Author Topic: Some odd things in host file  (Read 397 times)

0 Members and 1 Guest are viewing this topic.

Offline mailaddyftw

  • Newbie
  • *
  • Posts: 2
Some odd things in host file
« on: October 18, 2020, 01:11:34 PM »
I have some trojan (Trojan.MSIL.Krypt) and am trying to get rid of it. My scan found some anomaly in my hosts file:

127.0.0.1   download-avast.com
127.0.0.1   www.download-avast.com
127.0.0.1   telecharger-avast.com
127.0.0.1   www.telecharger-avast.com

it is asking me if i want  to allow this, or remove it from there, and I have no clue. I figured I would ask here since it has avast in the name.
Halp?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83935
  • No support PMs thanks
Re: Some odd things in host file
« Reply #1 on: October 18, 2020, 02:34:26 PM »
With those entries in your HOSTS file, they prevent (reroute) you from connecting to those two URLs.  They redirect to your local host IP address 127.0.0.1 where they would effectively fail.

That said they aren't URLs that I have come across before.
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.8.2432 (build 20.8.5684.602) UI-1.0.566/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 67393
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Some odd things in host file
« Reply #2 on: October 18, 2020, 04:16:44 PM »
That said they aren't URLs that I have come across before.
+1
Win 8.1 [x64] - Avast PremSec 20.9.2434.Beta#2 [UI.573] - CC 5.72 - EEK - FF ESR 78.4 [NS/AOS/uBO/PB] - TB 78.4 - SB/CP/SL/DU.B
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline rocksteady

  • Advanced Poster
  • **
  • Posts: 885
Re: Some odd things in host file
« Reply #3 on: October 18, 2020, 04:48:27 PM »
Maybe better to ask your question in the Virus and Worms section of the forum here:
https://forum.avast.com/index.php?board=4.0

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83935
  • No support PMs thanks
Re: Some odd things in host file
« Reply #4 on: October 18, 2020, 08:45:43 PM »
I would be interested in what scan mailaddyftw was doing, as I can't recall if avast checks the HOSTS file or not.
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.8.2432 (build 20.8.5684.602) UI-1.0.566/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36760
Re: Some odd things in host file
« Reply #5 on: October 18, 2020, 09:24:55 PM »
Trojan.MSIL.Krypt seems to not be a avast detection name ... possible Ikarus/Emsisoft ?




« Last Edit: October 18, 2020, 09:37:33 PM by Pondus »

Offline alanb

  • Poster
  • *
  • Posts: 496
Re: Some odd things in host file
« Reply #6 on: October 19, 2020, 02:02:04 PM »
127.0.0.1   download-avast.com
127.0.0.1   www.download-avast.com
127.0.0.1   telecharger-avast.com
127.0.0.1   www.telecharger-avast.com

IIRC, some time ago entries like that were added to the hosts file in an attempt to prevent the user from downloading the antivirus solution to defeat the virus.

I found some references to those entries on the SpyBot forum from 2007-2008!

Offline mailaddyftw

  • Newbie
  • *
  • Posts: 2
Re: Some odd things in host file
« Reply #7 on: October 19, 2020, 10:18:59 PM »
Thanks all, I appreciate all the replies ♥
As for what program I used, it was SpyHunter. I don't really know much about any of this, so I just use what I THINK is good because friends said so. God, I sound like such a noob, but that's just because I am one. lol  ;D

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 44298
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Some odd things in host file
« Reply #8 on: October 19, 2020, 10:24:37 PM »
Thanks all, I appreciate all the replies ♥
As for what program I used, it was SpyHunter. I don't really know much about any of this, so I just use what I THINK is good because friends said so. God, I sound like such a noob, but that's just because I am one. lol  ;D
SpyHunter is an expensive solution when Malwarebytes (FREE) could do the same thing for you.
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1909 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.7.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq