Assigned Zemana scan shows DNS Hijacking?

[gantrix]

Hello Guys hope this is the correct area but have a little issue not sure what to make of it. Something is changing my dns settings and I try to change them back they just get changed again. the dns server its using is 127.7.7.9 I usually dont mess with dns but did a scan with Zemana and it keeps popping up with that calling it a dns hijack and when I hit clean it dosent fix it. It just shows up again. I am currently running Kaspersky Internet Security with Adguard premium and Heimdal Premium. Any Idea what it could be or is Zemana wrong and I am just paranoid. Thank you.

 

[RoboMan]

Hello my mate,

From my point of view, this is probably either:

-your ISP router
-Heimdal

forcing their DNS. Have you tried manually changing your DNS for a third party like Cómodo Secure DNS or Google's?

Just in case you can try scanning your system with another took like HitmanPro.

 

[gantrix]

Hello my mate,

From my point of view, this is probably either:

-your ISP router
-Heimdal

forcing their DNS. Have you tried manually changing your DNS for a third party like Cómodo Secure DNS or Google's?

Just in case you can try scanning your system with another took like HitmanPro.

Hitman says i am clean. I change the dns and it gets reverted it could be heimdal or my friend says it could be my vpn changing it.

 

[TairikuOkami]

Try Dns Lock v1.3

 

[upnorth]

Something is changing my dns settings and I try to change them back they just get changed again. the dns server its using is 127.7.7.9

Quote : " If Traffic Filtering is enabled when Heimdal is installed, your local DNS is changed to 127.7.7.x and your DNS server is saved by Heimdal in the registries. Read more here: How does DarkLayer Guard work? "

Source : What changes does Heimdal apply when installed?

 

[gantrix]

Thank you guys had me worried I guess need to research more.

 

[CyberTech]

Take a look at this : Poll - Which DNS Server do you use? /DNS Tunnelling this is a useful app it depends on your DNS. when you start DNS test see what's good DNS fastest in your country..

 

[Formingus]

Hemdal is 100%,
I have heimdal install and get same thing
Uninstalled, scanned again and its clean

 

[ForgottenSeer 58943]

Hemdal is 100%,
I have heimdal install and get same thing
Uninstalled, scanned again and its clean

No need to uninstall. Turn off Heimdal traffic filtration and Heimdal uses a backend NETSH call to switch your DNS back to DHCP.

127 is a loopback and not a public address space. Zemana is a false positive here. I've lost all hope with Zemana and got a partial refund for my licenses. Especially after they ignored the fact that I can reveal their distributed cloud scanning computers around the world, down to the most intimate detail. (even today) By simply having a specific EXE on my system scanned by it..

 

[KevinYu0504]

Long time ago(about at October,2017) ,
i had install the Heimdal and active the traffic filtration ,
and the same warning on my Zemana .

I contact Zemana's support ,
and here is the Zemana's reply :

Dear XXXXXX,

Thank you for contacting us again,
We tried to contact them so we can solve this together, but no one responded. You can exclude it from scanning.

Please feel free to contact us.

It's been so long , seems Zemana still didn't solve this problem .....


To be honestly , Zemana is really terrible at solve the false alert ,
i also had some FP when Zemana scan my browser's main page setting ,
using " Submit as false positives " on software is useless , never see they fix the FP .

So i try to dirrect sending a email support to report the FP ,
however only get a reply told me they will conveyed my informaton to research team ,
and no more .....

After many months , the same FP still there ,
i had no choice , all i can do , is add those item into the exclude list .....

 

[SumTingWong]

Long time ago(about at October,2017) ,
i had install the Heimdal and active the traffic filtration ,
and the same warning on my Zemana .

I contact Zemana's support ,
and here is the Zemana's reply :



It's been so long , seems Zemana still didn't solve this problem .....


To be honestly , Zemana is really terrible at solve the false alert ,
i also had some FP when Zemana scan my browser's main page setting ,
using " Submit as false positives " on software is useless , never see they fix the FP .

So i try to dirrect sending a email support to report the FP ,
however only get a reply told me they will conveyed my informaton to research team ,
and no more .....

After many months , the same FP still there ,
i had no choice , all i can do , is add those item into the exclude list .....

If you try to contact Zemana about files left behind after uninstall, Zemana will tell you to use 3rd party uninstaller to clean it up which sound to me they don't really care at all.

 

[CyberTech]

Long time ago(about at October,2017) ,
i had install the Heimdal and active the traffic filtration ,
and the same warning on my Zemana .

I contact Zemana's support ,
and here is the Zemana's reply :



It's been so long , seems Zemana still didn't solve this problem .....


To be honestly , Zemana is really terrible at solve the false alert ,
i also had some FP when Zemana scan my browser's main page setting ,
using " Submit as false positives " on software is useless , never see they fix the FP .

So i try to dirrect sending a email support to report the FP ,
however only get a reply told me they will conveyed my informaton to research team ,
and no more .....

After many months , the same FP still there ,
i had no choice , all i can do , is add those item into the exclude list .....

Thats a reason i replaced it with HMP

 

[JB007]

Hello,
The same detection here after installing Heimdal Pro

 

[illumination]

Hello,
The same detection here after installing Heimdal Pro
View attachment 192722

Either ignore it or remove Heimdal. The products are doing their job, this is not a FP, the DNS was changed.

 

[KevinYu0504]

Hello,
The same detection here after installing Heimdal Pro
View attachment 192722

I guess Zemana already give up their product ,
never see they try to fix the FP .

 

[harlan4096]

Just add an exclusion in ZAM...

 

[JB007]

Just add an exclusion in ZAM...

Thanks @harlan4096
Exclusion done

 

[illumination]

Just add an exclusion in ZAM...

Thank you, i should have been more specific when i stated to "ignore" it...