How should the Hosts file look on Windows?

The system folder of any operating system is for the average user a "dark forest". If you are not sure that the problem with the computer lies in it, then do not touch anything there at all and give the opportunity to deal with the problems to professionals. Today, we'll talk about what threats carry a small and inconspicuous text file. How should the Hosts file look like ? How to distinguish it from a virus?

Definition

First, let's figure out what kind of animal this is - Hosts? This file is responsible for blocking Internet pages and redirecting ip-addresses. If you register the web address of an Internet resource in it, then the user of the computer will not be able to go to the blocked site or will be redirected to another link specified in the file.

In fact, this file is used by most system administrators to disable social networks for employees at work, as well as to organize parental controls and block unwanted sites for children. So if you can not get to any resource from a working computer, be sure to check the contents of the file first, which we'll talk about a little further. So how does the Hosts file look like ?

Content

The main thing that determines the truth of the file and its belonging to the system, rather than viruses, is its contents. Or rather, the text written in it. How should the Hosts file in Windows 7 and other operating systems look like from the inside?

To open the file we are studying, use the Notepad program. Before you will appear English-language instruction on the use of this tool. It consists of 20 lines beginning with the "#" symbol. Here is the sample content:

• The first line contains the rights to OS. 1993 -... - Year of existence of Microsoft. The second number will be the release date of your OS version. You can verify the authenticity of the file by right-clicking on "My Computer - Properties". There you can find the version and date of release of the OS. They must match the file.
• Then there are 10 lines explaining what this file is for.
• And, finally, examples of how to register a lock.

Location:

The location of the file also plays an important role. How will the file we are considering perform its function if it is not in the correct folder?

So, what should the Hosts file look like and where it should be located. Depending on the OS version, it can be in different folders, but it will always be initially Windows system:

• For Win98 and ME, the Hosts file is located at the root of C: \ WINDOWS.
• In WinXP and later versions, Hosts is located in the following directory: C: \ WINDOWS \ SYSTEM32 \ DRIVERS \ ETC. It is here that the working version of the file is located, if you are backing up the system or it initially contains several switched versions and patches. Then you can find the second, similar copy of the file, but it will also be in the system folder.

The size

What does the correct Hosts file look like? Its size is also initially defined. If you opened and saw only what was described in the previous paragraph, then the file size will be 824 bytes. Either it will be empty if instructions are removed from there.

Any rejection suggests that there was something written in the file other than comments. On the one hand, it can be entered by system administrators sites. On the other hand, if it is a home computer and you are absolutely sure that nobody has "chemized" with it, it is worth considering whether it is a virus.

The main thing - remember that no antivirus works with the Hosts file. More precisely, security programs block the possibility of changing the file by programs from an unknown producer. Thus, no one without your knowledge can enter there any information, block access to your favorite sites or, worse, redirect to a copy of the portal you need, where you can inadvertently enter your personal data, which will later reach the attackers. But if this happens, then quickly check the computer for viruses.

Virus

Now you know what the Hosts file should look like. Still it is necessary to understand how it should not look.

• This file is not hidden, that is, by going to the system folder in which it is located, you can always see it. If he tries to disguise himself, this is at least a sign of viral activity.
• If you find it in a folder other than the one listed above, delete it, and it reappears, it should also alert you.

Among other things, the registry can help with the question of how the Hosts file should look. The fact is that the path to the file is prescribed in a very specific directory, and thus you can determine whether the file you found is a true or false (virus).

1. To view the Hosts location in the registry, run the command prompt and type regedit.
2. Path: HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ services \ Tcpip \ Parameters
3. Clicking on the options folder, we translate the view to the right. In the list of parameters, we are interested in DataBasePath. It is in it that the path to the true Hosts file is registered. Any deviation from this path means that the file you found is a malicious program.

That's all. We analyzed all the characteristics and determined what the Hosts file should look like in fact.