Thanks for the update.. Regarding your bootloader menu.. It's not the usual bootloader

the NoExecute=OptOut

The default value. OptIn Limits DEP to Windows system binaries. This may be why you can't change this system file with Anything.

edit, also, unless you are asking windows to load the safe mode boot menu, you don't need the CMDCONs entry. I don't know what to say other than there's something on your computer blocking access to the hosts file..

Have a look at this section at mvps.org, http://www.mvps.org/winhelp2002/hostsfaq.htm#Locking