Results 1 to 7 of 7

Thread: SB 1.6 deletes host file without a backup.

  1. #1
    Junior Member
    Join Date
    Feb 2007
    Posts
    25

    Default SB 1.6 deletes host file without a backup.

    Hello,
    First I'd like to criticize the new version of SB 1.6.After I installed it and trust the SB to took care of my host file and protect it, I made a big mistake because now my host file is totally new , completely wiped out by SB.
    This is bad.I lost very important information in my previous host file.And I do not see any backup made by SB of the previous host file.

    So guys if you could add an information what is going to happen if an user trust SB to protect his host file it would be better.
    Thanks in advance.
    Last edited by skoman; 2008-07-16 at 23:14.

  2. #2
    Senior Member
    Join Date
    Oct 2005
    Location
    Los Angeles
    Posts
    219

    Default

    very interesting
    what was your host file MVPS- HPHOSTS-other?
    usually spybot just appends to the end
    this does need looking at
    the MVPS installer will remove SPYBOT entries
    requiring re-immunization
    never heard of it the other way around
    are you using Hoster or another host management package?
    worst case
    does your os have a restore feature?
    (but the fix may be worse that the problem)

  3. #3
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    skoman:

    I see no difference in the operation of Spybot 1.6 in the way it handles the addition of its HOSTS list to the system's HOSTS file since Spybot 1.2, except that starting with Spybot 1.5 you could add the Spybot's HOSTS file using the "Global (Hosts)" profile in the immunization facility in addition to going into Spybot » Mode » Advanced Mode » Tools » Hosts File where the facility has been for years.

    Each time you add Spybot's HOSTS file to your HOSTS file a backup is take. In fact there have been complaints recently that Spybot does no have a facility to automatically delete these backups. See the following (the last one specifically refers to Spybot 1.6):

    _____

    Is the following registry entry pointing to the proper (normal location) for the HOSTS file?

    Code:
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
    "DataBasePath"=???
    Last edited by md usa spybot fan; 2008-07-17 at 01:19.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  4. #4
    Junior Member
    Join Date
    Feb 2007
    Posts
    25

    Default

    I do not use any specific software for the host file.
    It's just regular c:\windows\system32\drivers\etc\hosts.

    Well If I only knew that SB was going to write anything in the host file during its first run, I would not let him do it.So the whole point here is not correct.SB does not only protect the host file it modifies it.

    BTW there is a backup in c:\windows\system32\drivers\etc\ but not of my original host file.
    In the backup file the only entry is
    localhost 127.0.0.1
    This file is created again by SB, it is not a backup of my missing host file.

    The the registry key is correct
    Code:
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
    "DataBasePath"=%SystemRoot%\System32\drivers\etc
    Last edited by skoman; 2008-07-17 at 01:38.

  5. #5
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    skoman:

    In my experience when Spybot adds HOSTS file information, it backs up the HOSTS file that it finds to a file named hosts.yyyymmdd-hhmmss.backup and that backup file has modified timestamp that matches the modified timestamp of the original HOSTS file.

    Then Spybot adds its information to the existing HOSTS file between comments as follows leaving the rest of the HOSTS file intact:

    Code:
    # Start of entries inserted by Spybot - Search & Destroy
    127.0.0.1	www.007guard.com
    127.0.0.1	007guard.com
    127.0.0.1	008i.com
    127.0.0.1	www.008k.com
    ...
    ...
    ...
    # End of entries inserted by Spybot - Search & Destroy
    Unless you had information between similar comments, I do not believe that it was Spybot that removed the other entries from your HOSTS file.

    What is the modified date (timestamp) on Spybot's hosts.yyyymmdd-hhmmss.backup file?

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  6. #6
    Junior Member
    Join Date
    Feb 2007
    Posts
    25

    Default

    hosts.20080716-141632.backup and there was another backup file, just exactly the same as the host file made by SB.Totally identical.So I deleted that one.

    Most of all I'm kind of sour because the information was not full at the first start of SB.As I said before it would be great if you could put a little description what SB intends to do with the hosts file - to add new entries in it .
    I thought that SB is going to encrypt the host file or just to monitor it , or something like that.
    Is there a way to make SB not mess around anymore with the hosts file?
    I looked in the options , could not find it.
    Last edited by skoman; 2008-07-18 at 13:21.

  7. #7
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    skoman:

    In the following thread Blade81 recommended adding the MVPS HOSTS file:

    To which you responded:

    Quote Originally Posted by skoman
    OK. I'll do what you advise me with securing my system.Thank you for the great help.
    I guess that you never did that.

    __________

    I asked for the modified date on the backup file so you could possibly figure out from that date what actually deleted the information in your HOSTS file. But instead of providing that information, you deleted the file.

    If you do not want Spybot to add its HOSTS file entries to your system's HOSTS file, uncheck the "Global (Hosts)" profile under Windows before you immunize.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •