View original (French)

SettingsModifier:Win32/HostsFileHijack

Solved
ahmiddouche Posted messages 218 Registration date   Status Member Last intervention   -  
 ahmiddouche -
Hello,

My Windows antivirus detected 3 serious threats, I think identical:

SettingsModifier:Win32/HostsFileHijack,

it indicates Parameter Modifier and this program shows potentially unwanted behavior.

Affected element: File: C\Windows\System32\drivers\etc\hosts.

The 1st is blocked
the 2nd is quarantined
and the 3rd has been deleted or restored

A quick scan was launched automatically and detects no threats.

What do you think?

Should I perform additional actions.

Awaiting your response,

Kind regards,

Ahmiddouche

8 answers

  1.
    ahmiddouche Posted messages 218 Registration date   Status Member Last intervention   9
     
    Good evening,

    Okay, I’m launching a full analysis and I’ll keep you posted.

    Thanks for your response.

    Best regards,

    Ahmiddouche
    0
  2. ahmiddouche
     
    Hello,

    I performed a full offline scan with Windows Defender, result: no threats detected.

    In your opinion, is that sufficient?

    Thank you for your advice,

    Best regards,

    Ahmiddouche
    0
  3. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    Hi,

    This is a modification of the Windows HOSTS file.
    Not necessarily malicious.

    To check your computer, for potential infections and to get a general overview of the system:

    Follow the FRST tutorial by clicking on this blue link. ( take the time to read carefully - everything is well explained ).

    Download and run the FRST scan,
    WAIT FOR THE SCAN TO FINISH, it takes several minutes.
    A message will indicate that the analysis is complete.

    Three FRST reports will be generated:
    • FRST.txt
    • Shortcut.
    • Additionnal.txt


    Send these 3 reports to the site https://pjjoint.malekal.com/ and in return provide the 3 pjjoint links that lead to the reports here in a new reply so that we can review them.

    (The blue links lead to step-by-step tutorials, click them for more precise instructions to follow).

    --
    Please press any key to continue with the disinfection...
    0
  4. ahmiddouche
     
    Hello Malekal,

    I will do that as soon as possible.

    Thank you for your feedback.

    Best regards,

    Ahmiddouche
    0
  6. ahmiddouche Posted messages 218 Registration date   Status Member Last intervention   9
     
    Good evening,

    As agreed, here are the links below:

    https://pjjoint.malekal.com/files.php?id=20200804_e149q6e7h5
    https://pjjoint.malekal.com/files.php?id=FRST_20200804_8d15l11i12d5
    https://pjjoint.malekal.com/files.php?id=20200804_o9z5p6m11z7

    Thank you again for your help.

    Best regards,

    Ahmiddouche
    0
  7. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    No malware.
    Your HOSTS file is empty... maybe Windows Defender reset it.
    But everything is fine.

    To avoid viruses, you need to know how hackers go about infecting computers: How computer viruses are distributed
    Finally, to protect and secure your PC:

    For example, you can improve your protections with uBlock + OSArmor + Malwarebytes Guard Extension.

    0
  8. ahmiddouche
     
    Hello Malekal,

    Excellent news, thank you for your availability.

    Best regards.

    Ahmiddouche
    0
  9. seb77150 Posted messages 6285 Registration date   Status Member Last intervention   500
     
    Hi, while waiting for Malekal, run a full scan with Windows Defender
    -1