Hosts File Nightmare
-
I modified my hosts file in Windows this morning to block some ads. It ended up nearly bricking my Win 10 machine. Press the start button and type "cmd" and nothing showed up. Windows Defender decided it was a virus that modified the file and blocked all Internet. 90 minutes later and lots of help, we rolled back the hosts file to empty and my machine is working again.
Hogan
-
I modified my hosts file in Windows this morning to block some ads. It ended up nearly bricking my Win 10 machine. Press the start button and type "cmd" and nothing showed up. Windows Defender decided it was a virus that modified the file and blocked all Internet. 90 minutes later and lots of help, we rolled back the hosts file to empty and my machine is working again.
Hogan
That's odd. I have never heard of it doing that. My hosts file is over 620KB and I add to it almost weekly. WD has never done anything like that to me.
"They have a consciousness, they have a life, they have a soul! Damn you! Let the rabbits wear glasses! Save our brothers! Can I get an amen?"
-
That's odd. I have never heard of it doing that. My hosts file is over 620KB and I add to it almost weekly. WD has never done anything like that to me.
"They have a consciousness, they have a life, they have a soul! Damn you! Let the rabbits wear glasses! Save our brothers! Can I get an amen?"
-
u could actually make a selective one rather...14mb would have a lot.. and chances of breaking msf and google links...also amzon... considering most of the host have shared js etc...if u really want to test you need to turn off windows security completely and also set exclusion etc..and do proper web access testing ... since you blocked most of the net you should be secure...
Caveat Emptor. "Progress doesn't come from early risers – progress is made by lazy men looking for easier ways to do things." Lazarus Long
-
I modified my hosts file in Windows this morning to block some ads. It ended up nearly bricking my Win 10 machine. Press the start button and type "cmd" and nothing showed up. Windows Defender decided it was a virus that modified the file and blocked all Internet. 90 minutes later and lots of help, we rolled back the hosts file to empty and my machine is working again.
Hogan
If blocking sites using the hosts file is the sort of thing you like to do, you might be a candidate for [Pi-hole](https://pi-hole.net/). Despite its name, it's not just for the Raspberry Pi. I have it running on a tiny VM running Debian dedicated to it. My machines now use the VM's IP as their primary DNS, so *all* devices on my network get all the same sites blocked. The community at large is maintaining the list, so it's pretty good and up to date. Of course, you can add your own blacklist/whitelist.
-
If blocking sites using the hosts file is the sort of thing you like to do, you might be a candidate for [Pi-hole](https://pi-hole.net/). Despite its name, it's not just for the Raspberry Pi. I have it running on a tiny VM running Debian dedicated to it. My machines now use the VM's IP as their primary DNS, so *all* devices on my network get all the same sites blocked. The community at large is maintaining the list, so it's pretty good and up to date. Of course, you can add your own blacklist/whitelist.
-
I modified my hosts file in Windows this morning to block some ads. It ended up nearly bricking my Win 10 machine. Press the start button and type "cmd" and nothing showed up. Windows Defender decided it was a virus that modified the file and blocked all Internet. 90 minutes later and lots of help, we rolled back the hosts file to empty and my machine is working again.
Hogan
My host file is "mostly" the MVPS one, but some custom entries are added to that. Meaning, no ads on youtube. No insecure ads loaded on the machine, all is blocked, every site. It is my machine and I control what gets executed and what isn't even downloaded. Anyone can buy ads and spread malicious code. It's a little program in C# that keeps it up to date. For a few computers :) Modifying the host file doesn't impact the abilities of the "run" command on Windows, so that has nothing to do with cmd not executing.
Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
-
snorkie wrote:
at the office its probably a bad idea
Obviously if you are in a corporate environment (your IT dept should be blocking the crap for you anyway), but if it is a small company with local IT expertise, pi-hole would probably be ideal.
So old that I did my first coding in octal via switches on a DEC PDP 8
-
My host file is "mostly" the MVPS one, but some custom entries are added to that. Meaning, no ads on youtube. No insecure ads loaded on the machine, all is blocked, every site. It is my machine and I control what gets executed and what isn't even downloaded. Anyone can buy ads and spread malicious code. It's a little program in C# that keeps it up to date. For a few computers :) Modifying the host file doesn't impact the abilities of the "run" command on Windows, so that has nothing to do with cmd not executing.
Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
Would you be interested in sharing? We do a lot of stuff in C# and I'm always on the lookout for improved ways to block unwanted data from hitting our network. We use a robust 3rd party Endpoint service and are pretty happy with it, but this thread caught my eye.
-
I modified my hosts file in Windows this morning to block some ads. It ended up nearly bricking my Win 10 machine. Press the start button and type "cmd" and nothing showed up. Windows Defender decided it was a virus that modified the file and blocked all Internet. 90 minutes later and lots of help, we rolled back the hosts file to empty and my machine is working again.
Hogan
I don't mind adding to my hosts file on a weekly basis. The "problem" I had was the constant renaming (hosts to hosts.tmp and vice-versa) when a legitimate site wouldn't load and I needed the hosts files turned off for a second. I then started using HostsMan. Things are way simpler now.
"One man's wage rise is another man's price increase." - Harold Wilson
"Fireproof doesn't mean the fire will never come. It means when the fire comes that you will be able to withstand it." - Michael Simmons
"You can easily judge the character of a man by how he treats those who can do nothing for him." - James D. Miles
-
I modified my hosts file in Windows this morning to block some ads. It ended up nearly bricking my Win 10 machine. Press the start button and type "cmd" and nothing showed up. Windows Defender decided it was a virus that modified the file and blocked all Internet. 90 minutes later and lots of help, we rolled back the hosts file to empty and my machine is working again.
Hogan
I rarely edit my hosts file these days: I opted instead for setting up a Pi Hole on a Raspberry Pi. It’s got 1.5 MM entries in it from various lists. All devices on my LAN point to it as the DNS.
Time is the differentiation of eternity devised by man to measure the passage of human events. - Manly P. Hall Mark Just another cog in the wheel
-
I rarely edit my hosts file these days: I opted instead for setting up a Pi Hole on a Raspberry Pi. It’s got 1.5 MM entries in it from various lists. All devices on my LAN point to it as the DNS.
Time is the differentiation of eternity devised by man to measure the passage of human events. - Manly P. Hall Mark Just another cog in the wheel
Same. Works like a champ and Windows can't stop the magic.
Jeremy Falcon
-
I modified my hosts file in Windows this morning to block some ads. It ended up nearly bricking my Win 10 machine. Press the start button and type "cmd" and nothing showed up. Windows Defender decided it was a virus that modified the file and blocked all Internet. 90 minutes later and lots of help, we rolled back the hosts file to empty and my machine is working again.
Hogan
It happened in the W8 era, too: [Hosts file is detected as malware in Windows Defender - Microsoft Support](https://support.microsoft.com/en-us/topic/hosts-file-is-detected-as-malware-in-windows-defender-4320fa8b-0d54-1129-db85-61f095144521)
-
Would you be interested in sharing? We do a lot of stuff in C# and I'm always on the lookout for improved ways to block unwanted data from hitting our network. We use a robust 3rd party Endpoint service and are pretty happy with it, but this thread caught my eye.
Can rewrite it in C# in a bit, it's not a piece of art or complex. Might be worth an article. Basically, you send a header to the MVPS host file, asking if there's a change to the file since that date. If it is, download and put it somewhere (I used SQLite, to propagate across my linked pc's). Add your own domains to it, merging two text files. Then overwrite your hostfile. Could prolly be done from a powershell script, but for me it was quicker in C# because I have more familiarity with C#. The PI Hole might work better, especially for a network, and your host file should not be huge. I like it because it works nicely on laptops where the PI Hole isn't always available. But basically it is download and merge, and the only nice thing about it is that it asks the MVPS host file if it changed, and if it didn't it won't download again. So, not a huge project, but I find it valuable for the moments that all other stuff fails.
Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
