Some odd things in host file

I have some trojan (Trojan.MSIL.Krypt) and am trying to get rid of it. My scan found some anomaly in my hosts file:

127.0.0.1 download-avast.com
127.0.0.1 www.download-avast.com
127.0.0.1 telecharger-avast.com
127.0.0.1 www.telecharger-avast.com

it is asking me if i want to allow this, or remove it from there, and I have no clue. I figured I would ask here since it has avast in the name.
Halp?

With those entries in your HOSTS file, they prevent (reroute) you from connecting to those two URLs. They redirect to your local host IP address 127.0.0.1 where they would effectively fail.

That said they aren’t URLs that I have come across before.

+1

Maybe better to ask your question in the Virus and Worms section of the forum here:
https://forum.avast.com/index.php?board=4.0

I would be interested in what scan mailaddyftw was doing, as I can’t recall if avast checks the HOSTS file or not.

Trojan.MSIL.Krypt seems to not be a avast detection name … possible Ikarus/Emsisoft ?

IIRC, some time ago entries like that were added to the hosts file in an attempt to prevent the user from downloading the antivirus solution to defeat the virus.

I found some references to those entries on the SpyBot forum from 2007-2008!

Thanks all, I appreciate all the replies :heart:
As for what program I used, it was SpyHunter. I don’t really know much about any of this, so I just use what I THINK is good because friends said so. God, I sound like such a noob, but that’s just because I am one. lol ;D

SpyHunter is an expensive solution when Malwarebytes (FREE) could do the same thing for you.