Join our community to see this answer! Unlock 2 Answers and 3 Comments. Andrew Hancock - VMware vExpert. See if this solution works for you by signing up for a 7 day free trial. What do I get with a subscription? With your subscription - you'll gain access to our exclusive IT community of thousands of IT pros.
We can't always guarantee that the perfect solution to your specific problem will be waiting for you. If your hosts file has been manipulated by malicious software, editing the hosts file will not remove the malicious software. You will still need to scan your system with software tools to be sure the malicious software is entirely gone. Malicious software scanning tools may also remove the malicious software and leave the bad entries in the hosts file.
The scanning tools cannot tell if entries in the hosts file were made on purpose or by malicious software so you still may need to edit the hosts file by hand if browser redirection occurs after the malicious software has been removed. Some scanning tools will report modifications to the hosts file as suspicious and allow you to review the changes and let you decide if the changes are appropriate or not and take action. A hosts file is not required for your browser to function.
If you suspect an issue with the hosts file you can rename the hosts file and test your browsing without it. Always reboot your system and test browsing after making any changes to the hosts file. To manipulate the hosts file, you must make hidden files unhidden and remove the Read Only attribute. In Explorer, navigate to the following folder:. Folder Options, View. The hosts file has no extension but some system files do and it may be helpful to also see the file extensions for all the files.
While you are adjusting folder View options, make file extensions visible. Click Tools, Folder Options, View. Now the hosts file should be visible. Make a copy of the current hosts file and name the copy appropriately so you can find it later and undo any changes if the changes do not work or things get worse.
Now you can edit the hosts file with any text editor. Be sure to save the hosts file after making any changes. You will have to decide what is appropriate for your hosts file. The default hosts file only has one entry and a lot of comments so if you suspect the hosts file is part of your issue, you can delete everything but the default entry and save the file. You should make the hosts file Read-only again when you are finished making changes. Obviously some programs or malicious software do not pay attention to the attributes of a Read-only file, but it is good practice for the hosts file to be Read-only.
If desired, reverse the Explorer changes to hide system files and extensions for known file types. This file contains the mappings of IP addresses to host names. Each entry should be kept on an individual line. The IP address should be placed in the first column followed by the corresponding host name. The IP address and the host name should be separated by at least one space. Additionally, comments such as these may be inserted on individual lines or following the machine name denoted by a ' ' symbol.
For example: The process will work for all recent Windows releases, but Windows XP has been causing the most the problems, so we will focus on it. Please note: we are assuming that the file is not crucial to the operation of Windows — deleting important system files can cause havoc. Software Patch. Is the file in use? It sounds obvious but it happens. If it is being used or open, close the file and the application that opened it. For example, if it is a Word document, close Microsoft Word.
If the file was opened in an application and subsequently closed , but the program is still running, try quitting the program. Windows will lock a file because the application hasn't yet released it.
This is not always Windows fault and can be the fault of the program. None of this is anything new. A subsequent scan with Malwarebytes removes the trojan but Malwarebytes has trouble changing the host file back to its original state. But unfortunately the hosts file has been altered and permissions changed so that you cyou are unable to edit the hosts file back to its original state. Normally, to fix your hosts file located in c:windowssystem32driversetc folder you can simply open it in notepad and delete all the entries that the trojan left behind then save the file.
Optionally, if you are using a good antivirus program it will take care of that for you.
0コメント