Windows 10: Find Out who reset HOSTS file ?
Find Out who reset HOSTS file ?
I have a custom hosts file which has a lot of entries redirecting back to 127.0.0.1 (this is normal)
One of my DNS servers is being updated, so I added a new entry to the hosts so I could get to my sites.
This worked fine.
After about 30 minutes I noticed I'd lost access to my site and when I checked my hosts file it's reverted back to how it was first thing this morning. All of my custom entries are there apart from the one for my server.
So something is monitoring and resetting it.. I've ZoneAlarm firewall and anti virus, avast anti virus and super anti spyware installed. I'm assuming it's one of them, but I'd like to be sure.
Is there any way to monitor the hosts file and see who/what is changing it ?
I had a similar experience. Same platform. I had a hosts file in which I had added a domain name. Worked for months and then one day there was no connectivity to the site. Worked out the 'hosts' file had reverted back to the default. I changed the 'hosts' file and all was well. The next day the same problem. This time I couldn't change the 'hosts' file. I tried changing a copy on the desktop and pasting it into the directory but the change would not take. In the end, I changed the desktop copy permission to read only and then copied across and this worked. Not sure why or what happened.
Retired from the grind
First off you do not need three programs doing the same thing. Second off, dump Zone Alarm. I would bet that Zone Alarm is your culprit. Behind a standard router with NAT, you are fine. You only need a Anti-Virus/Anti-Malware, which the one built into Windows does just fine.
All that the majority of security software do, is give you this warm fuzzy feeling when you are throwing money out to the companies that make them. They are no better from protecting a user from bad habits, as it is when you get behind the wheel of your car and know in the back of your head, that at any time someone may crash into you, but you do not know when.
I fun no Firewalls on any of my machines within my network, because there is no need for it. My router works very well in protecting from any attacks that may hit the main gateway or the Edge Router that I have my network devices connected to.
The purpose of a firewall is to not only block incoming but also outgoing connections for programs that you allow or disallow.
I don't use Zone alarm but there should be a setting that allows you to edit the hosts file and if not there it will be in your antivirus software.
I use Hostsman to edit my Hosts file .
On a related note if you use hosts file to redirect traffic you should disable DNS Client in services .msc
I have changed from W7 to W10 but find that although I am logged in as the administrator, I am unable to save any changes to my hosts file and get the message that I don't have accees/permission and should contact the administrator.
How can I reset the Hosts file back to the default? pls Is This good?
I can set an alias in the hosts file on a win7 machine and access it just fine but doing the same in Win10 prompts for creds that never work even when entered correctly.
What did win10 change?
hosts file entry:
127.0.0.1 hostname alias...
My hosts files disappeared in my C:\Windows\System32\drivers\etc. Can some one help me to solve this?
I tried to block some sites in that way but although I cleared DNS cache (ipconfig /flushdns) ater editing the hosts file, I'm still able to access those sites. Googled about it but seems everything has done Ok and wonder why I can't use this...