Hosts file change blocked -- but who tried to update my hosts file?

Today Avira Antivirus warned me that an attempt to change my hosts file was blocked. However no other information was provided. The million dollar question obviously is *who* (which program) tried to change my hosts file. It doesn't seem Avira provides or logs that information. I cannot even find it in the (hard to access) logs at C:\ProgramData\Avira\Antivirus\LOGFILES.

I therefore ask Avira to log important information like this, and make logs/information regarding past security events easily accessible through the program's console.