Hosts file gets updated automatically.

Posted on 2011-04-20
Last Modified: 2012-08-13

Hosts file gets updated automatically.
Any idea why this happens?

Xp machines once restarted this happens.

Question by:bsharath
    LVL 7

    Expert Comment

    It resets to default values? Or something new appears?
    LVL 4

    Expert Comment

    Does it happen only on one machine or in the entire network

    If one or two machines then check for virus

    If entire network then look through your login script or group policy
    LVL 4

    Expert Comment

    Do you have any active logon scripts or perhaps a registry key that does this? Check Start > run > msconfig to see if there is anything other than default set.
    LVL 11

    Author Comment

    this happens in all machines when restarted
    It add's few entries
    No logon scripts
    Msconfig clear
    Also where in GPO other than login scripts i can see if something is set
    LVL 7

    Expert Comment

    Try to restart a PC unplugged from the network, see what happens then.
    LVL 6

    Expert Comment

    are you running some stuff like spybot? I saw several AV programs which used the host file for blocking webpages.
    LVL 15

    Accepted Solution

    I believe a good question to ask here is "Are these 'new' entries a threat?" I mean you have access to the machine as we do not. Spybot as mentioned earlier installs a service that changes the hosts file through that service. We dont know anything about your current situation other then you what you post. Nothing by a native windows installation will reset or add addition entry's unless told to do so. Like doing a dns flush that will reset your hosts file everytime along with your dns cache entry's and routing tables. If you are threatened by these entry's you can change the owner if the file and check your your eventlog for tampering or access denied messages giving you a clue of what us going on.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    MS Access 2003 or later To MySQL Migration Project Hello All, this is my second article in the category of MS-OFFICE Automation. In internet I am not able to find any comprehensive resource on the Migration of MS Access back-end to MySQL so I fin…
    Lync meeting or Lync conferencing is what many organizations would like to deploy to allow them save money. But companies are now giving up for various reasons, one of which is that they cannot join external meetings (non-federated company meetings)…
    Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
    The viewer will learn how to simulate a series of sales calls dependent on a single skill level and learn how to simulate a series of sales calls dependent on two skill levels. Simulating Independent Sales Calls: Enter .75 into cell C2 – “skill leve…

    794 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now