Changes to the host file. How serious is it?

Some users periodically encounter the fact that malicious software does not only harm various files and the computer, but also blocks access to sites where the necessary antiviruses are located and not only. This is done by making changes to the host-file of Windows 7 or another system of the same company.

host file

It is located in the system directory, which contains the files of operating systems from Microsoft. Basically, this directory is located on drive C. The host file is designed to translate the server or site symbolic addresses at the local level into IP addresses that will be more understandable to machines on TCP / IP networks.

Its function is similar to that of the DNS service. The user enters the site address into his browser, consisting of letters, after which a request is sent to the DNS server, which, in turn, supplies it with a digital IP address and sends the request in this form to the site or server. The difference is that DNS works on the global web, not on the local one.

host windows 7 file
The system places the host file in the same place. Moreover, for each system it is different. For example, in old Windows (it's 95, 98, as well as the Millennium), it was immediately in the root directory. In newer versions, it was already located elsewhere. To get to it, you need to open the WINNT system directory, then find and open the System32 folder there, enter the Drivers directory in it, from it into ETC. This is where the host file will be located.

As for the more modern ones (Piggy, 2003, Vista and Seven), everything is similar to the previous location, only the system folder will already be called Windows. So, the host file is empty (when the user did not add any data to it) has the so-called reference look. True, it may differ on computers where local servers are installed.

host file is empty

When this file contains strange changes, these are tricks of the enemy software. If this happens, the user, typing one address, gets to a completely different site or can’t go anywhere at all. If you open your host file, you will see the address 127.0.0.1 localhost. This is your computer. By adding to the specified IP address of a site, access to the latter will be impossible using a symbolic value.

Very often there is a blocking of resources that update antivirus software. As a result, the installed protection expires. You can also be redirected to phishing sites, from which the theft of your personal information, including financial information, takes place. These addresses will be blocked, and the computer will try to open them locally.

To avoid this, try to constantly update your anti-virus software, prohibit making any changes to this file and periodically review it. You can save somewhere in its textual initial form, and in case of any problems, enter these saved data. Such actions will allow you to constantly have access to all the necessary sites, and your antivirus - to continuously update your virus databases. That's all for me, I hope the information presented above is clear to you.

Source: https://habr.com/ru/post/C15184/


All Articles