Windows 10: Hosts file. Should it be set to read only?

Since using XP and then Windows 7 have always set the Hosts file to read only as a security measure.

Is it still advisable to do this on Windows 10?

:)

 

should my windows file be read only

My windows 10, should be 1709 edition, now reads "read only". Nobody has any permissions & I'm unable to upgrade permissions. How do I get out of this mess?!

 

should my windows file be read only

Hi Carol,

I found a link with a fix for this issue. It has mixed reviews on the comments, some had it working, some not, but it's worth a shot.

https://blog.switchfast.com/solved-windows-10-u...

Please let me know, and we'll go from there!

- C

 

I don't think it matters its pretty trivial for malware to change it back to read write if its needs to. Some virus scanners ( I think Malwarebytes pro ) make it read only.

I have been using a program called HostsMan for years and that seems to help with not only Malware but for adds too. There is a bit of a learning curve when you first start using it though, probably half hour of reading of how to use it properly.

 

By default the hosts file is owned by SYSTEM and you can only read. If you want to write to it you need to do so as administrator (for example notepad will not let you save your changes unless you run it as administrator).

So your malware couldn't do anything to it unless you clicked said "yes" to the "Allow this program to make changes to your PC" prompt that UAC gives you whenever a program tries to run as Administrator.

If you have UAC turned off or if you say "Yes" to that prompt then malware can do whatever it likes anyway (take ownership, change permissions etc) and making it read only wouldn't help at all.

I'd leave it as it is.

 

The Read Only file attribute isn't a viable security measure. This is only an advisory that the file should not be written to. Windows Explorer and alternative file managers usually honor this advisory but it can be easily ignored. You can be sure that malicious software will simply ignore the setting.

 

Thanks guys. I really appreciate that information. UAC is turned on for sure *Smile