Avast WEBforum

Other => General Topics => Topic started by: Omid Farhang on April 19, 2009, 05:41:54 PM

Title: why some software such as spybot block one URL in many different place?
Post by: Omid Farhang on April 19, 2009, 05:41:54 PM
when we re-direct a URL in windows HOSTS file to 127.0.0.1, is not it mean it's blocked?
so, if it is, why SpyBot or some other software, add some URL list in restricted site and... too and slow down programs launch time? I never add those URL in any place else than HOSTS list and my programs launch fast enough and have no problem and don't feel un-secure.

can one exprt please do me a favor and explain it to me?
Thanks in advance!
Title: Re: why some software such as spybot block one URL in many different place?
Post by: DavidR on April 19, 2009, 07:03:27 PM
Possibly because it is possible to easily modify the hosts file and many malware samples modify the hosts file to block security sites.
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Lisandro on April 19, 2009, 10:00:38 PM
when we re-direct a URL in windows HOSTS file to 127.0.0.1, is not it mean it's blocked?
Yes, it loops.

so, if it is, why SpyBot or some other software, add some URL list in restricted site and... too and slow down programs launch time? I never add those URL in any place else than HOSTS list and my programs launch fast enough and have no problem and don't feel un-secure.
Can you post examples? Use hxxp:// format of the link.
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Omid Farhang on April 19, 2009, 10:02:45 PM
Possibly because it is possible to easily modify the hosts file and many malware samples modify the hosts file to block security sites.

but it's easy to lock HOSTS file, for example now Avira is doing it for me :)
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Omid Farhang on April 19, 2009, 10:07:19 PM
when we re-direct a URL in windows HOSTS file to 127.0.0.1, is not it mean it's blocked?
Yes, it loops.
Ok, Thanks!

so, if it is, why SpyBot or some other software, add some URL list in restricted site and... too and slow down programs launch time? I never add those URL in any place else than HOSTS list and my programs launch fast enough and have no problem and don't feel un-secure.
Can you post examples? Use hxxp:// format of the link.
Not just one URL! until last update Spybot know 10531 URL as "BAD" and add all of those 10531 in Internet Explorer Domains and Secure Domians and Global (Hosts)
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Lisandro on April 19, 2009, 10:11:18 PM
but it's easy to lock HOSTS file, for example now Avira is doing it for me :)
Ok... you can lock it... a lot of programs do so... and avast could be among them... But I'd rather let it not locked and update it through HostsMan.
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Omid Farhang on April 19, 2009, 10:24:42 PM
Can you post examples? Use hxxp:// format of the link.

hxxp://008i.com
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Lisandro on April 19, 2009, 10:30:35 PM
As far I know, that was an infected site... why would you want to go there?
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Omid Farhang on April 19, 2009, 10:36:53 PM
As far I know, that was an infected site... why would you want to go there?

Tech, I don't want to go there, my question is that, when HOSTS file block any traffic to that URL, why Spybot add that URL in windows registry in restricted site TOO? when that URL in HOSTS file block any traffic to that URL it's no more needed to add that URL again in registry too and slow down windows and programs launch time, am I thinking wrong?

I want to say adding infected URL in HOSTS file is enough and why they add same URL in some different places?
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Tarq57 on April 20, 2009, 12:27:18 AM
Possibly because you have the "immunize" function in Spybot enabled?
Try using one or the other but not both, if you find the result unsatisfactory.
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Omid Farhang on April 20, 2009, 12:50:59 AM
Possibly because you have the "immunize" function in Spybot enabled?
Try using one or the other but not both, if you find the result unsatisfactory.
Thanks for reply,
it's same what I do, I only choose Cookies, IPs, Plugins for IE and I let HOSTS to block everything else :)
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Omid Farhang on April 20, 2009, 09:18:51 PM
finally, I did not got any answer if adding those URL in BOTH registry and HOSTS has any benefites or not :(
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Tarq57 on April 20, 2009, 11:53:26 PM
Well, I don't know, but I would think that if you are happy the HOSTS file is indeed locked, and are confident in that, there is no need to additionally have the registry setting altered.
I don't actually know if it makes much difference. I have SpywareBlaster active, and a HOSTS file, but I don't think it makes more than a few nanoseconds difference to browsing speed.
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Omid Farhang on April 21, 2009, 07:33:04 AM
Well, I don't know, but I would think that if you are happy the HOSTS file is indeed locked, and are confident in that, there is no need to additionally have the registry setting altered.
I don't actually know if it makes much difference. I have SpywareBlaster active, and a HOSTS file, but I don't think it makes more than a few nanoseconds difference to browsing speed.
ok! Thanks! yes, I'm sure when AVIRA is doing something, it is doing it very well!

about the thing you said about speed, I did not said it slow down browsing speed, but it slow down programs "Launch time". for example when I enable "restriced sites" in SpywareBlaster, I need to wait about 1-3 second to open Internet Explorer or every new tab in IE 8, but when I disable it they open in about 0.5 second
Title: Re: why some software such as spybot block one URL in many different place?
Post by: Tarq57 on April 21, 2009, 11:52:59 AM
Ah, ok. I haven't tested that. Firefox is a bit slow to open first thing in the day, but I'm a bit slow at that time too, so probably haven't noticed it.  ;D
Title: Re: why some software such as spybot block one URL in many different place?
Post by: satyr on April 29, 2009, 08:22:39 PM
I duplicated this post by mistake, but I couldn't delete it!!
Title: Re: why some software such as spybot block one URL in many different place?
Post by: satyr on April 29, 2009, 08:26:02 PM
Tech, I don't want to go there, my question is that, when HOSTS file block any traffic to that URL, why Spybot add that URL in windows registry in restricted site TOO?

Well, though it's true that I am not very familiar with how Spybot works (currently I don't use it/have it installed, but I was using it in the past), but maybe the reason for that is just that it doesn't "know" (doesn't "look" there) that it's (i.e. the respective hostname redirected to localhost/127.0.0.1 in hosts file) already there/blocked ...

when that URL in HOSTS file block any traffic to that URL it's no more needed to add that URL again in registry too and slow down windows and programs launch time, am I thinking wrong?

Also, the slow down in programs' launch times is so small (if there's any at all, but certainly it isn't measurable/noticed by the user) that it isn't worth bothering with it, at least IMO.


Greetings, satyr

Title: Re: why some software such as spybot block one URL in many different place?
Post by: Omid Farhang on April 29, 2009, 08:28:00 PM
@satyr: http://forum.avast.com/index.php?topic=19387.msg374250#msg374250
Title: Re: why some software such as spybot block one URL in many different place?
Post by: DavidR on April 29, 2009, 08:59:50 PM
I duplicated this post by mistake, but I couldn't delete it!!


Only moderators can delete posts/topics, all you as the poster can do is to Modify the post content, deleting it and putting in something like Duplicate post or Intentional deletion.