I have Avira installed with Hosts file protection enabled.
I've noticed a pattern where Avira warns me of an attempted modification of the Hosts file (but alas doesn't tell me which process did the attempt), and soon afterwards a Windows Update notification pops up.
Is this normal? Does this mean the attempt to modify the Hosts file came from Windows Update (for some security-related reason, etc)?
The closest subject I've seen on SE is this question, where apparently Windows Defender was involved: Something is changing my hosts file without asking