Windows 10: Find Out who reset HOSTS file ?

Hi

I have a custom hosts file which has a lot of entries redirecting back to 127.0.0.1 (this is normal)
One of my DNS servers is being updated, so I added a new entry to the hosts so I could get to my sites.
This worked fine.

After about 30 minutes I noticed I'd lost access to my site and when I checked my hosts file it's reverted back to how it was first thing this morning. All of my custom entries are there apart from the one for my server.

So something is monitoring and resetting it.. I've ZoneAlarm firewall and anti virus, avast anti virus and super anti spyware installed. I'm assuming it's one of them, but I'd like to be sure.

Is there any way to monitor the hosts file and see who/what is changing it ?

Thanks

:)

 

SOLVED: Can't Access Facebook

It turns out I have, in some way or another, modified the hosts file before I upgraded to Windows 10 and listed Facebook there. I have already removed it from the hosts file (which could be initially hard to find as it is hidden by default in Win 10) and
solved this issue.

Thanks to all who responded.

 

Windows 10 Windows Script Host Can not find script file

Check this out:

google chrome - What is causing "Can not find script file 2.0.1.9/madi.txt" in Windows Script Host - Super User :

http://superuser.com/questions/978655/what-is-causing-can-not-find-script-file-2-0-1-9-madi-txt-in-windows-script-ho

And you can use Process Explorer to find out which program caused the errr:

How to Determine the Program or Process that Owns an Error Message Window? - The Winhelponline Blog :

http://www.winhelponline.com/blog/determine-program-process-owns-error-message-window/

Also see:

Windows Script Host: Can not find script file ? - Forums - CNET : Windows Script Host: Can not find script file ? - Forums

It could be a malware.

 

Hi,

I had a similar experience. Same platform. I had a hosts file in which I had added a domain name. Worked for months and then one day there was no connectivity to the site. Worked out the 'hosts' file had reverted back to the default. I changed the 'hosts' file and all was well. The next day the same problem. This time I couldn't change the 'hosts' file. I tried changing a copy on the desktop and pasting it into the directory but the change would not take. In the end, I changed the desktop copy permission to read only and then copied across and this worked. Not sure why or what happened.

 

First off you do not need three programs doing the same thing. Second off, dump Zone Alarm. I would bet that Zone Alarm is your culprit. Behind a standard router with NAT, you are fine. You only need a Anti-Virus/Anti-Malware, which the one built into Windows does just fine.

All that the majority of security software do, is give you this warm fuzzy feeling when you are throwing money out to the companies that make them. They are no better from protecting a user from bad habits, as it is when you get behind the wheel of your car and know in the back of your head, that at any time someone may crash into you, but you do not know when.

I fun no Firewalls on any of my machines within my network, because there is no need for it. My router works very well in protecting from any attacks that may hit the main gateway or the Edge Router that I have my network devices connected to.

 

The purpose of a firewall is to not only block incoming but also outgoing connections for programs that you allow or disallow.

I don't use Zone alarm but there should be a setting that allows you to edit the hosts file and if not there it will be in your antivirus software.

I use Hostsman to edit my Hosts file .

On a related note if you use hosts file to redirect traffic you should disable DNS Client in services .msc