It's an artefact of the install routine that leaves these files behind and they are normally cleared away upon next reboot.

Alas, I don't use Spybot or Kaspersky so not able to have a play myself, but... this doesn't look right in the logs:

Quote:

Events
------
Event Object Name Time Traffic
----- ----------- ---- -------
Selecting update source http://127.0.0.1

That IP address is known as the loopback address and basically means "myself".... I'd expect that it should be updating itself from a source on the internet, but as I say I don't have the software so it maybe that it's proxying through something else? Is there a firewall installed on the PC? 

2009 Outstanding Contribution Award - Joint Runner Up
2009 'Tech-Head Of The Year' Award - Runner Up

Like it here? Then Donate to RRSPORT!!

S, I found on the kaspersky website that there are a lot of viruses which use the HOSTS file to prevent the user from connecting to the anti-virus company site.

It says (With XP) to go to folder 'SYSTEM32/DRIVERS/ETC' and correct the file by deleting all the lines except 127.0.01 localhost ( )

When I go into this folder, there are 6 files, none of which are accessible.

They are:

hosts
hosts.20081005-174756.backup
lmhosts
networks
protocol
services

As I can't open or access these i'm now stumped.

Trying to navigate the kaspersky hep site is nigh on impossible too!  Runner up - 2009 Best Avatar Award
Joint runner up - 2009 Outstanding Contribution Award
WINNER - 2008 ‘Best Thread’ Award – Beautiful Women Of The World
Runner Up - 2008 Comedian Of The Year Award
Runner Up - 2008’s Funniest Incident

06 RRS TDV6 HSE, Java/Ebony, PTI, Running Boards, Privacy, S/C Grille/Vents, Stormers, Tasmods - GONE - (

When you say they're inaccessible, what do you mean? These files don't have extensions (like .txt or .doc for example), but you can open them in Notepad and edit them from there  

2009 Outstanding Contribution Award - Joint Runner Up
2009 'Tech-Head Of The Year' Award - Runner Up

Like it here? Then Donate to RRSPORT!!

Yeah, they don't have extensions.

Will try in notepad...

Thanks S  Runner up - 2009 Best Avatar Award
Joint runner up - 2009 Outstanding Contribution Award
WINNER - 2008 ‘Best Thread’ Award – Beautiful Women Of The World
Runner Up - 2008 Comedian Of The Year Award
Runner Up - 2008’s Funniest Incident

06 RRS TDV6 HSE, Java/Ebony, PTI, Running Boards, Privacy, S/C Grille/Vents, Stormers, Tasmods - GONE - (

F K ME!!!!!

If there is only supposed to be one line in there, 127.0.0.1 localhost...

There is about a million and one!

AND it says underneath the above line

'# Start of entries inserted by Spybot - Search & Destroy'

Shal I delete all the other ones then? Runner up - 2009 Best Avatar Award
Joint runner up - 2009 Outstanding Contribution Award
WINNER - 2008 ‘Best Thread’ Award – Beautiful Women Of The World
Runner Up - 2008 Comedian Of The Year Award
Runner Up - 2008’s Funniest Incident

06 RRS TDV6 HSE, Java/Ebony, PTI, Running Boards, Privacy, S/C Grille/Vents, Stormers, Tasmods - GONE - (

I would Delete all entries associated with Spybot , save the file then reboot. Hopefully that will sort it.

Done all that!

Now looks like I have to uninstall current version of Kaspersky (6.0.0.303), save activation details and download new version 8.0.0.545!!!

If that doesn't work, it's going the same way as my iPod!



















(In the f g pool!)  Runner up - 2009 Best Avatar Award
Joint runner up - 2009 Outstanding Contribution Award
WINNER - 2008 ‘Best Thread’ Award – Beautiful Women Of The World
Runner Up - 2008 Comedian Of The Year Award
Runner Up - 2008’s Funniest Incident

06 RRS TDV6 HSE, Java/Ebony, PTI, Running Boards, Privacy, S/C Grille/Vents, Stormers, Tasmods - GONE - (

Might be the registry , there is a reg file you can download install and it cleans all spybot registry entries ... might help ?

Link here ,,,

http://www.safer-networking.org/files/remo...ttings.reg

Do the activation details work across versions?

A lot of hardening guides will suggest setting the hosts file to read only so it's less easy for other apps to hijack it. You might want to do this - in Explorer, right-click the file, select Properties and at the bottom of the dialog box select the Read Only check box and click OK.

By rights, now you've reset your hosts file to it's normal state you may well be able to update Kaspunky across the internet anyway, unless you've since uninstalled it of course  

2009 Outstanding Contribution Award - Joint Runner Up
2009 'Tech-Head Of The Year' Award - Runner Up

Like it here? Then Donate to RRSPORT!!

Go on chuck it in the pool - then buy a mac  Porsche Cayenne S Diesel 66 Plate

It is currently sat next to the pool awaiting a good dousing!

Tried EVERYTHING I can think of and still isn't working.

I bought KIS 2009 for my work laptop and apparantly it is for up to 3 seperate machine installations. Looks like that is my only option left

Thanks for all your help and advice, some more constructive than others... (Pelyma! ) Runner up - 2009 Best Avatar Award
Joint runner up - 2009 Outstanding Contribution Award
WINNER - 2008 ‘Best Thread’ Award – Beautiful Women Of The World
Runner Up - 2008 Comedian Of The Year Award
Runner Up - 2008’s Funniest Incident

06 RRS TDV6 HSE, Java/Ebony, PTI, Running Boards, Privacy, S/C Grille/Vents, Stormers, Tasmods - GONE - (

Mate, you can fly me out to fix it for you if you like  

2009 Outstanding Contribution Award - Joint Runner Up
2009 'Tech-Head Of The Year' Award - Runner Up

Like it here? Then Donate to RRSPORT!!

Was just about to book your flight....

.... when I tried KIS 2009 as mentioned in earlier post.

Seems that it was an internal fault with the KIS version 6.0 as now it works fine.

Crisis over.

Oh yeah, Shmoogle you can put your shorts and suncream away now but thanks for the help anyway  Runner up - 2009 Best Avatar Award
Joint runner up - 2009 Outstanding Contribution Award
WINNER - 2008 ‘Best Thread’ Award – Beautiful Women Of The World
Runner Up - 2008 Comedian Of The Year Award
Runner Up - 2008’s Funniest Incident

06 RRS TDV6 HSE, Java/Ebony, PTI, Running Boards, Privacy, S/C Grille/Vents, Stormers, Tasmods - GONE - (

 

2009 Outstanding Contribution Award - Joint Runner Up
2009 'Tech-Head Of The Year' Award - Runner Up

Like it here? Then Donate to RRSPORT!!