host file hundreds of pornsites

[brnrdsdjng]

In the register I found even hundreds of strings with this kind of links.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\beautypornpost.com

Also many with "casino"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\casino-onlines.net

After a clearing of this crap, I ran an update and "immunisation" of Spybot,
I got 926 pornsites back in the reg.!
Zonemap/ domains and Zonemep esc.domains????

Plus 754 Casino's, also in Zonemap/ domains plus Zonemap/ esc. domains!!!
See what your suggestion wil change to this.


Think I found the cause.
In Windows/sys32/drivers/etc/hosts there is a list with thousands of pornsites which probably? belongs to Spybot search and destroy.

http://i830.photobucket.com/albums/zz227/h-s-stardust/Snap106_zps1ff67226.jpg




It contains something like this

127.0.0.1 localhost
# Start of entries inserted by Spybot - Search & Destroy
127.0.0.1 xxokoriq.cn
127.0.0.1 www.xxxallvideo.com
127.0.0.1 xxxallvideo.com
127.0.0.1 xxxcategories.com
127.0.0.1 xxxemailxxx.com
127.0.0.1 xxxl-cash.net
127.0.0.1 www.xxxl-cash.net
127.0.0.1 xxxmovietour.com
127.0.0.1 www.xxxmovietour.com
127.0.0.1 xxxpornmovs.com
127.0.0.1 www.xxxpornmovs.com
127.0.0.1 xxxteenfilm.com
127.0.0.1 www.xxxteenfilm.com
127.0.0.1 xxx-testen.de
127.0.0.1 www.xxx-testen.de
127.0.0.1 xxxtoolbar.com
127.0.0.1 xxxvideos.sso9523.com
127.0.0.1 www.xxxzonevideo.com
127.0.0.1 xxxzonevideo.com

[tashi]

Hello brnrdsdjng, :welcome:

127.0.0.1 localhost is a loopback on your own computer.



Think I found the cause.
In Windows/sys32/drivers/etc/hosts there is a list with thousands of pornsites which probably? belongs to Spybot search and destroy.

Home FAQ: http://www.safer-networking.org/faq/hosts-file/

Article to further explain how a HOSTS File works. :)

http://ask-leo.com/what_are_these_127001_entries_in_my_system_hosts_file.html

Hope that helps.

[Wakefield]

Hello brnrdsdjng, :welcome:

127.0.0.1 localhost is a loopback on your own computer.



Home FAQ: http://www.safer-networking.org/faq/hosts-file/

Article to further explain how a HOSTS File works. :)

http://ask-leo.com/what_are_these_127001_entries_in_my_system_hosts_file.html

Hope that helps.
So this is just a list of sites that the computer is blocked from going to by Spybot. Does this also keep sneaky redirects in hacked legitimate websites from going to malicious or attack sites?

[brnrdsdjng]

Thanks for the reply.

I know that with the Host-file redirect to your own PC 127.0.0.1 malicious sites could be blocked.
However, as we all know, the Host file has been extremely vulnerable to attackers and have been used often by malicious persons.
What you did not confirm is the legalization by spybot as a explanation for thousands of malicious porn sites.
On the internet many people wonder how these list on their PC was created en afraid that children or porn-trackers etc have infected their OS or mind.
If it's a trusted idea to implement such lists it better should be announced to clear out the confusion.

I still don't know if Zonemap/Domains or Zonemap/Esc. Domains are the good or the bad guys? Since both contain Porn sites.
Which ones have been marked as trusted or non trusted en how do I know which ones?

Immunization may as well protect such sites.
Spybot created several backups of that list.
So after you removed the registerentries Spybot rebuilds them.

[tashi]

Hi Wakefield,


So this is just a list of sites that the computer is blocked from going to by Spybot.

Yes. :)


Does this also keep sneaky redirects in hacked legitimate websites from going to malicious or attack sites?

Not if the website or domain isn't in the HOSTS File although security programs and browsers may flag a known bad site.

Useful link for anyone interested: How To Edit Your HOSTS File (http://www.howtogeek.com/howto/27350/beginner-geek-how-to-edit-your-hosts-file/)