16 réponses à ce sujet

[redp]

Hello.
Thank you for version 8 of Dr Web, it's appreciated.
On my system I have a customised Hosts File, and DrWeb is messing this up by sending it to quarantine, which is causing me problems.

In previous versions of DrWeb there was an option to check or uncheck a box to "Protect the host system file", yet in the new version this option is not there. Is there a reason for this?

Furthermore, I have customised my spiderguard settings, and set the Hosts file to "Allow" changes. When the file becomes quarantined, it cannot be restored to it's previous state. I have also tried to restore the quarantined file back to its location and that would not work.

For the time being I have added the Hosts file as an exclusion, though it remains to be seen if this will work or not.

Is there another way to stop DrWeb from scanning and quarantining the Hosts file? Or, could the option check or uncheck "Protect the host system file" be put back?

Modifié par redp, 23 d�cembre 2012 - 06:10.

[l.e.e.]

Hosts file - Allow, please.

Modifié par lazarev.ee, 23 d�cembre 2012 - 07:25.

[pig]

Preventive Protection does not quarantine hosts file. It is affected by Background Rootkit Scan. Add hosts file to SpIDer Guard excluded paths.

[redp]

As mentioned in the original post, the Hosts file is selected to "Allow" in the custom setting. See screen shot below.

Additionally, adding the Hosts file as an exclusion is not preventing DrWeb from quarantining the file. Please advice, as this is becoming seriously tedious. Thank you.

Fichier(s) joint(s)

•  drweb231212.png   49,67 Ko   0 téléchargement(s)

[userr]

redp,
It's not the Preventive Protection that causes problems, it's been already mentioned in post 3.

Furthermore, I have customised my spiderguard settings, and set the Hosts file to "Allow" changes.

Please let us see screen shot of this - spider guard settings, Exclusions. Put Hosts file there.

Modifié par userr, 23 d�cembre 2012 - 20:02.

[redp]

Spider Guard Exclusion screen shot.

Fichier(s) joint(s)

•  drweb-excl-201212-1.png   48,75 Ko   2 téléchargement(s)

[redp]

Please note, that the exclusion was added before I created this thread, and to show that the file was quarantined after adding the exclusion here is a screen shot of the quarantine manager.

edit: better clarification added.

Fichier(s) joint(s)

•  drweb-quar231212-1.png   50,44 Ko   0 téléchargement(s)

Modifié par redp, 23 d�cembre 2012 - 20:14.

[userr]

Spider Guard Exclusion screen shot.

Thank you. How do you update Drweb on your comp? Standard automatic update, as it set by default?
Would you please give us info about drweb Program modules (Drweb Agent--About--"copy to clipboard", then post here)

[redp]

Hi,
Please fiind below the information requested.

Fichier(s) joint(s)

•  drweb-about-241212-1.txt   9,09 Ko   5 téléchargement(s)
•  DrWeb-UpSet-241212-1.png   52,54 Ko   0 téléchargement(s)

[Bogdanus]

I have also this issue! It's really annoying :/
Is there a solution?

My Enviroment:
Win7 Ultimate SP1 32
Dr.Web Anti-virus 8

[Rolf Copter]

This sucks hardcore !!

 

Neuther Spider Guard exclusion works,

nor does

the Preventive Protection setting work on this.

 

I need my HOSTFILE customised, for i have a local development-server on my machine !

 

If this annoying behaiour goes on, i will have to deinstall Security Space 8, cuz it's unbearable !

 

Solution please !!!

[Rolf Copter]

OK the following seems to work :

 

The solution is to exclude it with the whitelist in SpiderGuard, but not to enter the real path but :

 

%SystemRoot%\System32\drivers\etc\hosts

 

 

 

Well, if i don't repost anything tomorrow, that means that it works in general.

 

 

Cheers guys

 

www.lab5.ch - Webdesign Schweiz

[SergM]

1. We put the hosts in the exception in SpIDer

2. In the setting of preventive protection, select permission to edit the file hosts.

3. Pens are making arbitrary changes to hosts.

 

http://forum.drweb.com/index.php?showtopic=312286&page=10#entry647754

[qfox]

Stop touching my hosts file retarded drweb!

And seems like there is no real solution ;-( I'm feels like I install a virus by self. Who the hell thinking he smarter the user? Dr.web only.

[duncan3]

I would like to thank DR Web for blocking   the hosts file from hacker intrusion .As someone who posts on news websites  of a political nature and I am a very outspoken person apt to tell the truth about World events I was attacked by =xxx/xxxx this was high power stuff. The only protection programme that put up the biggest resistance  was Dr.Web. I tried EVERY well known programme all failed.This was basic programme attack to block me from the internet. They still try using a programme not belonging to but used by MS to stop me. So God Bless .Dr.Web and long may it flourish.   

[jeron@cox.net]

I'm a web developer and NEED to change my HOSTs file. Ever since I bought Dr Web and installed it, I can't change it.

 

So am I to understand from this thread that it is time to uninstall Dr Web and re-install one of the other 3 anti-virus software that actually allow me to do my work? I've NEVER had this problem where anti-virus software was so stubborn and wouldn't let me do what I need to do to get my work done.

 

I've told preventative protection to allow HOSTS changes - THAT SHOULD BE ALL I HAVE TO DO - but I've also listed it as an exception to the "guard" component as well.

 

No matter what I do, it either won't allow me to save, saying I need to be an administrator (and I am) or it keeps rewriting the file with this as the last line...

 

# This HOSTS file cured by Dr.Web Anti-rootkit API

[Dmitry_rus]

It should be better to set Preventive Protection to "Ask" mode - viruses/trojans also can modify your HOSTS.

As mentioned above, you should

1. Add HOSTS in SpiderGuard's exclusions.

2. Reboot (strictly obligatory! Don't power off, reboot!)

Then you may change your HOSTS as you wish...