PossibleHostsFileHijack

[Shane]

Greetings,

For the first time ever, Windows Defender actually detected something:

SettingsModifier:Win32/PossibleHostsFileHijack

It says that my hosts file may have been hijacked. When I look at the file,
there is a new line at the bottom:

127.0.0.1 localhost
::1 local host

So, is the new "::1 local host" line at the bottom of the hosts file an
actual hijack attempt? If so, what does it do, exactly?

Thanks,
Shane
Windows Vista Home Premium SP1

 

[Bill Sanderson]

This is a false positive. See if a definition update for Windows Defender
is available, and re-scan.

The notation is IPV6, and does the same thing as the first line does for
IPv4.

Greetings,

For the first time ever, Windows Defender actually detected something:

SettingsModifier:Win32/PossibleHostsFileHijack

It says that my hosts file may have been hijacked. When I look at the
file, there is a new line at the bottom:

127.0.0.1 localhost
::1 local host

So, is the new "::1 local host" line at the bottom of the hosts file an
actual hijack attempt? If so, what does it do, exactly?

Thanks,
Shane
Windows Vista Home Premium SP1

--

 

[Shane]

This is a false positive. See if a definition update for Windows Defender

is available, and re-scan.

The notation is IPV6, and does the same thing as the first line does for
IPv4.

I've downloaded all updates, did a Quick Scan, and the error went away.

Thanks,
Shane.