Removal Tip – Restore HOSTS File
When attempting to remove a fake antivirus program, it is best to make sure that the fake antivirus program hasn’t changed the HOSTS file. If you are unable to access the internet, it may be because the HOSTS file has been modified. Generally, HOSTS file are modified by advanced Windows users. For example, I never modify this file since I don’t have a need to. The HOSTS file is a file in Windows which links websites names to locations on the web. Every location on the web has a unique IP address, which is a series of numbers. The HOSTS file will direct the address typed in the address bar to that unique location on the web. With the HOSTS file, a user can be directed to a different website than what is typed in the address bar. Therefore, the HOSTS file can direct Microsoft.com to a different location on the web. Many forms of spyware will also modify the HOSTS file in order to direct the user to a different location.
The HOSTS file is located at C:\Windows\System32\drivers\etc. By default it only has one line, which is show 127.0.0.1 and have “localhost” beside it. Microsoft has created a tool to easily restore the HOSTS file back to the default. If you have never used this file, then you should feel safe restoring the HOSTS file. To download the tool, please click here. By restoring the HOSTS file, you will be able to surf the web as long as the fake antivirus program is not blocking the internet.
This entry was posted on Monday, May 30th, 2023 at 2:52 pm and is filed under Malware Removal. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.
