Question about DNS server

  • 15 September 2017
  • 2 replies

Userlevel 4
Badge +8
Got a popup message saying a program was trying to change my DNS server address. Was given the option to allow or block. Naturally I choose to block.  Scanned with WSA,  nothing malicious found.  Also tried several second opinion scanners.  Nothing from Malwarebytes or Superantispyware either.  Downloaded Zemana to give it a try and it detects a DNS hijacker.  Any thoughts on how this could be missed by all but Zemana or is this possibly a false positive.  I have had no noticeable computer problems or browser redirects. Will continue to watch for anything strange this weekend...things that make you go hummm

Best answer by JP_ 18 September 2017, 21:07

View original

2 replies

Userlevel 4
Badge +8
Nevermind...mystery solved.  It turned out that Heimdal Security's traffic filtering software changes the DNS address.  The scanners all ignored the change as they shoud with exception of Zemana which must have white-listed it.  I should have done a little more research before jumping the gun and hitting the panic button.  Guess I'll just go mow the lawn and take a nap.
As always thanks
Userlevel 7
No worries at all, @! We really appreciate you letting us know :catvery-happy: