No clue what you're on about but it's the cracker that added those lines to your hosts file (90% sure) .