Windows Host file keeps getting deleted?

[Nishi]

I am having this issue, with one specific user.

When ever he goes on the Internet, his HOST file keeps getting deleted from
the "etc" folder under "Drivers" under "System32". When I manually re-create
the HOST file and then open IE it deletes the HOST file again.

I am searching for a fix, however have not found anything that will fix this
issue. Can someone help me with this one.

Thanks.

 

[R. McCarty]

Sounds like Malware.

Change it's attributes to prevent deletion, until you can locate the
infector that's removing the file. Also some Security software has
a Lock/Protection mechanism for guarding the Hosts file.

 

[Detlev Dreyer]

I am having this issue, with one specific user.

When ever he goes on the Internet, his HOST file keeps getting deleted
from the "etc" folder under "Drivers" under "System32". When I manually
re-create the HOST file and then open IE it deletes the HOST file again.

Scan that particular system for malware since nothing comes out of the
blue. In addition, fire the system administrator. Under a restricted
user acount while the NTFS privileges for the %SystemRoot% folder and
its subfolders have been set correctly, even Malware cannot tamper or
delete the HOSTS file. And yes, that file name is "HOSTS" rather than
"HOST".