Thank you for the link...that is exactly what I'm experiencing. I see there is no solution given for that post.
What I did was adding the exclusion of c:\Windows\System32\drivers\etc\ to the manual scan also. It was not there. Although I hardly ever do a manual scan.....
There is no prompt but the hostfile is silently modified to a barebone config and does not popup in the quarentine virus,spyware or riskware.
This is how fsecure modiefies it
## Copyright (c) 2007 F-Secure Corporation