TomBrooklyn
2011-11-09, 13:32
Win XP Pro
SSD v. 1.6.2.46 Latest Detection: today: 11/9/11
While running a Spybot SD scan, is it normal that I found my hosts file has hundreds of lines of entries beginning with a reference to Spybot?
I was expecting my hosts file to have only one line in it.
I was running SSD to clean up any stray bits of malware after an apparently successful running of Kaspersky's TDSSKiller to get rid of a Google Redirect virus. And I was checking my hosts file to see if the Google Redirect virus had modified it.
A partial copy of my current hosts file, from the top, is as follows:
# Start of entries inserted by Spybot - Search & Destroy
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
etc,
etc
for hundreds more similar lines.
SSD v. 1.6.2.46 Latest Detection: today: 11/9/11
While running a Spybot SD scan, is it normal that I found my hosts file has hundreds of lines of entries beginning with a reference to Spybot?
I was expecting my hosts file to have only one line in it.
I was running SSD to clean up any stray bits of malware after an apparently successful running of Kaspersky's TDSSKiller to get rid of a Google Redirect virus. And I was checking my hosts file to see if the Google Redirect virus had modified it.
A partial copy of my current hosts file, from the top, is as follows:
# Start of entries inserted by Spybot - Search & Destroy
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
etc,
etc
for hundreds more similar lines.