Recognizing host file as a potential harmful file

[pavilion_alex]

When I use windows defender to scan for malicious code in my pc, it finds the
host file in this location:
â€C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.0.6000.16386_none_024e4071fa6fea95\hostâ€
as a harmful file and it gives me some options what to do with it, like
ignore, always allow, remove…. I have put it in the quarantine because I
don’t want to delete it and I don’t know what happens if I delete it. I have
tried to scan the file with two antivirus but they found it completely clean.
I use windows vista ultimate 32bit with the Eset nod32 smart security 4 with
all the updates.

 

[Engel]

Submit it via the process noted in Windows Defender Help, or here:
Report a possible spyware problem to Microsoft Vendor Dispute
Report False Positive Report


<http://www.microsoft.com/windows/products/winfamily/defender/resources.mspx>


I hope this post is helpful, let us know how it works ºut.

Engel

 

[pavilion_alex]

i did and they told me it's not a malware, but why the defender detects a
possible harmful file in a windows basic system folder? i cant even manualy
the folder that contains this host file, it says to me that access is denied
becaue its an importnat system folder.

 

[Buck]

We just got the same warning but Defender suggests the action "Clean". No
idea what to do. Windows Help file has no reference to an action named
"Clean", there are no results when searching for "clean" at the Defender
forums at MS, and there is no mention of an action named "Clean" anywhere in
Defender documentation at MS. But clicking on actions reveals: Clean,
Ignore, Remove, Quarantine

Resources File is listed as:
c:\windows\system32\drivers\etc\hosts

There is no other information listed on the Scan Results page.