There is a copy of the original HOSTS file on your XP CD. In \I386\HOSTS
Since you have a c:\I386 folder, it is not unreasonable that there would be
a copy there also. I assume that your c:\I386 folder is a copy of the I386
folder from the XP CD.
As far as the C:\WINDOWS\system32\drivers\etc\HOSTS file getting recreated,
no. The HOSTS file is not protected by Windows File Protection.
I just dragged the HOSTS file from C:\WINDOWS\system32\drivers\etc to my
desktop and rebooted. The HOSTS file was not recreated. I had to drag it
back from the Desktop.
This is the contents of the original HOSTS file from the XP CD...
------------below the line---------------
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
---------------above the line----------------
Open your new recreated HOSTS file and see what's in it, then. . .
UPDATE your antivirus software and run a full system scan.
UPDATE whatever anti-spyware applications that you have and run a full
system scan with each one.
You might want to start in Safe Mode to run your antivirus and anti-spyware
software.
Running a full system antivirus scan or anti-spyware scan in Safe Mode can
be a good idea. Some viruses and other malware like to conceal themselves
in areas Windows protects while using them. Safe mode can prevent those
applications access and therefore unprotect the viruses or other malware
allowing for easier removal.
''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start Windows.''
Because of that some malware does not load in Safe Mode and is easier to get
rid of.
How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In