Spybot Search & Destroy. Go to the "tools" section, you can inspect what is in your hosts file.

If you select "IE Tweaks" there is also an option to lock the hosts file as read only.

Like phernandez I generally use FF with "noscripts". My IE is set to ask permission before running ActiveX I cannot remember what the default is though?............... probably to run them?