Cannot change preferred DNS server from 127.0.0.1 localhost

Hello Experts,

I have an irritating little problem...

The preferred DNS server on my (Windows 7) TCP/IPv4 property page is set to 127.0.0.1 (localhost).

I cannot change this setting to another value. Every time I try it reverts back to 127.0.0.1!

Why is this happening?
Did someone set it up this way to look at the hosts file first?

Does anyone know what is going on here?

Thanks!
SaxitalisAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

DontmilkthisCommented:
The fact that it is automatically changing itself back to 127.0.0.1 despite the fact you're setting it statically sounds like malware activity to me.

have you noticed anything else weird while using the PC?

would be interesting to see if there really is a dns service running on your machine. if you have telnet installed (windows feature) you could try running a telnet to port 53 on your machine... i'd be worried if this works.
telnet 127.0.0.1 53

Open in new window


what's the history of this PC?
have you checked the host file for anomalies? standard hosts file only has 127.0.0.1 as far as I remember.
SaxitalisAuthor Commented:
I think this may have something to do with the OpenDNS service. I was told that this service had been installed on this computer.

According to the documentation... All you have to do to "uninstall" OpenDNS is to change, remove or Obtain DNS Server dynamically on the TCP/IP Properties page...

This is what I have been trying to do but 127.0.0.1 always comes back.

Also, I did scan for Malware and found no viruses.

Could this behavior be caused by the "OpenDNS" service on the computer??

Thanks!
DontmilkthisCommented:
Hi Saxitalis,

I'm not sure if it's openDNS doing this. From a quick google, i'd suggest it's a product called DNSCrypt which encrypts your DNS requests. In order for this service to work it must set your local preferred dns setting to the local host (127.0.0.1) so that all DNS requests go through it.

is there a chance you have DNSCrypt installed?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
SaxitalisAuthor Commented:
Nope DNSCrypt is not installed on this machine but thanks for the idea anyway - hmmm
SaxitalisAuthor Commented:
got me looking in the right place - thanks
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.