Wilders Security Forums  

Go Back   Wilders Security Forums > Other Security Topics > other security issues & news
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #51  
Old June 17th, 2012, 09:04 PM
nodbaga nodbaga is offline
Infrequent Poster
 
Join Date: Jun 2012
Location: US
Posts: 8
Default Re: It is Windows Defender!

Quote:
Originally Posted by noone_particular
Forum software seems determined that google-analytics needs to be a link. Putting lines like that in a code box prevents it.
Code:
ad.doubleclick.net www.google-analytics.com
Thank you! I did try several things, but then gave up... On the subject: WD parses lines correctly i guess, because i tried 127.0.0.1 and 0.0.0.0 and some others - regardless of the IP, lines containing these exact addresses are erased. Position in the file does not matter either - they can be next to each other, or far - does not matter. Off ~100 lines in my hosts file only those two are erased, others are not affected, even doubleclick.net and google-analytics.com and such.
Quote:
Originally Posted by noone_particular
I also question WD altering a file that can contain user specified IPs without the user being asked or told. If that were my system, I'd throw WD out on the spot for that alone.
Quote:
Originally Posted by funkydude
Then I'm afraid it's time to report the issue on the MSE forums.
Latest findings. Settles the matter at least for me:
It (Windows Defender) actually has modifications of the hosts file documented in it's 'history'. You have to go through some motions to see it, but it is there. It is considered a 'Medium' level threat: SettingsModifier:Win32/PossibleHostsFileHijack. When WD modified my hosts file, it was actually 'Disinfecting' it. You can also 'Remove' it, which is replacing your hosts file with empty one.
Good intentions then... These particular addresses were probably picked because they are most commonly found on average page.

Last edited by nodbaga : June 18th, 2012 at 05:44 AM.
  #52  
Old June 17th, 2012, 09:33 PM
FanJ FanJ is offline
Updates Team
 
Join Date: Feb 2002
Posts: 1,802
Default Re: [Thread split] Hosts file et al

Quick post for nodbaga and noone_particular about parsing links on the forum:
See test sub-forum: http://www.wilderssecurity.com/showthread.php?t=326393

Back to topic now
 

Wilders Security Forums > Other Security Topics > other security issues & news « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 07:28 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums