Hosts file gets deleted automatically.

prashant marne

unread,

Jul 16, 2007, 4:58:14 AM7/16/07

to yash...@gmail.com, prakash...@gmail.com

Hi all,

I am using Windows XP
and my 'hosts' file (located in C:/WINDOWS/system32/drivers/etc/hosts)
gets deleted automatically .
I am able to edit that file with edit in a command prompt.
But whenever i try to open that file or any other file from the same
directory (i.e. /etc) my hosts file gets deleted.
I can see it disappearing.

I have done enough googling for solving this issue but no luck
also i tried AVG - anti virus, malware sweeper and Hijackthis but none
of those worked.

Any idea how can i solve this issue.
Help appreciated.
Thanks,
Prashant Marne.

Nil

unread,

Jul 16, 2007, 9:30:39 AM7/16/07

to

On 16 Jul 2007, prashant marne <prash...@gmail.com> wrote in
alt.comp.virus:

> Any idea how can i solve this issue.

How about marking it Read Only, for a start?

chris

unread,

Jul 17, 2007, 5:51:11 AM7/17/07

to

"prashant marne" wrote

> I am using Windows XP
> and my 'hosts' file (located in C:/WINDOWS/system32/drivers/etc/hosts)
> gets deleted automatically .
> I am able to edit that file with edit in a command prompt.
> But whenever i try to open that file or any other file from the same
> directory (i.e. /etc) my hosts file gets deleted.
> I can see it disappearing.

I couldn't recreate your problem.
Tried it from the command prompt and I see nothing disappear.
Edit another file in /etc and nothing disappear.
I normally use Explorer to go to /etc and clicking on hosts I select wordpad
to open the hosts file.
Made some changes and saved it ( sometimes the file is in use and sometimes
not but it could be saved ).
Copying the hosts file from somewhere else to overwrite hosts in /etc always
succeeded.

Maybe you could use Filemon to see what program loves to remove your hosts
file.
Nil already suggested : "How about marking it Read Only, for a start? " ;
did that any good?
Do you have some virusguard active?

Vanguard

unread,

Jul 18, 2007, 1:34:36 AM7/18/07

to

"prashant marne" wrote in message
news:1184576294.7...@e9g2000prf.googlegroups.com...

> I am using Windows XP
> and my 'hosts' file (located in C:/WINDOWS/system32/drivers/etc/hosts)
> gets deleted automatically .
> I am able to edit that file with edit in a command prompt.
> But whenever i try to open that file or any other file from the same
> directory (i.e. /etc) my hosts file gets deleted.
> I can see it disappearing.

Use the 'attrib' command to see what file attributes are set on the
"hosts" file. Could be it marked with the hidden or system file
attributes. Just because a file is hidden doesn't mean that you are
barred from editing it.