DNS Hijack / Hosts File Manipulation

What is DNS_HOSTS_REDIRECT?

This diagnosis detects unauthorized local DNS redirect entries added to the Windows Hosts file, preventing access to security updates and redirecting legitimate sites to phishing portals.

Common Causes

• Local malware execution utilizing administrator permissions to bypass write protections.

Step-by-Step Fix Guide

• 1
  Locate the hosts file inside System32\drivers\etc\ and reset its contents to the default empty layout.
• 2
  Flush the local DNS resolver cache to clear corrupted lookup tables.
• 3
  Change network adapter settings to use secure public DNS servers (e.g. 1.1.1.1 or 8.8.8.8).

Commands & Diagnostics