When you look at it, the file is changed by Windows Defender probably to avoid malicious redirects which is actually a good thing for any novice users. 

You can disable this protection by putting the hosts file in exclusion list.