[Fixed] Odd HOSTS file immunization entries

[DarthTrader]

Starting with a clean HOSTS file ("127.0.0.1 localhost" as the only entry) SpyBot adds the following odd entries:

Line Odd Hostname
---- ------------
381 f*ckdenniss.com
382 f*cknicepics.com
409 free-f*cking-video.com
591 needf*cknow.com
710 satisf*cktion.net
1088 infospace.com/blsrch.dp.toolbar
1140 /rf104.com
1432 game4all.biz/adv/018
1433 www.game4all.biz/adv/018
1543 apps.deskwizz
1544 www.apps.deskwizz
---- --------------

These do not appear to be valid HOSTS file entries. Can they be corrected with the next update? TIA.

[PepiMK]

Hmmm interesting, will check how they got there ;)

[md usa spybot fan]

If "/rf104.com" turns out to be an ineffective entry because of the a slash (/) at the beginning of the entry, there are 78 additional entries starting with slash (/):
/75tz.com
/aavc.com
/acjp.com
/count.cc
/ebav.com
/ebaw.com
/ebch.com
/ebdv.com
/ebdw.com
/ebgo.com
/ebjp.com
/ebkb.com
/ebkn.com
/ebky.com
/eblv.com
/ebmu.com
/ebvr.com
/ecmh.com
/ecmp.com
/ecpm.com
/ecwz.com
/ecyb.com
/edhq.com
/edty.com
/eduy.com
/eeev.com
/emch.com
/farse.com
/ibmx.com
/icwb.com
/icwo.com
/icwp.com
/iddh.com
/idhh.com
/iefeadsl.com
/ifiz.com
/iguu.com
/samz.com
/saoe.com
/sbee.com
/sbjr.com
/sbnl.com
/sbnt.com
/sbvr.com
/scbm.com
/sckr.com
/scrk.com
/sdry.com
/seld.com
/sfux.com
/sheat.com
/sipo.com
/smds.com
/srib.com
/srox.com
/srsf.com
/ssaw.com
/ssby.com
/surj.com
/tbvg.com
/tdak.com
/tdko.com
/tdmy.com
/tefs.com
/tfil.com
/thko.com
/tjar.com
/tjaw.com
/tjdo.com
/tjem.com
/tjgo.com
/topx.cc
/torc.com
/wabq.com
/wabu.com
/wbkb.com
/wfix.com
/wflu.com
In addition there are 86 entries that begin with a dot (.) which is also seems unusual:
.75tz.com
.aavc.com
.acjp.com
.ads183.com
.antispyware.com
.count.cc
.ebav.com
.ebaw.com
.ebch.com
.ebdv.com
.ebdw.com
.ebgo.com
.ebjp.com
.ebkb.com
.ebkn.com
.ebky.com
.eblv.com
.ebmu.com
.ebvr.com
.ecmh.com
.ecmp.com
.ecpm.com
.ecwz.com
.ecyb.com
.edhq.com
.edty.com
.eduy.com
.eeev.com
.emch.com
.enhance.com
.farse.com
.ibmx.com
.icwb.com
.icwo.com
.icwp.com
.iddh.com
.idhh.com
.iefeadsl.com
.ifiz.com
.iguu.com
.inc-codec.com
.lop.com
.oogle.it
.rf104.com
.roar.com
.samz.com
.saoe.com
.sbee.com
.sbjr.com
.sbnl.com
.sbnt.com
.sbvr.com
.scbm.com
.sckr.com
.scrk.com
.sdry.com
.seld.com
.sfux.com
.sheat.com
.sipo.com
.smds.com
.srib.com
.srox.com
.srsf.com
.ssaw.com
.ssby.com
.surj.com
.tbvg.com
.tdak.com
.tdko.com
.tdmy.com
.tefs.com
.tfil.com
.thko.com
.tjar.com
.tjaw.com
.tjdo.com
.tjem.com
.tjgo.com
.topx.cc
.torc.com
.wabq.com
.wabu.com
.wbkb.com
.wfix.com
.wflu.com

[DarthTrader]

Weird. I'm now seeing the ones starting with dots, but not with slashes (except for /rf104.com).

[Rosenfeld]

I started with a clean hosts file. In Spybot, Tools, hosts page, clicked add Spybot Hosts. I saw the ones reported by md usa spybotfan, both looking at the hosts file in Notepad and in Spybot's hosts page.
Then I went to immunise page, with the hosts box checked, it at first showed 0 protected. I clicked immunize, and it showed all 5782 protected. Looked at the Hosts file in Notepad and in Spybot's hosts page and all the / entries had disappeared except for the /rf104.com.
The . entries remained.
That is very odd, but may explain the differences reported.

[PepiMK]

Are these added by the Hosts File section or by the immunization?

From that last post, it seems like it was fixed in Immunization, but not in the Tools section ;)

issue 32 (http://forums.spybot.info/project.php?issueid=32)

[md usa spybot fan]

I reported on the HOSTS file as added with Spybot-S&D 1.4 > Tools > HOSTS File. Here's a partial listing from Notepad:


127.0.0.1 searchmadesafe.net
127.0.0.1 quicklaunch.com
127.0.0.1 www.cashsurfers.com
127.0.0.1 .lop.com
127.0.0.1 .tjdo.com
127.0.0.1 /tjdo.com
127.0.0.1 .ebav.com
127.0.0.1 /ebav.com
127.0.0.1 .ebgo.com
127.0.0.1 /ebgo.com
127.0.0.1 .ebaw.com
127.0.0.1 /ebaw.com
127.0.0.1 .ebkb.com
127.0.0.1 /ebkb.com
127.0.0.1 .ebmu.com

[PepiMK]

Fixed :)

[md usa spybot fan]

Patrick:

Thank you.

Gruß
md usa spybot fan