Find Out who reset HOSTS file ?


  1. Posts : 60
    Windows 10Pro
       #1

    Find Out who reset HOSTS file ?


    Hi

    I have a custom hosts file which has a lot of entries redirecting back to 127.0.0.1 (this is normal)
    One of my DNS servers is being updated, so I added a new entry to the hosts so I could get to my sites.
    This worked fine.

    After about 30 minutes I noticed I'd lost access to my site and when I checked my hosts file it's reverted back to how it was first thing this morning. All of my custom entries are there apart from the one for my server.

    So something is monitoring and resetting it.. I've ZoneAlarm firewall and anti virus, avast anti virus and super anti spyware installed. I'm assuming it's one of them, but I'd like to be sure.

    Is there any way to monitor the hosts file and see who/what is changing it ?

    Thanks
      My Computer


  2. Posts : 2
    Win 10
       #2

    Hi,

    I had a similar experience. Same platform. I had a hosts file in which I had added a domain name. Worked for months and then one day there was no connectivity to the site. Worked out the 'hosts' file had reverted back to the default. I changed the 'hosts' file and all was well. The next day the same problem. This time I couldn't change the 'hosts' file. I tried changing a copy on the desktop and pasting it into the directory but the change would not take. In the end, I changed the desktop copy permission to read only and then copied across and this worked. Not sure why or what happened.
      My Computer

  3. bro67's Avatar
    Posts : 8,359
    Mac OS Catalina
       #3

    First off you do not need three programs doing the same thing. Second off, dump Zone Alarm. I would bet that Zone Alarm is your culprit. Behind a standard router with NAT, you are fine. You only need a Anti-Virus/Anti-Malware, which the one built into Windows does just fine.

    All that the majority of security software do, is give you this warm fuzzy feeling when you are throwing money out to the companies that make them. They are no better from protecting a user from bad habits, as it is when you get behind the wheel of your car and know in the back of your head, that at any time someone may crash into you, but you do not know when.

    I fun no Firewalls on any of my machines within my network, because there is no need for it. My router works very well in protecting from any attacks that may hit the main gateway or the Edge Router that I have my network devices connected to.
      My Computers


  4. Posts : 772
    Microsoft Windows 10 Pro 64-bit
       #4

    The purpose of a firewall is to not only block incoming but also outgoing connections for programs that you allow or disallow.

    I don't use Zone alarm but there should be a setting that allows you to edit the hosts file and if not there it will be in your antivirus software.

    I use Hostsman to edit my Hosts file .

    On a related note if you use hosts file to redirect traffic you should disable DNS Client in services .msc
    Find Out who reset HOSTS file ?-disable-dns-client.png
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 10:47.
Find Us




Windows 10 Forums