Author Topic: Some odd things in host file  (Read 2289 times)

0 Members and 1 Guest are viewing this topic.

Offline mailaddyftw

  • Newbie
  • *
  • Posts: 2
Some odd things in host file
« on: October 18, 2020, 01:11:34 PM »
I have some trojan (Trojan.MSIL.Krypt) and am trying to get rid of it. My scan found some anomaly in my hosts file:

127.0.0.1   download-avast.com
127.0.0.1   www.download-avast.com
127.0.0.1   telecharger-avast.com
127.0.0.1   www.telecharger-avast.com

it is asking me if i want  to allow this, or remove it from there, and I have no clue. I figured I would ask here since it has avast in the name.
Halp?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89329
  • No support PMs thanks
Re: Some odd things in host file
« Reply #1 on: October 18, 2020, 02:34:26 PM »
With those entries in your HOSTS file, they prevent (reroute) you from connecting to those two URLs.  They redirect to your local host IP address 127.0.0.1 where they would effectively fail.

That said they aren't URLs that I have come across before.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76032
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Some odd things in host file
« Reply #2 on: October 18, 2020, 04:16:44 PM »
That said they aren't URLs that I have come across before.
+1
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1574
Re: Some odd things in host file
« Reply #3 on: October 18, 2020, 04:48:27 PM »
Maybe better to ask your question in the Virus and Worms section of the forum here:
https://forum.avast.com/index.php?board=4.0

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89329
  • No support PMs thanks
Re: Some odd things in host file
« Reply #4 on: October 18, 2020, 08:45:43 PM »
I would be interested in what scan mailaddyftw was doing, as I can't recall if avast checks the HOSTS file or not.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37610
  • Not a avast user
Re: Some odd things in host file
« Reply #5 on: October 18, 2020, 09:24:55 PM »
Trojan.MSIL.Krypt seems to not be a avast detection name ... possible Ikarus/Emsisoft ?




« Last Edit: October 18, 2020, 09:37:33 PM by Pondus »

Offline alanb

  • Poster
  • *
  • Posts: 652
Re: Some odd things in host file
« Reply #6 on: October 19, 2020, 02:02:04 PM »
127.0.0.1   download-avast.com
127.0.0.1   www.download-avast.com
127.0.0.1   telecharger-avast.com
127.0.0.1   www.telecharger-avast.com

IIRC, some time ago entries like that were added to the hosts file in an attempt to prevent the user from downloading the antivirus solution to defeat the virus.

I found some references to those entries on the SpyBot forum from 2007-2008!

Offline mailaddyftw

  • Newbie
  • *
  • Posts: 2
Re: Some odd things in host file
« Reply #7 on: October 19, 2020, 10:18:59 PM »
Thanks all, I appreciate all the replies ♥
As for what program I used, it was SpyHunter. I don't really know much about any of this, so I just use what I THINK is good because friends said so. God, I sound like such a noob, but that's just because I am one. lol  ;D

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48646
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Some odd things in host file
« Reply #8 on: October 19, 2020, 10:24:37 PM »
Thanks all, I appreciate all the replies ♥
As for what program I used, it was SpyHunter. I don't really know much about any of this, so I just use what I THINK is good because friends said so. God, I sound like such a noob, but that's just because I am one. lol  ;D
SpyHunter is an expensive solution when Malwarebytes (FREE) could do the same thing for you.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v24H2 64bit, 32 Gig Ram, 1TB SSD, Avast Free 24.4.6112, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet