Super_Spartan 56 Posted December 23, 2013 Share Posted December 23, 2013 WTF, I've been using the MVPS hosts file for years now suddenly it's being detected as a virus! really?!?! a simple text file ?!? hxxp://winhelp2002.mvps.org/hosts.zip Link to comment Share on other sites More sharing options...
jessy 0 Posted December 23, 2013 Share Posted December 23, 2013 looks like eset nod32 is making a lot of mistakes at the moment. Link to comment Share on other sites More sharing options...
Super_Spartan 56 Posted December 23, 2013 Author Share Posted December 23, 2013 yes! I understand false positives in any AV but a hosts file as a false positive?? this is BS! and it didn't even pop up anything, it simply removed the file so I was running with no hosts file for days until I noticed that I am getting ads in IE which I rarely use since Pale Moon is my main browser then I checked the hosts file3 and it wasn't there and so was the entire MVPS hosts file folder add to that the slow and buddy NOD32 v7,. and you get an excellent crappy AV Link to comment Share on other sites More sharing options...
jessy 0 Posted December 23, 2013 Share Posted December 23, 2013 I think they are going to far, not thinking about what problems it can cause, when they widespread, and just makes a lot of false detections. I'm considering changing to avast. Link to comment Share on other sites More sharing options...
Arakasi 549 Posted December 23, 2013 Share Posted December 23, 2013 (edited) What proof do you have ESET did this. Provide logs please, instead of slander. Attach your scan logs with ESET labeling it as a threat and what flavor and name it was given as a virus by ESET. It will also say " Cleaned by deleting " Or cleaned on reboot. It will have date and time and dont forget you can change the level of cleaning eset uses. It would be your overlooking if you decided not to change the clean level from the default set. Malware can infect the hosts file. How do you know Malware did not attack it and change it, then ESET caught it and removed. The host file isnt a simple text message. Avast is horrible jessy, good luck. Edited December 23, 2013 by Arakasi Link to comment Share on other sites More sharing options...
Arakasi 549 Posted December 23, 2013 Share Posted December 23, 2013 Can we have a moderator please remove or edit the profane acronym from the OP's messages. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted December 23, 2013 Administrators Share Posted December 23, 2013 A lot of false detection? Definitely not with ESET which is known for extremely low number of false positives. Of course, hosts file can be detected, too, if it contains redirections known to be added by malware. I've tried to download the file from the link above but my ESS didn't detect anything. ESET doesn't remove a file without popping up an alert and logging the detection as well as the action taken on the file. I assume it must have been something else that removed the file. Link to comment Share on other sites More sharing options...
Super_Spartan 56 Posted December 24, 2013 Author Share Posted December 24, 2013 happened again with a new Win 8.1 Pro installation I copied that hosts file to the System32\drivers\etc then after a while, I noticed that the file disappeared from that folder and I have no hosts file!!!! Link to comment Share on other sites More sharing options...
Arakasi 549 Posted December 24, 2013 Share Posted December 24, 2013 Its not Eset or you would get a pop up or see it in logs. Link to comment Share on other sites More sharing options...
Veremo 6 Posted December 24, 2013 Share Posted December 24, 2013 VirusTotal detection for this file: https://www.virustotal.com/pl/file/8ccad1aa7fc94df8a9fb63a9f8c6f0d08a0bd0c80ed1e64d03eb358e4038cbd7/analysis/ Not detected. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted December 25, 2013 Administrators Share Posted December 25, 2013 A Procmon log would show you what application keeps deleting the file. Link to comment Share on other sites More sharing options...
Super_Spartan 56 Posted December 25, 2013 Author Share Posted December 25, 2013 (edited) Just formatted another time and Installed Windows 7 Pro x64 I copied the hosts file of MVPS before hand then created an image of my disk using Macrium Reflect As soon as I installed NOD32....the hosts file was deleted!!!! WTF! MVPS has been out there for many years and known to be a legitamate / good hosts file for extra protection from ads / malware sites: Edited December 25, 2013 by Tweak Arena Link to comment Share on other sites More sharing options...
Administrators Solution Marcos 5,074 Posted December 25, 2013 Administrators Solution Share Posted December 25, 2013 1, you used an old virus signature database. This sort of FP was fixed on Oct 28. 2, it was a modified hosts file which was detected at that time. The original hosts file from winhelp2002.mvps.org was not detected. Link to comment Share on other sites More sharing options...
Super_Spartan 56 Posted December 26, 2013 Author Share Posted December 26, 2013 ahh I see! that explains why you have no issues and I had issues upon installing NOD32 Link to comment Share on other sites More sharing options...
Recommended Posts