PDA

View Full Version : Security issue


Stephanos G.
June 12th, 2005, 11:36 AM
i believe spybot put an entry "127.0.0.1 babe.the-killer.bz" into your hosts file as part of its immunization.
For some reason my internet connection looks to be connected to this address.
Any ideas?

Stephanos G.
June 12th, 2005, 11:37 AM
Look the spybot screenshot

Bubba
June 12th, 2005, 11:59 AM
Hey Stepanos,

From what you are describing and since babe.the-killer.bz is the first entry of Spybot's Hosts file....it's a good possibility your Hosts file needs properly modified. Would you take a look at your Hosts file and tell me if the entry 127.0.0.1 localhost is there....and if so....is it before or after 127.0.0.1 babe.the-killer.bz

Sample Hosts file with Spybot's first entry:
-{ Quote: "# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
# Start of entries inserted by Spybot - Search & Destroy
127.0.0.1 babe.the-killer.bz" }-

Stephanos G.
June 12th, 2005, 02:18 PM
127.0.0.1 localhost is not there (hosts files on spybot)
Is it the right place (spybot) to search for it?

Stephanos G.
June 12th, 2005, 02:24 PM
I understand what u mean, i have to add "127.0.0.1 localhost" above the babe.the-killer.bz line. How can i do this?

Bubba
June 12th, 2005, 02:32 PM
-{ Quote: "127.0.0.1 localhost is not there (hosts files on spybot)
" }-I would suggest you open that Spybot Hosts file in notepad to add the proper loopack entry into it's proper place.


127.0.0.1 localhost
# Start of entries inserted by Spybot - Search & Destroy
127.0.0.1 babe.the-killer.bz
127.0.0.1 babe.k-lined.com
127.0.0.1 did.i-used.cc
127.0.0.1 coolwwwsearch.com


Properly formatted Hosts file:
-{ Quote: "# This MVPS HOSTS file is a free download from: #
# http://www.mvps.org/winhelp2002/ #
# #
# Notes: the browser does not read this "#" symbol #
# You can create your own notes, after the # symbol #
# This *must* be the first line: 127.0.0.1 localhost #
# ********************************************************#
# ------------------Updated: 06-02-05---------------------#
# ********************************************************#
# Entries marked with Parasite or Trojan comments should #
# be placed in the Internet Explorer Restricted Zone. #
# http://mvps.org/winhelp2002/restricted.htm #
# #
# Entries with other comments are searchable via Google. #
# #
# Disclaimer: this file is free to use, however it is NOT #
# permitted to post on any other site without permission. #
# #
# This work is licensed under the Creative Commons #
# Attribution-NonCommercial-ShareAlike License. #
# http://creativecommons.org/licenses/by-nc-sa/2.0/ #

127.0.0.1 localhost

#start of lines added by WinHelp2002
# [Misc Add-ons][A - Z]
127.0.0.1 acestats.com
127.0.0.1 www.acestats.com" }-

Stephanos G.
June 12th, 2005, 02:55 PM
Problem fixed by downloading hosts file from http://www.mvps.org/winhelp2002/
Is it possible to slow down my pc as it is a big hosts file?

Stephanos G.
June 12th, 2005, 02:56 PM
Also the hosts file is only for IE? Not and for firefox?

Bubba
June 12th, 2005, 03:17 PM
-{ Quote: "Is it possible to slow down my pc as it is a big hosts file?" }-I'll assume 2000 or XP since you are showing Generic Host Process :-\

From the MVPS Hosts file link....Blocking Unwanted Parasites with a Hosts File (http://www.mvps.org/winhelp2002/hosts.htm)

-{ Quote: "Editors Note: in most cases a large HOSTS file (over 135 kb) tends to slow down the machine. This only occurs in W2000 and XP. Windows 98 and ME are not affected.

To resolve this issue (manually) open the "Services Editor"

Start | Run (type) "services.msc" (no quotes)
Scroll down to "DNS Client", Right-click and select: Properties
Click the drop-down arrow for "Startup type"
Select: Manual, click Apply\Ok and restart.[more info (http://www.mvps.org/winhelp2002/services.htm)]

" }-

dog
June 12th, 2005, 03:17 PM
-{ Quote: "Is it possible to slow down my pc as it is a big hosts file?" }-You have to disable your DNS Client, in NT Services.

Start -> Run -> Type services.msc

Locate DNS Client ... Stop the service ... then set it to Disable.

~WinXP instructions~

Stephanos G.
June 12th, 2005, 03:21 PM
Thanks, i have disabled it.