New
#11
Thank you for your suggestion. I didn’t have lines ready. Initially, I kept trying different solutions, thinking I had a virus, and ended up removing all lines in the hosts file; i.e. it was empty. Once I decided that the hosts file I had was fine, it was just easier to copy it from my backup.
Anyone know how to get rid of this notification?
I already add the host file to exclusion list, but it still warns me from time to time.
Attachment 291643
Like phrab mentioned, this is quite different problem.
In the late July /beginning of August MS decided to mark some entries (changes) to hosts file as a threat. Specifically entries, that block Microsoft telemetry.
This could be partly legitimate decision, as blocking servers of Antivirus solutions is known tactic of some malware, but MS is detecting the blocking of telemetry addresses . Nothing you can do at this time, but to remove those entries from host file.
Yep, even if you allow it, Windows Defender will ignore your allowance of it and keep detecting it and prompting you about it every week or more.
Exclude BOTH of these paths
Exclude Folder = C:\Windows\System32\drivers\etc
Exclude File = C:\Windows\System32\drivers\etc\hosts
Works for me. (I send facebook and twitter to 127.0.0.1)
Note 1: I inserted a thumb drive with a Hosts file (only) on it. Windows Defender quarantined it. So, with this in mind,
rename your "HOSTS-files-in-motion" something else. (HOSTS.bak ?)
Note 2:Inside Windows Defender, located just above "Exclusions" is "Controlled Folder Access". If you enable this, "Exclusions" disappears. Rephrased, you can't "exclude" with "controlled" enabled.)