You are not logged in.

Thursday, August 28th 2014, 1:05pm

The Avira Forum will be moved to the new platform Avira Answers soon. We'll make the transition of existing user profiles and threads as smooth as possible.
New visitors are able to log in on Avira Answers with the existing Avira account directly or sign up with a new account.

  • "steveo2" started this thread

Date of registration:
Jan 27th 2011

Operating System:
Vista 64 bit

  • Send private message

1

Thursday, January 27th 2011, 2:07pm

hosts file having facebook entries removed nightly

Hello, I'm using vista home 64, and in order to help stay productive I like to redirect several sights to 127.0.0.1 in my hosts file on this machine.

So I add entries (as administrator) like
127.0.0.1 facebook.com
127.0.0.1 www.facebook.com
127.0.0.1 ebay.com
etc

and it works for the rest of the day, facebook is blocked as desired.

next morning when I go to facebook, I AM ALLOWED IN!?!

Only the facebook entries have been removed from the hosts file, ebay and etc are all as before.
The last modified time is not touched, as if to cover some tracks.

I think something is very wrong here.

Thoughts?

Thanks,
Steve

  • "steveo2" started this thread

Date of registration:
Jan 27th 2011

Operating System:
Vista 64 bit

  • Send private message

2

Saturday, January 29th 2011, 2:05am

Is there any reason to think I have a virus or other security threat? Any ideas what might be opening up facebook in my hosts file if it isn't a virus?

AlfaMS

Community member

Date of registration:
Mar 3rd 2007

Version:
Avira Antivirus Suite

Operating System:
Windows 8.1 Pro 64 Bit MC & LinuxMint 17 64 Bit Cinnamon

  • Send private message

3

Saturday, January 29th 2011, 10:40am

Try rendering the file "read only" and see what happens then.
Dieses wirklich gute Forum schließt leider bald. Wir konnten dies nicht verhindern. Schade. Aber dies sei gesagt: Es war schön hier mit Euch. Man sieht sich, und zwar hier: Pc-Notfallklinik Wenn Ihr wollt, dann zieht mit um. The more, the merrier. ^^

  • "steveo2" started this thread

Date of registration:
Jan 27th 2011

Operating System:
Vista 64 bit

  • Send private message

4

Saturday, January 29th 2011, 1:26pm

It stays read only, but the contents are still changed.

  • "steveo2" started this thread

Date of registration:
Jan 27th 2011

Operating System:
Vista 64 bit

  • Send private message

5

Thursday, February 3rd 2011, 2:36pm

Well, I left the machine in ubuntu last night and facebook wasn't removed from hosts this morning in vista, so something is running on some sort of a schedule to hack my hosts file. Has nobody heard of this behavior before?