All Windows installation consists of a single file to manually map IP addresses to host names. This Windows Hosts file is loaded each time Windows start. By default, Windows hosts file contains only one mapping and that is the localhost. Any address mapped to 127.0.0.1 will redirect connection back to your local machine. This is useful for blocking unwanted services from reaching the Internet. Editing the HOSTS file will provide positive results for user, but it is relatively damaging when Trojan alters it for malicious purpose.
Most of the time, malware modifies Windows hosts file to prevent users from gaining access to Security related websites. It is also on this file that Trojan can successfully redirect Internet browser’s request to unwanted locations.
Below is a guide to clean your Windows Hosts File.
How to Edit Windows Hosts File
1. Navigate to the following location for file location:
Windows Vista and Windows 7:
2. Double-click the hosts file to open with corresponding application .
3. If necessary, deselect the “Always use this program to open this program” check box.
4. Scroll through the list of programs and double-click Notepad.
5. When the file opens, delete all the entries added by the risk. See sample of a clean hosts file content below.
6. Close Notepad and it should be save automatically (without a file extension).
– – Below this line is an example of Clean Windows Hosts File – –
# Copyright (c) 1993-2009 Microsoft Corp.
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a ‘#’ symbol.
# For example:
# 220.127.116.11 rhino.acme.com # source server
# 18.104.22.168 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost
– – Above this line is an example of Clean Windows Hosts File – –
Note: You may replace your existing hosts file with the above if you are certain that it was maliciously edited. Copy and paste the code to your HOSTS file and save it.