Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 0 down vote favorite

I didn't shutdown my pc last night and I left procmon running to monitor WriteFile operations on hosts file.

This morning when I work up, I saw this result:enter image description here

and what is changed in hosts is that the entry containing "www.google.com" is gone! I'm pretty sure about that because I checked the content of hosts yesterday before I slept. Just now this morning, I checked hosts again, the entry with "wwww.google.com" is gone while everything else is untouched.

Could anybody explain what happened ?

share|improve this question
any program can run under svchost.exe, malware loves to use it also. – Moab Nov 9 '12 at 2:55

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.