Mr Andrewson Posted February 16, 2007 Share Posted February 16, 2007 Okay, my friend is having problems with his internet, i just thought maybe we could help him out by solving his problem, he made a thread about it on this forum: http://forums.qj.net/f-hardsoftware-and-wi...tion-95713.html He says he formatted his PC and now his internet will only load certain pages, someone suggested a proxy setup but he doesn't like them, so what can solve his problem? Quote Link to comment Share on other sites More sharing options...
Sparda Posted February 16, 2007 Share Posted February 16, 2007 His computer got owned? Look in the hosts file for evidence. Quote Link to comment Share on other sites More sharing options...
Mr Andrewson Posted February 16, 2007 Author Share Posted February 16, 2007 What do you mean dude? Explain? Quote Link to comment Share on other sites More sharing options...
Sparda Posted February 16, 2007 Share Posted February 16, 2007 When a computer is compromised, it's some times the case that the attacker would stop people from going to web sites that might stop the attacker. They do this by using the hosts file to point (for example) microsoft.com at 127.0.0.1. The hosts file is located at C:WINDOWSsystem32driversetchosts. Post it's contents here if you don't mind. Quote Link to comment Share on other sites More sharing options...
Mr Andrewson Posted February 16, 2007 Author Share Posted February 16, 2007 I'll ask when he gets back, he isn't online atm. But he has done a virus check and spyware check and nothing came up, ? Quote Link to comment Share on other sites More sharing options...
Oberon Posted February 16, 2007 Share Posted February 16, 2007 The system could be completely clean, but the hosts file could still be changed. Depending on the AV software, it would just come up as having been changed, not that it has an infection. I once got hit with a virus (don't ask) and my virus scan just said that my hosts file,kernel, and a couple of other files had been "changed". Get him to check out the contents of the hosts file like Sparda suggested. Technically the only entry he needs in there is the localhost entry. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.