PDA

View Full Version : Spybot immunisation should only write /etc/hosts on changes



tinne
2014-01-19, 21:05
Today, immunization had some 1000 additional immunisation rules to add, so I asked the tool to add it. When confirmed, my anti virus tool claimed that someone had unauthorizedly tried to manipulate C:\Windows\System32\drivers\etc\hosts. Unfortunately I had already clicked away the Spybot window to re-run immunisation.

However, when re-run, Spybot claimed that no immunisation rules were missing, which, in my view, can mean two things

Spybot remembers the first immunisation run and therefore does not really check all immunisation items, or
(more likely) Spybot does not need to alter any hosts based rule, but saves the hosts file nevertheless.


I strongly suggest that Spybot records whether changes to /etc/hosts need to be applied and only writes them in case this is true. A read-only check and appropriate prompt would be most comfortable but luxury.

I hope forum-posts are most proper for bug reports, please forward me to the right location in case they are not.

Thank you, best wishes
Karsten