PossibleHostsFileHijack

[alanb]

I got a message on my computer this morning from Windows Defender asking me
what to do about a suspicious file named Settings Modifier:
Win32/PossibleHostsFileHijack. This was identified as under the directory
C:\Windows\system32\drivers\etc\hosts. I responded to Windows Defender to
Clean the file which it did. However, when I now start my Microsoft Outllook
2007 with Microsoft CRM 3.0 added in I get the message that "An error
occurred loading Microsoft CRM functionality. Try restarting Outlook."

 

[Roady [MVP]]

Ask your IT admin if they had made any modifications to your hosts-file to
locate the CRM server on the network.

 

[alanb]

Roady

IT Admin tells me no modifications made to the hosts-file.

 

[alanb]

Roady:

Problem corrected by copying in a new hosts file

thx

 

[Roady [MVP]]

Then it is unlikely that the error is related to the cleanup action; just a
coincidence perhaps.

Verify the settings for CRM 3.0 addin and ask if anybody else has issues
accessing the system. Also check if the proper exceptions have been made to
your local firewall settings.

If all is well, reinstall the addin (and additional updates to it) and see
if it work now. Otherwise, have your IT admin make some network connection
tests on your machine to verify that the CRM system is indeed reachable via
your machine.

 

[Roady [MVP]]

Good to hear!
Probably the localhost entry (127.0.0.1) got cleared as well then.

 

[Peter Foldes]

Allan

I am reposting this since you multiposted

<repost>
This is another or should I say an actual Pcbutts hit. This fake MVP does not let
up. Avoid his links at all costs. You need to reformat your computer to get rid of
it (the only way) When you used that program it altered you hosts file among other
things and thus your issue.
<end repost>

Allan

Even if you change your hosts file you are still infected. This fake MVP Pcbutts not
only altered you hosts file but has deposited P0rn hijackers in untold amount and
also a small script that will continue to alter your hosts file back to his even if
you change it back. Many well known MVP's like Malke,PA Bear, Ken Blake,Kelly and
many others have been warning everyone when this fake MVP posts. Please tell your IT
department to reformat your system ASAP. He {Pcbutts}is a former US Government
programmer and has gone off the deep end since a serious car crash. His link that
you or someone opened is very very dangerous as you can see and will see.


--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.