David H. Lipman wrote:

> From: "Beauregard T. Shagnasty"
>| Lil' Abner wrote:
>>> I'm curious as to how the malware blocked access to all the
>>> antivirus and antimalware sites. They were not in the HOSTS file.
>
>| Someone mentioned in one of these groups recently, that some malware
>| changes the Windows (registry?) pointer to the *location* of the
>| hosts file, and uses one of its own.
>
>| Sorry, I can't find a link at the moment.
>
> Registry location:
> HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Param eters
> DataBasePath

Well, there ya go. <g> Li'l Abner should see what's there, and report
back.

--
-bts
-Friends don't let friends drive Windows