Host File Problems

[willythecat]

Windows xp SP3, IE7, Spyware Doctor.
Not really a virus question, but more about the host file itself.
Only just recently, when l run spyware doctor, it is picking up between 700-800 infections in the host file. I checked this file and made sure all entries had the 127.0.0.1 prefix, logged on to a very trusted website, and when l looked at the host file again, there were about a dozen new entries. I'll probably do this for some of my other bookmarked websites to try and find out the culprit.
When it contains some "dodgy" entries like those picked up by the antivirus, are they in fact dangerous to have in there?
Is the host file even an essential to have?
Comments would be appreciated.
Thanks

[kpac]

Download HostsXpert ( http://www.majorgeeks.com/Hoster_d4626.html ) and then follow the steps below:

    * Unzip HostsXpert.zip
    * It will create a folder named HostsXpert in whatever folder you extract it to.
    * Run HostsXpert.exe by double clicking on it.
    * click Restore MS Hosts File and then click OK.
    * Click the X to exit the program

Restart computer.

[willythecat]

I use majorgeeks quite a lot and hey, what a nifty little program!
Did what you said and now have a nice clean hosts file.
The program makes it a lot easier to check entries.
Thanks very much for that, kpac.

[kpac]

No problem. Safe computing.

[soybean]

Is the host file even an essential to have?

I believe it's essential.  It's used by such spyware tools a Spybot Search & Destroy's Immunize feature to insert undesirable websites so that they are blocked.

[soybean]

Only just recently, when l run spyware doctor, it is picking up between 700-800 infections in the host file. I checked this file and made sure all entries had the 127.0.0.1 prefix, logged on to a very trusted website, and when l looked at the host file again, there were about a dozen new entries.

What, exactly, do you mean by "infections in the host file"?  If "all entries had the 127.0.0.1 prefix", then how are they infections? 

[Dias de verano]

What, exactly, do you mean by "infections in the host file"?  If "all entries had the 127.0.0.1 prefix", then how are they infections? 

If they block you from updating your antivirus, maybe. Or from downloading a well known anti spyware or adware app.

Malware programs often add entries to the hosts file. One reason is to divert the user to sites that the spyware author or deployer wants. Another reason is to divert certain domain lookups to localhost, to prevent the user and/or software apps from reaching certain web sites, for example in order to obtain new, or update current, antivirus software. Such entries could well be described as "infection". This is why anti malware software apps such as Spybot Search And Destroy often use their own Hosts files.