Zend certified PHP/Magento developer

How to recognize the service that changed a file?

I installed a bunch of proxy and VPN apps on my Linux Mint. One of them will frequently change the resolve.conf file on system start-up and change the DNS from 127.0.0.53 to 127.0.2.1. How can I solve this?