Avast hasn't warned me it found anything.
The hosts file is a default Windows host file with around 60,000 entries similar to the following added:
127.0.0.1 xkgmgkbdppkskud.net
127.0.0.1 xkgnrwobrichgd.biz
127.0.0.1 xkgpgaawwkfq.biz
127.0.0.1 xkgshoktsakf.ru
127.0.0.1 xkgtaembeknphd.org
127.0.0.1 xkgxlbcfiijjak.org
127.0.0.1 xkhsbijryplarg.org
127.0.0.1 xkiasnriddawlpl.com
127.0.0.1 xkiddsovdleatb.com
127.0.0.1 xkidpcrpoymeok.info
127.0.0.1 xkiqjdrfrkkxtb.com
127.0.0.1 xkisghibjhhruri.ru
127.0.0.1 xkjwhckvdikmmc.org
127.0.0.1 xkkcahpwwhev.org
127.0.0.1 xkkpnarmnpnjh.info
127.0.0.1 xkkqdpsscwxpms.co.uk
127.0.0.1 xkkuoqwdfmusyj.org
127.0.0.1 xkkwfgdcjjngnwd.org
127.0.0.1 xkkwgydllsjy.org
127.0.0.1 xkldtmlsxpss.co.uk
127.0.0.1 xklhdsrrekbike.org
127.0.0.1 xklqwrvejecfr.ru
127.0.0.1 xkmdxmxixmvkuhx.ru
127.0.0.1 xkmmqeapqyvp.net
127.0.0.1 xkmtkwubjtwma.info
I'm adding one new line to the file which is simply
IPADDRESS DOMAINName
When it resets it goes back to the default plus the additional entries added.
Avast reports itself as :
Program Version: 11.1.2241
Virus Definitions Version: 151130-1
Number of Definitions: 3,434,844
I also have Zonealarm free firewall and anti virus and SpyBot Search and destroy installed.
Running sysinternals process monitor shows Avast had read and changed the hosts file.
I'm about to add the line back to the hosts file and will run sysinternal to see what it shows today. Hopefully I'll get a screenshot from it.
Can anyone confirm if Avast does monitor and change the hosts ? can it be disabled ?
Thanks