220-1002 · Question #519
A technician is working on an infected computer. After running a scan and removing the malicious software, only one issue remains. When opening up the browser, it is redirected to an unwanted site…
The correct answer is C. Hosts file. The hosts file (located at C:\Windows\System32\drivers\etc\hosts on Windows) maps hostnames to IP addresses and takes precedence over DNS resolution. Malware commonly modifies the hosts file to redirect legitimate domain names to malicious IP addresses. Since the browser…
Question
A technician is working on an infected computer. After running a scan and removing the malicious software, only one issue remains. When opening up the browser, it is redirected to an unwanted site. The technician checks the home page settings, and they are correct. The technician types the home page address in the browser, and it is still redirected. Which of the following does the technician need to edit to resolve this issue?
Options
- AMSConfig
- BRegistry
- CHosts file
- Dboot.ini
How the community answered
(32 responses)- A3% (1)
- B9% (3)
- C84% (27)
- D3% (1)
Explanation
The hosts file (located at C:\Windows\System32\drivers\etc\hosts on Windows) maps hostnames to IP addresses and takes precedence over DNS resolution. Malware commonly modifies the hosts file to redirect legitimate domain names to malicious IP addresses. Since the browser redirects even when the URL is typed directly and home page settings are correct, the redirect is happening at the name-resolution level - pointing to a tampered hosts file. MSConfig (A) manages startup programs and services. The registry (B) can store browser settings but the home page was already verified correct. boot.ini (D) controls OS boot options and is unrelated to browser redirects.
Topics
Community Discussion
No community discussion yet for this question.