file hosts infected with trojan may be a false-positive?

This have to be a false positive, and the only solution I see is to add the file hosts to exceptions.

Every time I add some lines to host file, nod32 remove my hosts file.
the name of the virus is qhosts.

I just edit manually some lines in my hosts file and still the same, so it can´t be a virus. Apparently if the hosts file is modified eset thinks that this is a virus, is that right?

 

What exactly do you add to the hosts file?

 

I just add the host file some security forums advise, to avoid some advertising pages. As for example these ones:

I made a backup of this host file to another location and still nod32 quarantine this file, so I have to add another exclusion for the backup.

Is there a way to deactivate this feature in eset? I´d like to know also if there´s a way to deactivate some things to do it more lighter, since my pc doesn´t have a strong cpu and can be very slow with an antivirus installed

 

I added these entries to my HOSTS file, ESS/NOD32* didn't do anything about it, I then manually scanned the HOSTS file, nothing, clean.

*) Tested on the following:

NOD32 6.0.314 on Windows Vista x86
ESS 6.0.308 on Windows 7 x86
ESS 6.0.314 on Windows 8 x64

 

Not detected here, too. Make sure you have an up-to-date signature database installed.

 

Editing your Hosts file should not be an issue as many add custom lines to the stock file.

Your Hosts file is located:
C:\Windows\System32\drivers\etc\HOSTS

Revert Hosts to default if necessary:
http://support.microsoft.com/kb/972034

See also:
You cannot modify the Hosts file or the Lmhosts file in Windows Vista and Windows 7
http://support.microsoft.com/kb/923947

 

ok, so I scanned again the file and now is fine and no virus was found. It seems that has been fixed. Thanks and Regards

 

You're welcome for the assistance.