hopkinso]

That`s a normal hosts file and nothing to worry about there.

Regards Howard

 

[ejames82]

howard,
that's the important one isn't it? the lmhost.sam in the etc file i was unable to open, i tried to open it with internet explorer and now i still can't open it and i turned the icon into internet explorer. this is about the twentieth file that i have been unable to open. i have yet to check the other two hosts files. thanks again, Ed James