Author Box
Articles Categories
All Categories
Articles Resources

What Is DNS Changer and How to Remove It?

February 27, 2012 | Comments: 0 | Views: 194

The article describes what DNS Changer is and how it can be removed from a computer. The methods provided here are reliable and correct to date. However, we advise users to follow them cautiously to avoid running into common virus removal problems.

DNS Changer is a malicious Trojan virus that changes the DNS (Domain Name Server) configuration of your computer. The virus hijacks your Internet Service Provider's (ISP) DNS servers and modifies them to use its own to direct your web browser to illegal, unsolicited, and porn websites etc. Besides, it changes your computer settings, steals your personal information, installs unwanted software, and invites other viruses and malware to attack your computer. When infected with this virus, you will essentially not log into your own computer or email account but into the hijacker's niche. Do not worry as there is solution to this problem. Here is your comprehensive free virus removal support guide to help you delete the virus from your computer.


You should first determine whether your computer or router is plagued by DNS Changer or not. If the computer or router is using a fake DNS server, then it has been plagued and needs be cured immediately. Open Command Prompt from the Start menu> All Programs> Accessories. You can alternatively type 'cmd' in the Run window and hit Enter to open Command Prompt. Once the window is opened, type 'ipconfig/all' (without quotes) and hit Enter. Locate the DNS server entries. These should be anything between the span of 0 and 255.

Make a note of the DNS server entries and compare them with the list of fake DNS server ones. The fake ones include to; to; to; to; to; to; and among others. You must perform the same procedure for your wireless router also. If your DNS entries match with any of the given entries here, your computer or router has certainly been taken down by DNS Changer. Follow the instructions below to remove it completely.

First create a backup of your entire computer data. You can either choose to store your computer on cloud storage or on an external backup media like flash drive. When done backing up your data, go to the Windows Directory. Open the Run program (from the Start menu) and type '%Windir%\system32\drivers' (without quotes) and hit Enter. The command will take you to the list of driver software. Look for the 'ndisprot.sys' file, right click on it and choose Rename. Change the name of the file to something else. When done, select this file and hit the Delete key on the keyboard. When prompted for a confirmation, hit the Yes button. You should delete this file from the Recycle Bin also.

When the file has been deleted, open the Run program again and type 'regedit' (without quotes) and hit Enter. This will open up the Windows Registry Editor. Before you proceed from here, make sure that you have backed up all your files. When done, scan for these registry threads and remove the last entry from the entire thread. Remember, you should not delete the entire thread, it is only the last entry.

· HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces] "NameServer"

· HKEY_LOCAL_MACHINE\\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{random} DhcpNameServer =,

· HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{random} NameServer =,

· HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer =,

· HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer =,

· HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\%RandomCLSID%"DhcpNameServer"

· HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\%RandomCLSID%"NameServer"

· HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\%Random CLSID% "DhcpNameServer"

When done, exit the Registry Editor window. Open your antivirus program and run a full virus scan of your computer. Wait for the scan to finish. When done, prompt your antivirus to remove the malicious items found during the scanning. Thereafter, connect to the internet and download the latest version of DNSChanger removal tool either from McAfee or Malwarebytes. Save the downloaded file to your computer.

When done, locate and run the setup file. Follow the instructions to install and/or run the tool. When the tool has been installed, open it and then update it with latest virus and malware definitions. Wait until updating finishes. When finished, run a full virus scan of your computer. Afterwards, prompt the tool to delete all the infected files. Close all the windows. Empty the Recycle Bin and then restart your computer. Your computer is now free of the DNS Changer Trojan virus.

Additional Tips:

You should be logged in as an administrator to modify the Registry Editor. Since registry modification is a sensitive procedure, you must take help of a professional online virus removal support to avoid facing system crash or other severe problems in your computer.

The Author of this article is associated with V tech-squad Inc, V tech-squad Inc. is a cloud based technical support provider to consumers and small businesses. if you have any problem while performing the above steps and need technical assistance for online virus removal, You can reach V tech-squad online technical support at their Toll Free No +1-877-452-9201.

About V tech-squad Inc.

V tech-squad Inc. is a cloud based online technical support provider to consumers and small businesses. V tech-squad provides support to users for issues with their PCs, Mac's, Tablets, Phones such as iPhone and Blackberry and devices such as MP3 players, Printers, Scanners, Fax, Wireless networking gear, Netflix, Roku boxes and TVs. With an obsessive focus on quality and building technical expertise, V tech-squad continues to maintain an issue resolution rate of more than 90%. V tech-squad's credibility has been tested by more than 10,000 customers. Currently V tech-squad provides support services to consumers and small businesses in United States. For more information on V tech-squad, Inc. visit

Source: EzineArticles
Was this Helpful ?

Rate this Article

Article Tags:

Online Virus Removal


Get Rid Of Virus


Scan And Remove Virus


Delete Virus


Virus Removal

Windows 8 will change the way you work and play, says Microsoft and we agree. Nearly all of the previous iterations of the Windows OS have been evolutionary but Windows 8 is set to change all that.

By: Sakshi Sharma l Computers & Technology > Mobile Computing l April 03, 2013 lViews: 660

Many antivirus programs available today have various features but it entirely depends on the user to make the best choice from among these different computer virus protection programs online. Before

By: Alex l Computers & Technology > Software l December 28, 2012 lViews: 369

You can add a new color to your entertainment life with iskysoft video converter for mac & iskysoft dvd creator for mac and make your Christmas holidays all the more special. iskysoft video

By: Zaithyn Galter l Computers & Technology > Software l December 23, 2012 lViews: 1070

The choices you make regarding the type of recruiting software you choose to use are important. Being an informed consumer is essential to getting a system or components that complement systems of

By: Maria Warne l Computers & Technology > Software l December 14, 2012 lViews: 305

The Cisco certification has become the most popular IT training in recent days and it offers three different levels of these certifications include as: associate, professional and expert-level.

By: sandidas chakma l Computers & Technology > Certification Tests l December 11, 2012 lViews: 236

Millions of prospective 12th standard students are gearing up their preparations for the Joint Entrance Exam for engineering seats. From 2013, it has been decided by the IITs, CBSE, JEE organizing

By: Sarkariexam l Computers & Technology > Certification Tests l December 07, 2012 lViews: 633

By some estimates there are 1800 to 3000 Russian Spies in the US today, but if you asked the average citizen about this, they wouldn't have a clue. Now don't get me wrong there are plenty of spies

By: Lance Winslowl Computers & Technology > Spyware and Virusesl April 25, 2012 lViews: 216

This article will discuss the negative impact of keyloggers. While there are many positive uses of this software, I will focus on the negative side, since I am a security consultant.

By: Terry L Fenwickl Computers & Technology > Spyware and Virusesl April 22, 2012 lViews: 232

Tablet security has become a widely acquired solution to ensuring total protection of personal and business assets. The continuing diverse usage of mobile computing has brought about numerous

By: Cody Faldynl Computers & Technology > Spyware and Virusesl April 20, 2012 lViews: 205

The recent Apple malware attack on numerous Mac OS X systems has hypothetically become known as the "attack heard around the IT world." Although many IT specialists and experts around the world are

By: Cody Faldynl Computers & Technology > Spyware and Virusesl April 20, 2012 lViews: 248

The full name is Sophos Anti-Virus For Mac Home Edition and this is an antivirus utility from Sophos who also supplies business strength solutions and represents that they are including the same

By: Daniel Dreifusl Computers & Technology > Spyware and Virusesl April 20, 2012 lViews: 229

Has your computer developed a mind of its own? Is your PC sluggish? Think your computer might be infected with spyware?

By: Christopher Heckerl Computers & Technology > Spyware and Virusesl April 18, 2012 lViews: 214

Wireless connection problems may strike your Dell laptop any time of the day or night. Needless to say, you need immediate help to fix them and get your Dell laptop back on the wireless network. Here

By: Gaurav Srivastaval Computers & Technologyl April 18, 2012 lViews: 222

When you are online, the entire worldwide web seems to be watching you. Visit a website and you will start receiving newsletters, promotional emails from a stream of different websites that you never

By: Gaurav Srivastaval Computers & Technology > Spyware and Virusesl April 16, 2012 lViews: 212

  Your personal digital collection includes a horde of photos, songs, videos, documents, and programs among other things that you access and/or run every day on your computer. At the same time, you

By: Gaurav Srivastaval Computers & Technology > Data Recoveryl April 13, 2012 lViews: 201

If McAfee Total Protection 2012 came pre-installed with your computer, you need not install it further. Also, you will see a McAfee icon on your desktop screen or in the system tray.

By: Gaurav Srivastaval Computers & Technology > Spyware and Virusesl April 12, 2012 lViews: 302

Make sure that you enter each and every piece of information correctly wherever required. Select your custom features and configure the settings. When done, reboot your computer and get going.

By: Gaurav Srivastaval Computers & Technology > Spyware and Virusesl April 12, 2012 lViews: 348

This article describes some of the common HP printer error codes that might appear when using an HP printer. Since these error codes can occur despite of your best efforts, you must know how to

By: Gaurav Srivastaval Computers & Technology > Hardwarel April 12, 2012 lViews: 230