file hosts infected with trojan may be a false-positive?

Discussion in 'ESET NOD32 Antivirus' started by fairbanks, Mar 24, 2013.

Thread Status:
Not open for further replies.
  1. fairbanks

    fairbanks Registered Member

    Joined:
    Mar 24, 2013
    Posts:
    3
    This have to be a false positive, and the only solution I see is to add the file hosts to exceptions.

    Every time I add some lines to host file, nod32 remove my hosts file.
    the name of the virus is qhosts.

    I just edit manually some lines in my hosts file and still the same, so it can´t be a virus. Apparently if the hosts file is modified eset thinks that this is a virus, is that right?
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    What exactly do you add to the hosts file?
     
  3. fairbanks

    fairbanks Registered Member

    Joined:
    Mar 24, 2013
    Posts:
    3
    I just add the host file some security forums advise, to avoid some advertising pages. As for example these ones:


    I made a backup of this host file to another location and still nod32 quarantine this file, so I have to add another exclusion for the backup.

    Is there a way to deactivate this feature in eset? I´d like to know also if there´s a way to deactivate some things to do it more lighter, since my pc doesn´t have a strong cpu and can be very slow with an antivirus installed
     
  4. Quad

    Quad Registered Member

    Joined:
    Jan 10, 2013
    Posts:
    47
    I added these entries to my HOSTS file, ESS/NOD32* didn't do anything about it, I then manually scanned the HOSTS file, nothing, clean.

    *) Tested on the following:

    NOD32 6.0.314 on Windows Vista x86
    ESS 6.0.308 on Windows 7 x86
    ESS 6.0.314 on Windows 8 x64
     
  5. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Not detected here, too. Make sure you have an up-to-date signature database installed.
     
  6. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    Last edited: Mar 27, 2013
  7. fairbanks

    fairbanks Registered Member

    Joined:
    Mar 24, 2013
    Posts:
    3
    ok, so I scanned again the file and now is fine and no virus was found. It seems that has been fixed. Thanks and Regards
     
  8. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    You're welcome for the assistance.
     
Thread Status:
Not open for further replies.