can't edit hosts file?

I'm sure I have edited it since moving to W7! But now when I try, I am
told it is in use: "The process cannot access the file because it is
being used by another process." (The process being plain original
NotePad.) If I try to delete it (having made a copy of course!), I get
"The action can't be completed because the file is open in System".

I've just done a restart, and tried again before opening anything I'd
have thought would be using it - no change. Though as I said, I'm sure
I've edited it before, and that _wouldn't_ have been under those
circumstances.

What's using it? "System" isn't very informative - could be a user
rather than a process.
--
J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

A man is not contemptible because he thinks science explains everything, and a
man is not contemptible because he doesn't. - Howard Jacobson, in Radio Times
2010/1/23-29.

On Thu, 5 Apr 2018 20:04:01 +0100, "J. P. Gilliver (John)"
wrote:

I'm sure I have edited it since moving to W7! But now when I try, I am
told it is in use: "The process cannot access the file because it is
being used by another process." (The process being plain original
NotePad.) If I try to delete it (having made a copy of course!), I get
"The action can't be completed because the file is open in System".

I've just done a restart, and tried again before opening anything I'd
have thought would be using it - no change. Though as I said, I'm sure
I've edited it before, and that _wouldn't_ have been under those
circumstances.

What's using it? "System" isn't very informative - could be a user
rather than a process.

Some AV programs will lock the hosts file to prevent malicious editing.
Also, I believe you have to run your editor, Notepad in this case, as
Administrator. If you're already aware of those restrictions, then I'm
not sure what the deal is.

--

Char Jackson

In message , Char Jackson
writes:
On Thu, 5 Apr 2018 20:04:01 +0100, "J. P. Gilliver (John)"
wrote:

I'm sure I have edited it since moving to W7! But now when I try, I am
told it is in use: "The process cannot access the file because it is
being used by another process." (The process being plain original
NotePad.) If I try to delete it (having made a copy of course!), I get
"The action can't be completed because the file is open in System".

I've just done a restart, and tried again before opening anything I'd
have thought would be using it - no change. Though as I said, I'm sure
I've edited it before, and that _wouldn't_ have been under those
circumstances.

What's using it? "System" isn't very informative - could be a user
rather than a process.

Some AV programs will lock the hosts file to prevent malicious editing.
Also, I believe you have to run your editor, Notepad in this case, as
Administrator. If you're already aware of those restrictions, then I'm
not sure what the deal is.

I've tried this - running Notepad as administrator, and turning off AVG.
I still get "...cannot access the file because it is being used by
another process."
--
J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

Capital flows toward lower costs like a river to lowest ground.
"MJ", 2015-12-05

J. P. Gilliver (John) wrote:
In message , Char Jackson
writes:
On Thu, 5 Apr 2018 20:04:01 +0100, "J. P. Gilliver (John)"
wrote:

I'm sure I have edited it since moving to W7! But now when I try, I am
told it is in use: "The process cannot access the file because it is
being used by another process." (The process being plain original
NotePad.) If I try to delete it (having made a copy of course!), I get
"The action can't be completed because the file is open in System".

I've just done a restart, and tried again before opening anything I'd
have thought would be using it - no change. Though as I said, I'm sure
I've edited it before, and that _wouldn't_ have been under those
circumstances.

What's using it? "System" isn't very informative - could be a user
rather than a process.

Some AV programs will lock the hosts file to prevent malicious editing.
Also, I believe you have to run your editor, Notepad in this case, as
Administrator. If you're already aware of those restrictions, then I'm
not sure what the deal is.

I've tried this - running Notepad as administrator, and turning off AVG.
I still get "...cannot access the file because it is being used by
another process."

Try using Process Explorer to see what's got it tied up; Find tab, Find
Handle or DLL.
In Windows 7 the hosts file is;
C:\Windows\System32\drivers\etc\hosts

Ed

Char Jackson wrote:

On Thu, 5 Apr 2018 20:04:01 +0100, "J. P. Gilliver (John)"
wrote:

I'm sure I have edited it since moving to W7! But now when I try, I am
told it is in use: "The process cannot access the file because it is
being used by another process." (The process being plain original
NotePad.) If I try to delete it (having made a copy of course!), I get
"The action can't be completed because the file is open in System".

I've just done a restart, and tried again before opening anything I'd
have thought would be using it - no change. Though as I said, I'm sure
I've edited it before, and that _wouldn't_ have been under those
circumstances.

What's using it? "System" isn't very informative - could be a user
rather than a process.

Some AV programs will lock the hosts file to prevent malicious editing.
Also, I believe you have to run your editor, Notepad in this case, as
Administrator. If you're already aware of those restrictions, then I'm
not sure what the deal is.

If you have Sysinternals Process Explorer, search for "hosts" (Ctrl+F) and
it'll show you what has it open. You can close the handle from the lower main
pane (Ctrl+L). (You may need to "Show Details for All Processes".)

(Any program with similar capabilities should be able to do this.)

Otherwise, try rebooting to safe mode and editing there.

--
Your anger is a wellspring. You must use it.

In message 23,
Auric__ writes:
Char Jackson wrote:

On Thu, 5 Apr 2018 20:04:01 +0100, "J. P. Gilliver (John)"
wrote:

I'm sure I have edited it since moving to W7! But now when I try, I am
told it is in use: "The process cannot access the file because it is
being used by another process." (The process being plain original
NotePad.) If I try to delete it (having made a copy of course!), I get
"The action can't be completed because the file is open in System".

I've just done a restart, and tried again before opening anything I'd
have thought would be using it - no change. Though as I said, I'm sure
I've edited it before, and that _wouldn't_ have been under those
circumstances.

What's using it? "System" isn't very informative - could be a user
rather than a process.

Some AV programs will lock the hosts file to prevent malicious editing.
Also, I believe you have to run your editor, Notepad in this case, as
Administrator. If you're already aware of those restrictions, then I'm
not sure what the deal is.

If you have Sysinternals Process Explorer, search for "hosts" (Ctrl+F) and
it'll show you what has it open. You can close the handle from the lower main
pane (Ctrl+L). (You may need to "Show Details for All Processes".)

(Any program with similar capabilities should be able to do this.)

Otherwise, try rebooting to safe mode and editing there.

Thanks, you and Ed. Excellent idea. Then I found my Process Explorer
won't work! I've extracted it again from the .zip file I downloaded (and
yes, it _did_ work then!); I run it, I get the UAC popup, I click Run in
that, and - nothing happens. And there's nothing beginning with P in
Task Manager other than Panorama.
--
J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

.... "Peter and out." ... "Kevin and out." (Link episode)

"J. P. Gilliver (John)" wrote

| Thanks, you and Ed. Excellent idea. Then I found my Process Explorer
| won't work! I've extracted it again from the .zip file I downloaded (and
| yes, it _did_ work then!); I run it, I get the UAC popup, I click Run in
| that, and - nothing happens. And there's nothing beginning with P in
| Task Manager other than Panorama.

Sounds fishy to me. Your software generally
works but editing HOSTS and running ProcExp
are blocked? I'd suspect some kind of sneaky
thing had got onto the system.

If it were me I'd first shut off UAC and if that
didn't clear things up I'd try downloading some
malware/AV products. (Many of them can be
downloaded as free packages for emergency use.)

The only other thing I can think of would be if you
had somehow screwed up file restrictions.... maybe
logging on as Guest or some such? But you have a
lot of experience. I can't think of anything you
might have done accidentally.
It's an interesting mystery.

Mayayana wrote:
"J. P. Gilliver (John)" wrote

| Thanks, you and Ed. Excellent idea. Then I found my Process Explorer
| won't work! I've extracted it again from the .zip file I downloaded (and
| yes, it _did_ work then!); I run it, I get the UAC popup, I click Run in
| that, and - nothing happens. And there's nothing beginning with P in
| Task Manager other than Panorama.

Sounds fishy to me. Your software generally
works but editing HOSTS and running ProcExp
are blocked? I'd suspect some kind of sneaky
thing had got onto the system.

If it were me I'd first shut off UAC and if that
didn't clear things up I'd try downloading some
malware/AV products. (Many of them can be
downloaded as free packages for emergency use.)

The only other thing I can think of would be if you
had somehow screwed up file restrictions.... maybe
logging on as Guest or some such? But you have a
lot of experience. I can't think of anything you
might have done accidentally.
It's an interesting mystery.

I think Kaspersky blocks about half of the
Sysinternals programs. As an example.

And even without an AV, you can use SRP in the
OS, to block particular things. SRP was used to
block the first round of Ransomware (before the
Ransomware became more sophisticated and borrowed
techniques from existing malware).

Paul

J. P. Gilliver (John) wrote:
In message 23,
Auric__ writes:
Char Jackson wrote:

On Thu, 5 Apr 2018 20:04:01 +0100, "J. P. Gilliver (John)"
wrote:

I'm sure I have edited it since moving to W7! But now when I try, I am
told it is in use: "The process cannot access the file because it is
being used by another process." (The process being plain original
NotePad.) If I try to delete it (having made a copy of course!), I get
"The action can't be completed because the file is open in System".

I've just done a restart, and tried again before opening anything I'd
have thought would be using it - no change. Though as I said, I'm sure
I've edited it before, and that _wouldn't_ have been under those
circumstances.

What's using it? "System" isn't very informative - could be a user
rather than a process.

Some AV programs will lock the hosts file to prevent malicious editing.
Also, I believe you have to run your editor, Notepad in this case, as
Administrator. If you're already aware of those restrictions, then I'm
not sure what the deal is.

If you have Sysinternals Process Explorer, search for "hosts" (Ctrl+F)
and
it'll show you what has it open. You can close the handle from the
lower main
pane (Ctrl+L). (You may need to "Show Details for All Processes".)

(Any program with similar capabilities should be able to do this.)

Otherwise, try rebooting to safe mode and editing there.

Thanks, you and Ed. Excellent idea. Then I found my Process Explorer
won't work! I've extracted it again from the .zip file I downloaded (and
yes, it _did_ work then!); I run it, I get the UAC popup, I click Run in
that, and - nothing happens. And there's nothing beginning with P in
Task Manager other than Panorama.

Try running it as Administrator.
If that doesn't work, look here;
https://support.microsoft.com/en-us/...does-not-start

If it's still unfixed after that, then do a comprehensive check of what
else is shut out; and then let us know.

Ed

Ed Cryer wrote:
J. P. Gilliver (John) wrote:
In message 23,
Auric__ writes:
Char Jackson wrote:

On Thu, 5 Apr 2018 20:04:01 +0100, "J. P. Gilliver (John)"
wrote:

I'm sure I have edited it since moving to W7! But now when I try, I am
told it is in use: "The process cannot access the file because it is
being used by another process." (The process being plain original
NotePad.) If I try to delete it (having made a copy of course!), I get
"The action can't be completed because the file is open in System".

I've just done a restart, and tried again before opening anything I'd
have thought would be using it - no change. Though as I said, I'm sure
I've edited it before, and that _wouldn't_ have been under those
circumstances.

What's using it? "System" isn't very informative - could be a user
rather than a process.

Some AV programs will lock the hosts file to prevent malicious editing.
Also, I believe you have to run your editor, Notepad in this case, as
Administrator. If you're already aware of those restrictions, then I'm
not sure what the deal is.

If you have Sysinternals Process Explorer, search for "hosts"
(Ctrl+F) and
it'll show you what has it open. You can close the handle from the
lower main
pane (Ctrl+L). (You may need to "Show Details for All Processes".)

(Any program with similar capabilities should be able to do this.)

Otherwise, try rebooting to safe mode and editing there.

Thanks, you and Ed. Excellent idea. Then I found my Process Explorer
won't work! I've extracted it again from the .zip file I downloaded
(and yes, it _did_ work then!); I run it, I get the UAC popup, I click
Run in that, and - nothing happens. And there's nothing beginning with
P in Task Manager other than Panorama.

Try running it as Administrator.
If that doesn't work, look here;
https://support.microsoft.com/en-us/...does-not-start


If it's still unfixed after that, then do a comprehensive check of what
else is shut out; and then let us know.

Ed


A useful help in cases like this is to find what file permissions are
available.
Proxexp.exe Properties, Security tag.
Mine has full for System and Administrators; all but that for
Authenticated Users.

Ed

In message , Ed Cryer
writes:
[]
Thanks, you and Ed. Excellent idea. Then I found my Process Explorer
won't work! I've extracted it again from the .zip file I downloaded
(and yes, it _did_ work then!); I run it, I get the UAC popup, I
click Run in that, and - nothing happens. And there's nothing
beginning with P in Task Manager other than Panorama.

Try running it as Administrator.

It did, thanks!

I've just modified the properties of the shortcut to run as
administrator, and that works too.
[]
--
J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

Veni Vidi Vacuum [I came, I saw, It sucked] - , 1998

On 05/04/2018 20:04, J. P. Gilliver (John) wrote:


could be a user rather than a process.

Yes it's a user who has very serious demented brain.

To edit a host file you need to drag it to your desktop (i.e. move it)
and then edit it. after editing it, drag it back to its original location.

Voila it works. It wasn't difficult was it, old man?


/--- This email has been checked for viruses by
Windows Defender software.
//https://www.microsoft.com/en-gb/windows/comprehensive-security/





--
With over 600 million devices now running Windows 10, customer
satisfaction is higher than any previous version of windows.

On Thu, 5 Apr 2018 22:22:59 +0100, Good Guy
wrote:

On 05/04/2018 20:04, J. P. Gilliver (John) wrote:


could be a user rather than a process.

Yes it's a user who has very serious demented brain.

To edit a host file you need to drag it to your desktop (i.e. move it)
and then edit it. after editing it, drag it back to its original location.

Voila it works. It wasn't difficult was it, old man?



I have always edited it directly in the original location, but since I
change it fairly often, I now have a link to it on the desktop, and
open it with right-click "Open with notepad."



--
Someone who thinks logically provides
a nice contrast to the real world.
(Anonymous)

In message , slate_leeper
writes:
On Thu, 5 Apr 2018 22:22:59 +0100, Good Guy
wrote:

On 05/04/2018 20:04, J. P. Gilliver (John) wrote:


could be a user rather than a process.

Yes it's a user who has very serious demented brain.

(I think bad guy has a mirror.)

To edit a host file you need to drag it to your desktop (i.e. move it)
and then edit it. after editing it, drag it back to its original location.

Voila it works. It wasn't difficult was it, old man?



I have always edited it directly in the original location, but since I
change it fairly often, I now have a link to it on the desktop, and
open it with right-click "Open with notepad."

Me too. Well, I have a shortcut to NotePad+, with hosts as a parameter
(i. e. the shortcut's Target line is
C:\Windows\Notepad+.exe C:\WINDOWS\system32\drivers\etc\hosts. [and its
startup line is %HOMEDRIVE%%HOMEPATH%, though that's probably not
necessary]). That saves the right-click and open with step.


--
J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

Veni Vidi Vacuum [I came, I saw, It sucked] - , 1998

"J. P. Gilliver (John)" wrote in message
...

I'm sure I have edited it since moving to W7! But now when I try, I am told
it is in use: "The process cannot access the file because it is being used
by another process." (The process being plain original NotePad.) If I try
to delete it (having made a copy of course!), I get "The action can't be
completed because the file is open in System".

I've just done a restart, and tried again before opening anything I'd have
thought would be using it - no change. Though as I said, I'm sure I've
edited it before, and that _wouldn't_ have been under those circumstances.

What's using it? "System" isn't very informative - could be a user rather
than a process.

Are you sure you have enabled hidden files and that you have the correct
HOSTS file (uppercase and no extension).

It is in the C:\Windows\System32\drivers\etc directory. You may have other
hosts or HOSTS.xxx files with some extension.

--


Bob S.