Would an Admin check this out, I took the liberty of posting the "Rare Intance" Thread at SWI and a poster and myself drew a file-not-found "404" on the above URL.
I was alerted by Galadriel to the problem and immediatly took actions to notify the users so the word could get out to all that needed the information, I do not have the specifics as of yet, and yes I know of Merijn being out of town for a short….
It is a new one…. No I don't have a hijack this log. This hijack was found when someone joined our chatroom. We had to manually root out the hijack. I don't have specifics either, because I was not available at the moment it happened, I was alerted and given a copy of the said hosts file.
For now, it redirects the sites I have listed and a couple others to the loopback address (127.0.0.1) and not to one of their domains.
This can all be avoided with a read-only HOSTS file.
Many CWS Hijackers are contained in this HOSTS file, although likely not the new variant but it can help uses from having their loopback address hijacked.
So its legit. OK. I was around some of the forums and couldn't find any other postings about it. So before anyone is caught open the HostsFileReader.exe and backup and wait it out, that's how I read it anyway, perhaps you could please confirm or deny this is the correct procedure. Thanks.
All we are doing in this instance is preparing you for what could go wrong and you would have the info to correct your computer and anyone else so they can regain access to help
Whether they are seeking help here or another anti-spyware site does not matter, only that they are still able to do so…
New Variant CWS? {Yes/No?}
