Search This Blog

Friday, December 9, 2011

DNS possioning in a windows 7 PC , hosts file funny

DNS possioning in a windows 7 PC

this PC got infected before , the trojan got cleaned , not totally, the trojan dns hosts file still there

every time she uses google, she is downloading viruses ,, luckily their symantec anti-virus can pick up those viruses now, and keeps putting those files to quarantine..

I tried to to edit the hosts file , no luck , it is set to  SHR ,

attemped attrib -s -h -r hosts, got access denied error

eventually checking etc folder permissions, take owner ship, several time, finally I can rename the bloody hosts file, and put in a clean one.

69.10.57.34 www.google.com
69.10.57.34 www.google.com.au
69.10.57.34 www.google.be
69.10.57.34 www.google.com.br
69.10.57.34 www.google.ca
69.10.57.34 www.google.ch
69.10.57.34 www.google.de
69.10.57.34 www.google.dk
69.10.57.34 www.google.fr
69.10.57.34 www.google.ie
69.10.57.34 www.google.it
69.10.57.34 www.google.co.jp
69.10.57.34 www.google.nl
69.10.57.34 www.google.no
69.10.57.34 www.google.co.nz
69.10.57.34 www.google.pl
69.10.57.34 www.google.se
69.10.57.34 www.google.co.uk
69.10.57.34 www.google.co.za
69.10.57.34 www.bing.com
69.10.57.34 search.yahoo.com
69.10.57.34 uk.search.yahoo.com
69.10.57.34 ca.search.yahoo.com
69.10.57.34 de.search.yahoo.com
69.10.57.34 fr.search.yahoo.com
69.10.57.34 au.search.yahoo.com
69.10.57.34 www.google-analytics.com

No comments:

Post a Comment