This means that the connection is effectively blocked, and the user will not be able to access the piracy-connected website.Īccording to Sophos, reverting your HOSTS file once it has been infected is actually quite easy, and the malware does not reinfect the system unless you run it again. When the malware infects a computer, it directs the system to a “dead” IP address, instead of loading the actual IP address of the website. The internet works through IP addresses, but domain names for websites help users quickly connect to them without remembering the IP address for each website. The HOSTS file is a small file used by operating systems like Microsoft Windows to control network connections on the system, and the malware uses this file to “block” the system from connecting to several domains associated with piracy-related websites. In a blog post, Sophos' lead researcher Andre Brandt states that the malware is one of the strangest cases he's seen in a while, and states that the vigilante malware modifies the HOSTS file on the computer it is run on. Some of the infected pirated software that contain the “vigilante” malware.
0 kommentar(er)
