SettingsModifier:Win32/HostsFileHijack

Question

SettingsModifier:Win32/HostsFileHijack

file: C:\Windows\System32\drivers\etc\hosts

I keep getting this severe threat detected message on my Windows 10  Pro PC.

Windows defender catches it at boot up, says it is quarantined.

Then next boot up, it does the same thing.

I have tried to delete the threat through Windows defender UI.

I have tried running Windows Defender in offline mode.

Still, it comes back every reboot.

Answer 1

Try running these programs:

MBAM free: https://www.malwarebytes.com/mwb-download/

Eset online scanner: http://www.eset.com/us/online-scanner/

Adwcleaner: https://www.malwarebytes.com/adwcleaner/

If these find one or more infections but do not fully remove them it will be wise to register with a malware removal site to receive dedicated malware removal instructions, an expert will remain with you throughout the process until confirmation that your PC is 100% clean.

Malwarebytes virus/malware removal forum:

https://forums.malwarebytes.com/forum/7-windows...

Bleeping computer malware/virus removal forum:

https://www.bleepingcomputer.com/forums/forum22...

Disclaimer - This post contains reference to non-Microsoft websites and there may be ads on the page for products & services including products frequently classified as a PUP (Potentially Unwanted Product). Please thoroughly research any product / service advertised on the page before you decide to use them. Your discretion is very much advised.