I’ve been hacked!!!

It turns out the problems that I mentioned in the last post was a worm that edits a file called hosts. The hosts file acts as a lookup for the windows TCP/IP services (the internet services). This worm enters values in this file so that many antivirus/computer security websites are rerouted to a blank page, actually it’s rerouted to 127.0.0.1 whihc is the IP address every computers knows it’s self by. so every address that was typed that was on that list was rerouted to the computer it was sent from.

There’s a simple way to remove these values, simply find the hosts file in your system (usually in DRIVE:\Windows\system32\drivers\etc\) the file is simply named ‘hosts’, to edit, open with notepad, unless there’s a reason you should keep any of them delete all of the entries on the list that have ‘127.0.0.1′ before them (except ‘localhost’), then save the file, this should make everything work…

If you need any additional assitance with this please comment and me or someone else will get back to you as soon as possible

Happy Surfing…Because Now You Can

Just for some fun, here’s what I deleted from the file to get it working, all of these addresses are effectively ‘blocked’.

127.0.0.1    www.symantec.com
127.0.0.1    securityresponse.symantec.com
127.0.0.1    symantec.com
127.0.0.1    www.mcafee.com
127.0.0.1    mcafee.com
127.0.0.1    liveupdate.symantecliveupdate.com
127.0.0.1    www.viruslist.com
127.0.0.1    viruslist.com
127.0.0.1    viruslist.com
127.0.0.1    f-secure.com
127.0.0.1    www.f-secure.com
127.0.0.1    kaspersky.com
127.0.0.1    kaspersky-labs.com
127.0.0.1    www.avp.com
127.0.0.1    www.kaspersky.com
127.0.0.1    avp.com
127.0.0.1    www.networkassociates.com
127.0.0.1    networkassociates.com
127.0.0.1    www.ca.com
127.0.0.1    ca.com
127.0.0.1    mast.mcafee.com
127.0.0.1    my-etrust.com
127.0.0.1    www.my-etrust.com
127.0.0.1    download.mcafee.com
127.0.0.1    dispatch.mcafee.com
127.0.0.1    secure.nai.com
127.0.0.1    nai.com
127.0.0.1    www.nai.com
127.0.0.1    update.symantec.com
127.0.0.1    updates.symantec.com
127.0.0.1    us.mcafee.com
127.0.0.1    liveupdate.symantec.com
127.0.0.1    customer.symantec.com
127.0.0.1    rads.mcafee.com
127.0.0.1    trendmicro.com
127.0.0.1    pandasoftware.com
127.0.0.1    www.pandasoftware.com
127.0.0.1    www.trendmicro.com
127.0.0.1    www.grisoft.com
127.0.0.1    www.microsoft.com
127.0.0.1    microsoft.com
127.0.0.1    www.virustotal.com
127.0.0.1    virustotal.com
127.0.0.1    www.amazon.com
127.0.0.1    www.amazon.co.uk
127.0.0.1    www.amazon.ca
127.0.0.1    www.amazon.fr
127.0.0.1    www.paypal.com
127.0.0.1    paypal.com
127.0.0.1    moneybookers.com
127.0.0.1    www.moneybookers.com
127.0.0.1    www.ebay.com
127.0.0.1    ebay.com
127.0.0.1    www.symantec.com
127.0.0.1    securityresponse.symantec.com
127.0.0.1    symantec.com
127.0.0.1    www.sophos.com
127.0.0.1    sophos.com
127.0.0.1    www.mcafee.com
127.0.0.1    mcafee.com
127.0.0.1    liveupdate.symantecliveupdate.com
127.0.0.1    www.viruslist.com
127.0.0.1    viruslist.com
127.0.0.1    www.f-secure.com
127.0.0.1    f-secure.com
127.0.0.1    kaspersky.com
127.0.0.1    kaspersky-labs.com
127.0.0.1    www.avp.com
127.0.0.1    avp.com
127.0.0.1    www.kaspersky.com
127.0.0.1    www.networkassociates.com
127.0.0.1    networkassociates.com
127.0.0.1    www.ca.com
127.0.0.1    ca.com
127.0.0.1    mast.mcafee.com
127.0.0.1    www.my-etrust.com
127.0.0.1    my-etrust.com
127.0.0.1    download.mcafee.com
127.0.0.1    dispatch.mcafee.com
127.0.0.1    secure.nai.com
127.0.0.1    www.nai.com
127.0.0.1    nai.com
127.0.0.1    update.symantec.com
127.0.0.1    updates.symantec.com
127.0.0.1    us.mcafee.com
127.0.0.1    liveupdate.symantec.com
127.0.0.1    customer.symantec.com
127.0.0.1    rads.mcafee.com
127.0.0.1    www.trendmicro.com
127.0.0.1    trendmicro.com
127.0.0.1    www.grisoft.com
127.0.0.1    grisoft.com
127.0.0.1    downloads1.kaspersky.com
127.0.0.1    downloads2.kaspersky.com
127.0.0.1    ftp.downloads1.kaspersky-labs.com
127.0.0.1    ftp.downloads2.kaspersky-labs.com
127.0.0.1    updates1.kaspersky-labs.com
127.0.0.1    updates3.kaspersky-labs.com
127.0.0.1    updates2.kaspersky-labs.com
127.0.0.1     avp.com
127.0.0.1     kaspersky.com
127.0.0.1     kaspersky-labs.com
127.0.0.1     updates1.kaspersky.com
127.0.0.1     updates2.kaspersky.com
127.0.0.1     updates3.kaspersky.com
127.0.0.1     updates-us1.kaspersky.com
127.0.0.1     downloads1.kaspersky.com
127.0.0.1     downloads-us1.kaspersky.com
127.0.0.1     www.avp.com
127.0.0.1     www.kaspersky.com
127.0.0.1     d-ru-1f.kaspersky-labs.com
127.0.0.1     d-ru-1h.kaspersky-labs.com
127.0.0.1     d-ru-2f.kaspersky-labs.com
127.0.0.1     d-ru-2h.kaspersky-labs.com
127.0.0.1     d-eu-2f.kaspersky-labs.com
127.0.0.1     d-eu-2h.kaspersky-labs.com
127.0.0.1     d-eu-1f.kaspersky-labs.com
127.0.0.1     d-eu-1h.kaspersky-labs.com
127.0.0.1     d-us-1f.kaspersky-labs.com
127.0.0.1     d-us-1h.kaspersky-labs.com
127.0.0.1     downloads1.kaspersky.ru
127.0.0.1     downloads2.kaspersky.ru
127.0.0.1     downloads3.kaspersky.ru
127.0.0.1     downloads4.kaspersky.ru
127.0.0.1     downloads5.kaspersky.ru
127.0.0.1     eset.com
127.0.0.1     www.eset.com
127.0.0.1     u2.eset.com
127.0.0.1     u3.eset.com
127.0.0.1     u4.eset.com
127.0.0.1     u7.eset.com
127.0.0.1     82.165.250.33
127.0.0.1     82.165.237.14
127.0.0.1     www.nod32.com
127.0.0.1     nod32.com
127.0.0.1     eset.casablanca.cz
127.0.0.1     casablanca.cz
127.0.0.1     customer.symantec.com
127.0.0.1     liveupdate.symantec.com
127.0.0.1     liveupdate.symantecliveupdate.com
127.0.0.1     securityresponse.symantec.com
127.0.0.1     symantec.com
127.0.0.1     update.symantec.com
127.0.0.1     updates.symantec.com
127.0.0.1     www.symantec.com
127.0.0.1     www.norton.com
127.0.0.1     norton.com
127.0.0.1     mast.mcafee.com
127.0.0.1     mcafee.com
127.0.0.1     rads.mcafee.com
127.0.0.1     www.mcafee.com
127.0.0.1     mcafee.com
127.0.0.1     us.mcafee.com
127.0.0.1     dispatch.mcafee.com
127.0.0.1     download.mcafee.com
127.0.0.1     metalhead2005.info
127.0.0.1     my-etrust.com
127.0.0.1     nai.com
127.0.0.1     networkassociates.com
127.0.0.1     secure.nai.com
127.0.0.1     sophos.com
127.0.0.1     trendmicro.com
127.0.0.1     viruslist.com
127.0.0.1     viruslist.com
127.0.0.1     www.ca.com
127.0.0.1     www.f-secure.com
127.0.0.1     www.microsoft.com
127.0.0.1     www.my-etrust.com
127.0.0.1     www.nai.com
127.0.0.1     www.networkassociates.com
127.0.0.1     www.sophos.com
127.0.0.1     www.trendmicro.com
127.0.0.1     www.viruslist.com
127.0.0.1     ca.com
127.0.0.1     d66.myleftnut.info
127.0.0.1     f-secure.com

As you can see, most are security sites, micrososft is blocked, amazon, ebay and paypal are also blocked. I was hacked good and proper.