[morkike]

haha no not again

[Phantom010]

Originally Posted by Ent

If I were a gambling man I'd say it's the address.
If you want to hijack a site, you don't send people back to their computer. You send them off to some server of your own. I'll suggest that HJT filters anything with the 127. IP.
On my own log, even though I've got a SpyBot Hosts file full of malicious domains pointing back to 127.0.0.1, the only HOSTS line is

O1 - Hosts: ::1 localhost

Incidentally I'd be surpirsed that any malware would do that, but I don't have anything else more solid than a bog standard conspiracy theory.

You're absolutely right. I completely forgot about that important detail. If the line had been 145.10.12.22 youtube.com for instance, that would have shown in HijackThis.

However, in some cases, we would benefit from seeing those entries in HijackThis...

[Phantom010]

By the way, you can make it a little harder to tamper with the Hosts file.

Right-click it and select Properties.

Make the file Read-only.