Assigned Zemana scan shows DNS Hijacking?

This thread is being handled by a member of the staff.
Status
Not open for further replies.

gantrix

Level 2
Thread author
Verified
Nov 7, 2013
50
Hello Guys hope this is the correct area but have a little issue not sure what to make of it. Something is changing my dns settings and I try to change them back they just get changed again. the dns server its using is 127.7.7.9 I usually dont mess with dns but did a scan with Zemana and it keeps popping up with that calling it a dns hijack and when I hit clean it dosent fix it. It just shows up again. I am currently running Kaspersky Internet Security with Adguard premium and Heimdal Premium. Any Idea what it could be or is Zemana wrong and I am just paranoid. Thank you.
 

Attachments

  • Screenshot (9).png
    Screenshot (9).png
    221.1 KB · Views: 596

RoboMan

Level 34
Verified
Top Poster
Content Creator
Well-known
Jun 24, 2016
2,399
Hello my mate,

From my point of view, this is probably either:

-your ISP router
-Heimdal

forcing their DNS. Have you tried manually changing your DNS for a third party like Cómodo Secure DNS or Google's?

Just in case you can try scanning your system with another took like HitmanPro. :)
 

gantrix

Level 2
Thread author
Verified
Nov 7, 2013
50
Hello my mate,

From my point of view, this is probably either:

-your ISP router
-Heimdal

forcing their DNS. Have you tried manually changing your DNS for a third party like Cómodo Secure DNS or Google's?

Just in case you can try scanning your system with another took like HitmanPro. :)

Hitman says i am clean. I change the dns and it gets reverted it could be heimdal or my friend says it could be my vpn changing it.
 

upnorth

Moderator
Verified
Staff Member
Malware Hunter
Well-known
Jul 27, 2015
5,457
Last edited:

Formingus

New Member
Apr 7, 2018
1
Hemdal is 100%,
I have heimdal install and get same thing
Uninstalled, scanned again and its clean
 
  • Like
Reactions: Brie
F

ForgottenSeer 58943

Hemdal is 100%,
I have heimdal install and get same thing
Uninstalled, scanned again and its clean

No need to uninstall. Turn off Heimdal traffic filtration and Heimdal uses a backend NETSH call to switch your DNS back to DHCP.

127 is a loopback and not a public address space. Zemana is a false positive here. I've lost all hope with Zemana and got a partial refund for my licenses. Especially after they ignored the fact that I can reveal their distributed cloud scanning computers around the world, down to the most intimate detail. (even today) By simply having a specific EXE on my system scanned by it..
 
Last edited by a moderator:

KevinYu0504

Level 5
Verified
Well-known
Mar 10, 2017
227
Long time ago(about at October,2017) ,
i had install the Heimdal and active the traffic filtration ,
and the same warning on my Zemana .

I contact Zemana's support ,
and here is the Zemana's reply :

Dear XXXXXX,

Thank you for contacting us again,
We tried to contact them so we can solve this together, but no one responded. You can exclude it from scanning.

Please feel free to contact us.

It's been so long , seems Zemana still didn't solve this problem .....


To be honestly , Zemana is really terrible at solve the false alert ,
i also had some FP when Zemana scan my browser's main page setting ,
using " Submit as false positives " on software is useless , never see they fix the FP .

So i try to dirrect sending a email support to report the FP ,
however only get a reply told me they will conveyed my informaton to research team ,
and no more .....

After many months , the same FP still there ,
i had no choice , all i can do , is add those item into the exclude list .....
 

SumTingWong

Level 28
Verified
Top Poster
Well-known
Apr 2, 2018
1,706
Long time ago(about at October,2017) ,
i had install the Heimdal and active the traffic filtration ,
and the same warning on my Zemana .

I contact Zemana's support ,
and here is the Zemana's reply :



It's been so long , seems Zemana still didn't solve this problem .....


To be honestly , Zemana is really terrible at solve the false alert ,
i also had some FP when Zemana scan my browser's main page setting ,
using " Submit as false positives " on software is useless , never see they fix the FP .

So i try to dirrect sending a email support to report the FP ,
however only get a reply told me they will conveyed my informaton to research team ,
and no more .....

After many months , the same FP still there ,
i had no choice , all i can do , is add those item into the exclude list .....

If you try to contact Zemana about files left behind after uninstall, Zemana will tell you to use 3rd party uninstaller to clean it up which sound to me they don't really care at all.
 

CyberTech

Level 44
Verified
Top Poster
Well-known
Nov 10, 2017
3,247
Long time ago(about at October,2017) ,
i had install the Heimdal and active the traffic filtration ,
and the same warning on my Zemana .

I contact Zemana's support ,
and here is the Zemana's reply :



It's been so long , seems Zemana still didn't solve this problem .....


To be honestly , Zemana is really terrible at solve the false alert ,
i also had some FP when Zemana scan my browser's main page setting ,
using " Submit as false positives " on software is useless , never see they fix the FP .

So i try to dirrect sending a email support to report the FP ,
however only get a reply told me they will conveyed my informaton to research team ,
and no more .....

After many months , the same FP still there ,
i had no choice , all i can do , is add those item into the exclude list .....

Thats a reason i replaced it with HMP
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top