how to check the HOST file

[The Texan]

hi, i have heard that there are viruses that can get into your HOST file for windows and really screw things up for you. well my question is how do you check to make sure your host file hasnt been messed with? thanx bye.

[Shrekkie]

cat /etc/hosts ?

[Und3ertak3r]

It's not just virus's that change your host file.. Adware software have been doin it for a long time

NJormaly the file will have a preamble text (not needed) and a single entry:
127.0.0.1 localhost

some of us have various ad servers listed.. this is to block anumber of unwanted advertising sites having their way with our machines..

this is a short sample of mine.. (not you can make the host file too big)

127.0.0.1 localhost
127.0.0.1 ad.doubleclick.net
127.0.0.1 doubleclick.net
127.0.0.1 m3.doubleclick.net
127.0.0.1 questionmarket.com
127.0.0.1 ads.enliven.com
127.0.0.1 ad.au.doubleclick.net
127.0.0.1 adsfac.net
127.0.0.1 ebay.doubleclick.net
127.0.0.1 101order.com
127.0.0.1 123banners.com
127.0.0.1 123found.com
127.0.0.1 180solutions.com
127.0.0.1 247media.com
127.0.0.1 24pm-affiliation.com

To check the hosts file you could write a batch file to compare the hosts file with a known good sample.. or whatever..

bTW "Cat"dun seem to be recognised by the command prompt in XPee
the file is located in C:\WINDOWS\system32\drivers\etc where C is the HDD where your WinXP OS is installed

[sec_ware]

Hi

I take it that Shrekkie was right, and you are talking about the hosts-file.
Before messing around with it, have first a look at [1] and [2] for guides
how to "block" ads.
You can check the hosts file as follows. Assuming an english windows version:
Start.Run

Type:
notepad %windir%\system32\drivers\etc\hosts

If you have a virginal setup (assuming a stand-alone PC without special settings),
the only non-commented out (#) entry should be

127.0.0.1       localhost

Cheers!


[1] http://www.dslwebserver.com/main/fr_...osts-file.html
[2] http://www.swcp.com/~manos/blockads.html

[SirDice]

Quick recap:

On *nix it's /etc/hosts
On Win9x it's %windir%\hosts.
On NT/XP/2k/2k3 it's %windir%\system32\drivers\etc\hosts.

Note the dot at the end of the filename on windows systems. It doesn't have a file extension.

[The Texan]

well thanx for all the help. one more question is there any programs that check this host file for u? i have heard that Win Patrol does, is this true? thanx bye.

[DjM]

Directly from the winpatrol web site:

Detect HOSTS file changes.

Winpatrol

Cheers:

[The Texan]

alright... thanx alot yall, talk to ya later.

[nihil]

Try Spybot Search & Destroy..................open it in "Advanced" mode. That lets you look at the Hosts file BHOs and all sorts.

There is an option to load a list of blocks into the Hosts file like Und3rtak3r has done.

Cheers