Every PC Using and "automatically" Resetting a Loopback DNS

yrralrellim · 16 Feb 2020

I am baffled by my PC loopback DNS scenario. I will be the first to state that this is totally new to me so I understand not a speck of it. I would deeply appreciate if anyone answering my post would PLEASE explain, beginning with the "basics".

I have more than 10 PC's in the household and of course I regularly use my Local network to transfer files. Every single one is running version 1909 (build 18363.xxx), Windows 10 Home or Windows 10 Pro. I somehow had the idea that if I set my own specific Preferred and Alternate DNS Server Addresses that I could cure what seems to be slow response most of the time. My plans were to use 1.1.1.1 as Preferred and 1.0.0.5 as Alternate. When I went to each PC to set my choices, I already found that each PC was setup to use 127.x.x.x as Preferred DNS (with no Alternate). I thought "aha" & "hmmm", but made my changes anyway. The settings didn't seem to make any speed difference so I went back into each PC to recheck my setup and then discovered that each PC had MY setting removed and each PC had reverted to 127.x.x.x. After a little searching I discovered that 127.x.x.x were all "loopback" DNS settings. I simply do not understand why this is being done and what is actually performing the nearly immediate reset.

I do have a KeePass password manager with a plugin and the password database then is synced via Microsoft OneDrive. Does this have something to do with what I now perceive as a "problem"?

Thank you very, very much!

Digital Life · 16 Feb 2020

There are a few reasons this may happen

Some virus or malware scanner
proxy server
Some malware may also do this, Scan your computer

Samuria · 16 Feb 2020

A lot of malware use it to monitoir all you data and steal it. A lot of Av use it to scan all incoming data Mcafee is the worse and it slow the interent to a crawl
You shouldnt be running a proxy uless you have installed one

TairikuOkami · 17 Feb 2020

As mentioned, it might be proxy, like when SimpleDNSCrypt is used. You can try Dns Lock.

yrralrellim · 17 Feb 2020

Yesterday I scanned immediately after my initial post. My "Bitdefender Internet Security" scanned with negative results. My "Malwarebytes AntiMalware" scanned with negative results.

My "IPCONFIG" results:
Microsoft Windows [Version 10.0.18363.657](c) 2019 Microsoft Corporation. All rights reserved.
C:\Windows\system32>ipconfig /all | clip
C:\Windows\system32>C:\Windows\system32>Windows IP Configuration'Windows' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32>C:\Windows\system32> Host Name . . . . . . . . . . . . : UD3P'Host' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> Primary Dns Suffix . . . . . . . :'Primary' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> Node Type . . . . . . . . . . . . : Hybrid'Node' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> IP Routing Enabled. . . . . . . . : No'IP' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> WINS Proxy Enabled. . . . . . . . : No'WINS' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32>C:\Windows\system32>Ethernet adapter Ethernet:'Ethernet' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32>C:\Windows\system32> Media State . . . . . . . . . . . : Media disconnected'Media' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> Connection-specific DNS Suffix . :'Connection-specific' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> Description . . . . . . . . . . . : Realtek PCIe GbE Family Controller'Description' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> Physical Address. . . . . . . . . : 00-1F-D0-80-F4-52'Physical' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> DHCP Enabled. . . . . . . . . . . : Yes'DHCP' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> Autoconfiguration Enabled . . . . : Yes'Autoconfiguration' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32>C:\Windows\system32>Wireless LAN adapter Wi-Fi 2:'Wireless' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32>C:\Windows\system32> Media State . . . . . . . . . . . : Media disconnected'Media' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> Connection-specific DNS Suffix . :'Connection-specific' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> Description . . . . . . . . . . . : Broadcom 802.11ac Network Adapter'Description' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> Physical Address. . . . . . . . . : C4-E9-84-4C-C1-A4'Physical' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> DHCP Enabled. . . . . . . . . . . : Yes'DHCP' is not recognized as an internal or external command,operable program or batch file.
C:\Windows\system32> Autoconfiguration Enabled . . . . : Yes'Autoconfiguration' is not recognized as an internal or external command,operable program or batch file.
______________________________________________________________

- - - Updated - - -
My thanks for all replies. Thank you very much! After dwelling on what everyone said, I did some thinking and I believe my so-called culprit is Heimdal Thor Foresight (Heimdal Security - Proactive Cyber Security Software). I will try to disable Heimdal and then see if I can change my DNS .................

Golden · 17 Feb 2020

Wall of text.....no one is going to read it. Try formatting to make it easier for those trying to help you.

yrralrellim · 17 Feb 2020

Thanks Golden. I edited my post. Sorry -- I just wasn't really thinking! Is this adequate editing?

- - - Updated - - -

My thanks for all replies. Thank you very much! After dwelling on what everyone said, I did some thinking and I believe my so-called culprit is Heimdal Thor Foresight (Heimdal Security - Proactive Cyber Security Software). I will try to disable Heimdal and then see if I can change my DNS .................

- - - Updated - - -

Problem solved. Thank you, thank you, thank y'all. NOW, I only have to decide whether to remove Heimdal Thor Foresight or to keep Heimdal & deal with my reduced speed.