I use DNSCrypt (SimpleDNSCrypt in Windows). It has extra features like wildcards for blocking subdomains. It doesn't touch your hosts file so it should bypass that.