gails Posted January 22, 2016 ID:1014085 Share Posted January 22, 2016 Threat scan reporting hijack.host on /etc/hosts. Malware or false positive? Log and file attached. Thanks.hosts.zipscan_jan212016.txt Link to post Share on other sites More sharing options...
Staff ElPiedra Posted January 22, 2016 Staff ID:1014093 Share Posted January 22, 2016 Thank you for the report. We'll have a look & fix if necessary. Questions: You may be using the antivirus Qihoo 360 Total Security ?? Tnks! Link to post Share on other sites More sharing options...
gails Posted January 22, 2016 Author ID:1014094 Share Posted January 22, 2016 Thank you for the report. We'll have a look & fix if necessary. Questions: You may be using the antivirus Qihoo 360 Total Security ?? Tnks! No - AVG free edition. Thanks. Link to post Share on other sites More sharing options...
Staff ElPiedra Posted January 22, 2016 Staff ID:1014096 Share Posted January 22, 2016 No - AVG free edition. Thanks. Ok, the other users reporting similar cases: https://forums.malwarebytes.org/index.php?/topic/177645-hijackhost-false-positive/ Are using SpyBot S&D, you also use it? Link to post Share on other sites More sharing options...
gails Posted January 22, 2016 Author ID:1014099 Share Posted January 22, 2016 Ok, the other users reporting similar cases: https://forums.malwarebytes.org/index.php?/topic/177645-hijackhost-false-positive/Are using SpyBot S&D, you also use it? Yes. Just updated the Spybot S&D signatures and ran a custom scan on C:\WINDOWS\system32\drivers\etc. 6 identifications on the hosts file. Link to post Share on other sites More sharing options...
Zootopia3000 Posted January 22, 2016 ID:1014102 Share Posted January 22, 2016 I get same here and I'm also using Spybot hosts entries. That was my first thought that it was Spybot entries, and sure enough, Spybot wants to add 3 entries back. I'm not sure if telling Malwarebytes to 'Ignore' will mean ignoring the WHOLE hosts file. I'll leave in quarantine for now and keep on top of this recent development here at the forum. Link to post Share on other sites More sharing options...
Staff S!Ri Posted January 22, 2016 Staff ID:1014106 Share Posted January 22, 2016 Hello FP will be fixed on next update.Thank you for reporting it. Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 22, 2016 Staff ID:1014122 Share Posted January 22, 2016 Most of these should be fixed in 07 update and later. Which should be out now. Only problem is Spybot has this listed. http://whois.domaintools.com/aantivir.de aantivir.de is owned by Avira antivirus and they should not be blocking that. Link to post Share on other sites More sharing options...
Staff ElPiedra Posted January 22, 2016 Staff ID:1014136 Share Posted January 22, 2016 Please update to database v2016.01.22.08 - this has the revised rules to fix this.Thanks for reporting! Link to post Share on other sites More sharing options...
gails Posted January 22, 2016 Author ID:1014163 Share Posted January 22, 2016 v2016.01.22.08 scan came back clean. Thank you. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now