Kaspersky detects HOSTS as: Trojan.Win32.Hosts2.gen

Update: Kaspersky has corrected the issue with a new revision update ... however it appears a reboot is required.

Here we go again ... the folks over at Kaspersky in their latest update (03-14-2013) have added something that detects all custom HOSTS files as "Trojan.Win32.Hosts2.gen" (gen = generic). Hopefully they will reissue another update to fix this false-positive.

If you read thru a post in their Forum you will see that not only the MVPS HOSTS is detected ... but quite a few other recourses as well.
http://forum.kaspersky.com/index.php?showtopic=259180&st=0#entry2003103
http://forum.kaspersky.com/index.php?showtopic=259177

I do not use Kaspersky ... however a possible work-around until Kaspersky solves the problem:

Settings --> Threats & Exclusions --> Exclusions --> Settings --> Add --> Select file or Folder --> C:\Windows\System32\drivers\etc\

Folks as I've said before ... anytime after running a scan of any security related product and the only detection is one or more entries in the HOSTS file, this is most likely a false-positive and should be ignored, or excluded from future scans.

There is no known infection that only affects the HOSTS file!

Published Sat, Mar 16 2013 1:06 by winhelp2002

Comments

# re: Kaspersky detects HOSTS as: Trojan.Win32.Hosts2.gen

Saturday, March 16, 2013 4:24 AM by kimsland

The problem has been..  solved.

forum.kaspersky.com/index.php

You can now either:  reset the Hosts file back to the default: support.microsoft.com/.../972034

Or download mvps host from winhelp2002.mvps.org/hosts.htm

# re: Kaspersky detects HOSTS as: Trojan.Win32.Hosts2.gen

Saturday, March 16, 2013 6:43 AM by Frederik

Kaspersky does it again, will they ever learn?

# re: Kaspersky detects HOSTS as: Trojan.Win32.Hosts2.gen

Sunday, March 17, 2013 11:33 AM by Bruno

Ok, now Kav2013 fixed it.

Other question: when I use skype with host file AND also my videopartner also use HOSTS, skype slows down and it is near impossible to use it.

Just eliminating hosts in both side skype returns running as usual.

have you noted this case or maybe is my pc?

Bruno

Bruram48@virgilio.it

# re: Kaspersky detects HOSTS as: Trojan.Win32.Hosts2.gen

Tuesday, March 19, 2013 1:00 AM by Kassie

Hi, Thanks for your post. I had the issue mentioned above after trying to install an internet security program (K9). Would this have triggered the malware alert? Thought that's what you were saying, but I just wanted to verify. I'm a newb...like pre-newb. Just wanted to make sure my computer wasn't about to burst into flames :)

I uninstalled to program, just to be safe, but the Kaspersky warning is still popping up. Any tips? Can I download the K9 program again without any bad things happening?

I'll try updating, but I just wanted to ask in case it doesn't work...

Thanks!