Hosts File Being Changed By Bitdefender 2010

I have Bitdefender 2010. Operating system is Windows XP. I searched for this issue but did not find anything that applies to Bitdefender 2010 (only 2012). The 2012 solution to this issue does not apply to 2010.

Within the past few days, Bitdefender 2010 has modified my hosts file and will not let me change it back to the way I want it.

I am one of few people left in the world who still use dial-up internet access. I use the hosts file to block advertising on sites that I use frequently to speed up loading the pages. Now Bitdefender has messed up my hosts file.

How do I switch my hosts file back to the way I had it without BitDefender "fixing" it for me?

How do I turn off this new "feature"?

Find more posts tagged with

Comments

rootkit

Hello

Welcome to the forums.

Could you please send me the hosts file so I can take a look?

Please pack that file in archive with the password infected and send me a PM with it.

If the file is too big to attach it, upload it on

http://www.sendspace.com

http://www.mediafire.com

and send me a PM with the download link.

We will analyze the information you sent and then reply with a possible solution in the shortest time.

Have a nice day.

rootkit

Hi Richard.

Can you upgrade for free to Bitdefender 2012?

http://forum.bitdefender.com/index.php?act...f=196&id=42

Thank you.

dialer10

Hi Richard.

Can you upgrade for free to Bitdefender 2012?

http://forum.bitdefender.com/index.php?act...f=196&id=42

Thank you.

Hi Christian,

Can you send me an installation disk so I don't have to download the upgrade?

I have BitDefender Antivirus 2010. The closest thing I can find for my "FREE" upgrade is BitDefender Antivirus "PLUS" 2012. Are you going to charge me to upgrade to "PLUS"?

I can download the installation kit file but I suspect the first thing it will do is start downloading some huge file that will take me hours and hours to get.

I went searching for the "FREE" downloadable program file but I have to buy something first in order to download the "FREE" file!! How free is that!?!?!

FYI - I am not happy about this. You folks messed with my configuration and cannot make corrections. Now, your solution is for me to jump through hoops and install a new program.

rootkit

Hello

There is no extra charge. If you have Bitdefender Antivirus 2010, you upgrade to Bitdefender Antivirus Plus 2012.

You install the software and register it with the old license key.

The installation kit is small, like 1 MB. All the required files will be downloaded from our servers.

Also, I have replaced the host file on a machine with Bitdefender 2010 and tried to modify it and Bitdefender did no block it with qhosts detection.

Let me know if you have other questions.

Take care.

BitDefender Log File

Product: BitDefender Total Security 2010

Version: BitDefender Antivirus Scanner

Scanning task: Contextual Scan

Log date: 3/21/2012 21:24:56

Log path: C:\Documents and Settings\Devirusare\Application Data\BitDefender\Desktop\Profiles\Logs\contextual\1332357896_1_00.xml

Scan paths:

Path 0000: C:\WINDOWS\system32\drivers\etc\hosts

Scan Level:

Scan for viruses: Yes

Scan for adware: Yes

Scan for spyware: Yes

Scan for applications: Yes

Scan for dialers: Yes

Scan for rootkits: No

Scan for keyloggers: Yes

Virus Scanning Options:

Scan registry keys: No

Scan cookies: No

Scan boot sectors: No

Scan memory processes: No

Scan archives: Yes

Scan runtime packers: Yes

Scan e-mails: Yes

Scan all files: Yes

Heuristic Scan: Yes

Scanned extensions: not configured

Excluded extensions: not configured

Target Processing:

Default first action for infected objects: Disinfect

Default second action for infected objects: None

Default first action for suspect objects : None

Default second action for suspicious objects: None

Default action for hidden objects: None

Default first action for encrypted infected objects: Disinfect

Default second action for encrypted infected objects: None

Default first action for encrypted suspicious objects: None

Default second action for encrypted suspicious objects: None

Default action for password-protected objects: Prompt for password

Scan Engines Summary

Virus signatures: 6951070

Archive plugins: 49

E-mail plugins: 7

Scan plugins: 15

System plugins: 5

Unpack plugins: 10

Basic

Scanned items: 1

Infected items: 0 (no infected items have been detected)

Suspect items: 0 (no suspected items have been detected)

Hidden items: 0 (the scan options do not include scanning for rootkits)

Resolved items: 0 (no threats have been detected during this scan)

Unresolved items: 0 (no issues remained unresolved)

Advanced

Scan time: 00:00:01

Files per second: 1

Skipped items: 0

Password-protected items: 0

Over-compressed items: 0

Individual viruses found: 0

Scanned folders: 0

Scanned boot sectors: 0

Scanned archives: 0

Input-output errors: 0

Scanned processes: 0

Infected processes: 0

Scanned registry keys: 0

Infected registry keys: 0

Scanned cookies: 0

Infected cookies: 0

dialer10

Hello

There is no extra charge. If you have Bitdefender Antivirus 2010, you upgrade to Bitdefender Antivirus Plus 2012.

You install the software and register it with the old license key.

The installation kit is small, like 1 MB. All the required files will be downloaded from our servers.

Also, I have replaced the host file on a machine with Bitdefender 2010 and tried to modify it and Bitdefender did no block it with qhosts detection.

Let me know if you have other questions.

Take care.

Christian,

Your result to editing the hosts file is inconsistant with my result so here is what I did to find a problem.

I created a hosts file with one line in it: "127.0.0.1 localhost"

BitDefender did NOT have a problem with this.

Then I started typing the entries from my hosts file:

* type one entry

* save hosts file

* verify hosts file content

* repeat

I kept typing entries, one at a time, until BitDefender rejected my edit. I worked with editing the hosts file until I came up with the following lines that BitDefender does not like:

127.0.0.1 us.ard.yahoo.com

127.0.0.1 hotjobs.yahoo.com

127.0.0.1 yahoo.ytsa.net

127.0.0.1 global.ard.yahoo.com

I also invented some entries with the word "yahoo" and BitDefender did NOT like any of them. Placing a pound sign (#) at the beginning of the line isolates the word "yahoo" and BitDefender is okay with that.

So, please see if you can reproduce the problem. Put some yahoos in your BitDefender 2010 system hosts file and let's see what happens.

rootkit

Hello

I managed to reproduce the situation and I will send the results to our labs.

Get back to you ASAP with the results.

Take care.

dialer10

Hello

I managed to reproduce the situation and I will send the results to our labs.

Get back to you ASAP with the results.

Take care.

Wow, I found a bug in the program! Do I win a prize? (Just kidding)

Thanks for working with me on this. I will look forward to your response.

rootkit

Hello

It is not OK to redirect Yahoo domains at "127.0.0.1".

If hosts file is modified to deny access to some URLs, then Bitdefender detects it as malware.

The guys from our labs will analyze this situation and they will see what to do to modify this detection in order to be less restrictive.

Thank you very much for reporting it and have a great weekend.

Take care.

lain

Hello!

I had the same issue, I block some ads from msn messenger using also the hosts file.

To stop this behavior, I set hosts file in the antivirus exclusion list.

Settings > Antivirus > Exclusions

Activated Exclusions for files (ON)

Select the file you wanted to be exclude in "Excluded files and folder".

Choose the exclusion mode

rootkit

Hello

Welcome to the forums!

You can do that, but if you set it to exclusions, malware can modify it too.

Take care.

rootkit

Hello

You will receive the new license key via PM in maximum 2 minutes.

Thank you!

Biblo

I have still this issue. How can I edit the file without that bitdefender changes it?