ZoneAlarm (probably other firewalls too) have a feature to ‘lock’ your hosts file.