Many AV-Programs are locking the hosts-file. They do not necessarily remove the lock, when they are disabled.