Page 1 of 3 123 LastLast
Results 1 to 10 of 23

Thread: ?Possible False Positive? - Redirected Host File

  1. #1
    Member
    Join Date
    Mar 2006
    Posts
    35

    Default ?Possible False Positive? - Redirected Host File

    One listed problem which was displayed in red was "Microsoft Windows.Redirected Hosts" (see below).
    However, as I use the Spybot HOST tool with each new update, I wonder if this could be a mistake or some sort of conflict? I am reluctant to allow Spybot to correct the problem. Can someone with more knowledge about this possibly advise. Thanks.

    Redirected host
    www.net-integration.net=127.0.0.1

    Redirected host
    net-integration.net=127.0.0.1

  2. #2
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    The Spybot HOSTS file is adding the following two (2) entries to the HOSTS file:

    And then the scan is detecting those entries as Redirected host entries:

    Code:
    Microsoft.Windows.RedirectedHosts: Redirected host (Redirected host, nothing done)
      net-integration.net=127.0.0.1
    
    Microsoft.Windows.RedirectedHosts: Redirected host (Redirected host, nothing done)
      www.net-integration.net=127.0.0.1
    Last edited by md usa spybot fan; 2007-05-20 at 22:31.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  3. #3
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    hi,

    yes there is a false positive. The hosts file is correct: net-integration is supposed to get blocked, since they sell Spybot S&D without license.

    The false positive is the flagging and removal of the the blocked net-integration sites. We will correct this with the next update.

    Thanks for reporting.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  4. #4
    Member
    Join Date
    Mar 2006
    Posts
    35

    Default

    Thanks for the replies. At present time I'll NOT proceed to have Spybot correct the problem and wait for the next update. Regards.

  5. #5
    Member FAUST's Avatar
    Join Date
    Jan 2007
    Posts
    53

    Default

    This is still getting detected as a problem with the 23/05/07 updates.
    What if love's intolerable pain never leaves us?
    Do we dash our bleeding hearts on the rocks of loneliness?
    And cry unto the lords above who turn away in haste?
    MY DYING BRIDE

  6. #6
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    I confirm FAUST's report:

    Code:
    --- Report generated: 2007-05-23 09:03 ---
    
    Microsoft.Windows.RedirectedHosts: Redirected host (Redirected host, nothing done)
      net-integration.net=127.0.0.1
    
    Microsoft.Windows.RedirectedHosts: Redirected host (Redirected host, nothing done)
      www.net-integration.net=127.0.0.1

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  7. #7
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,472

    Default

    I will show Yodama.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  8. #8
    Junior Member
    Join Date
    May 2006
    Posts
    18

    Default

    Hi. I don't quite understand why net-integration.net is blocked just because it possibly has an unhappy business relationship with Safer Networking. I thought restricted sites placement in IE was intended only if it was a bad site for illegal or damaging reasons, such as extreme pornography and gambling, exploits, dubious downloads etc. That site passes testing by both LinkScanner Pro and Site Advisor and therefore is not a bad site per se: I have no particular axe to grind as I'd never heard of that company before.
    If I am missing something obvious, please enlighten me.

  9. #9
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    hi,

    thanks for reporting, looks like we forgot to upload the new security.sbi
    we are going to correct this soon


    @greenhatch
    the issue with net-integration is that they actually sell Spybot S&D without having a license for that. We just found out about that recently , and before we had no reason to block the site and unblocked (security.sbi) it instead.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  10. #10
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    The false positive appears to have been corrected with the following update:
    • Detection rules: Security - !Updated base security exploit detections (8 KB) - 2007-05-24

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •