Possible Hosts File Hijack

[Guest]

Windows Defender keeps finding a programme it says could be harmful to my pc
and asks me if I want to clean it. I've selected 'clean' three times but the
programme keeps returning. Does anyone know what this programme is?

Under Name it just says 'Possible Hosts File Hijack'.

Under Resources it says C:\WINDOWS\System32\drivers\etc\hosts

Under Summary it says: This agent monitors security related configuration
changes made to Windows.

I am using a trial version of Webroot Spy Sweeper. Could this be the culprit?

 

[Guest]

Hi Jackie D

It is likely possible Webroot Spy Sweeper is causing WD to tag your hosts
file which resides in the location you have posted. It contains a list of
unwanted/restricted sites which can be used as an avenue of attack for
ad/spyware and can be viewed (among other things) thru your browser settings.
If an attempt is made to access/change it, WD will warn you. This could be
good or it may be bad - depending on whether or not you know what prog was
trying to access it and if it was intentional. There are a number available
which will update your hosts file as new sites are discovered and the list
updated. I particularly recommend SpywareBlaster as being one - it is free
with the option to donate if you like the program. Randy Knobloch (MVP
IE/OE) regularly posts update notifications in the `Announcements` NG on here
for the benefit of all.

 

[Guest]

Hi Stu

Thanks for the suggestions. I think it probably is Webroot Spy Sweeper.