PDA

View Full Version : [Fixed] Odd HOSTS file immunization entries



DarthTrader
2007-07-26, 15:47
Starting with a clean HOSTS file ("127.0.0.1 localhost" as the only entry) SpyBot adds the following odd entries:

Line Odd Hostname
---- ------------
381 f*ckdenniss.com
382 f*cknicepics.com
409 free-f*cking-video.com
591 needf*cknow.com
710 satisf*cktion.net
1088 infospace.com/blsrch.dp.toolbar
1140 /rf104.com
1432 game4all.biz/adv/018
1433 www.game4all.biz/adv/018
1543 apps.deskwizz
1544 www.apps.deskwizz
---- --------------

These do not appear to be valid HOSTS file entries. Can they be corrected with the next update? TIA.

PepiMK
2007-07-26, 23:49
Hmmm interesting, will check how they got there ;)

md usa spybot fan
2007-07-27, 01:08
If "/rf104.com" turns out to be an ineffective entry because of the a slash (/) at the beginning of the entry, there are 78 additional entries starting with slash (/):
/75tz.com
/aavc.com
/acjp.com
/count.cc
/ebav.com
/ebaw.com
/ebch.com
/ebdv.com
/ebdw.com
/ebgo.com
/ebjp.com
/ebkb.com
/ebkn.com
/ebky.com
/eblv.com
/ebmu.com
/ebvr.com
/ecmh.com
/ecmp.com
/ecpm.com
/ecwz.com
/ecyb.com
/edhq.com
/edty.com
/eduy.com
/eeev.com
/emch.com
/farse.com
/ibmx.com
/icwb.com
/icwo.com
/icwp.com
/iddh.com
/idhh.com
/iefeadsl.com
/ifiz.com
/iguu.com
/samz.com
/saoe.com
/sbee.com
/sbjr.com
/sbnl.com
/sbnt.com
/sbvr.com
/scbm.com
/sckr.com
/scrk.com
/sdry.com
/seld.com
/sfux.com
/sheat.com
/sipo.com
/smds.com
/srib.com
/srox.com
/srsf.com
/ssaw.com
/ssby.com
/surj.com
/tbvg.com
/tdak.com
/tdko.com
/tdmy.com
/tefs.com
/tfil.com
/thko.com
/tjar.com
/tjaw.com
/tjdo.com
/tjem.com
/tjgo.com
/topx.cc
/torc.com
/wabq.com
/wabu.com
/wbkb.com
/wfix.com
/wflu.com
In addition there are 86 entries that begin with a dot (.) which is also seems unusual:
.75tz.com
.aavc.com
.acjp.com
.ads183.com
.antispyware.com
.count.cc
.ebav.com
.ebaw.com
.ebch.com
.ebdv.com
.ebdw.com
.ebgo.com
.ebjp.com
.ebkb.com
.ebkn.com
.ebky.com
.eblv.com
.ebmu.com
.ebvr.com
.ecmh.com
.ecmp.com
.ecpm.com
.ecwz.com
.ecyb.com
.edhq.com
.edty.com
.eduy.com
.eeev.com
.emch.com
.enhance.com
.farse.com
.ibmx.com
.icwb.com
.icwo.com
.icwp.com
.iddh.com
.idhh.com
.iefeadsl.com
.ifiz.com
.iguu.com
.inc-codec.com
.lop.com
.oogle.it
.rf104.com
.roar.com
.samz.com
.saoe.com
.sbee.com
.sbjr.com
.sbnl.com
.sbnt.com
.sbvr.com
.scbm.com
.sckr.com
.scrk.com
.sdry.com
.seld.com
.sfux.com
.sheat.com
.sipo.com
.smds.com
.srib.com
.srox.com
.srsf.com
.ssaw.com
.ssby.com
.surj.com
.tbvg.com
.tdak.com
.tdko.com
.tdmy.com
.tefs.com
.tfil.com
.thko.com
.tjar.com
.tjaw.com
.tjdo.com
.tjem.com
.tjgo.com
.topx.cc
.torc.com
.wabq.com
.wabu.com
.wbkb.com
.wfix.com
.wflu.com

DarthTrader
2007-07-27, 02:57
Weird. I'm now seeing the ones starting with dots, but not with slashes (except for /rf104.com).

Rosenfeld
2007-07-27, 05:07
I started with a clean hosts file. In Spybot, Tools, hosts page, clicked add Spybot Hosts. I saw the ones reported by md usa spybotfan, both looking at the hosts file in Notepad and in Spybot's hosts page.
Then I went to immunise page, with the hosts box checked, it at first showed 0 protected. I clicked immunize, and it showed all 5782 protected. Looked at the Hosts file in Notepad and in Spybot's hosts page and all the / entries had disappeared except for the /rf104.com.
The . entries remained.
That is very odd, but may explain the differences reported.

PepiMK
2007-07-27, 13:26
Are these added by the Hosts File section or by the immunization?

From that last post, it seems like it was fixed in Immunization, but not in the Tools section ;)

issue 32 (http://forums.spybot.info/project.php?issueid=32)

md usa spybot fan
2007-07-27, 16:35
I reported on the HOSTS file as added with Spybot-S&D 1.4 > Tools > HOSTS File. Here's a partial listing from Notepad:


127.0.0.1 searchmadesafe.net
127.0.0.1 quicklaunch.com
127.0.0.1 www.cashsurfers.com
127.0.0.1 .lop.com
127.0.0.1 .tjdo.com
127.0.0.1 /tjdo.com
127.0.0.1 .ebav.com
127.0.0.1 /ebav.com
127.0.0.1 .ebgo.com
127.0.0.1 /ebgo.com
127.0.0.1 .ebaw.com
127.0.0.1 /ebaw.com
127.0.0.1 .ebkb.com
127.0.0.1 /ebkb.com
127.0.0.1 .ebmu.com

PepiMK
2007-07-27, 17:24
Fixed :)

md usa spybot fan
2007-07-28, 20:03
Patrick:

Thank you.

Gruß
md usa spybot fan