DNSchanger Virus could cause you to lose internet connection on Monday. It will impact thousands of computers as their DNS servers are taken down. DNSchanger also known as DNS Changer enters into user computer using Trojan or help of other virus. Then it changes your domain name server (DNS) and your system can be used for illegal activity. Your personal information could be in jeopardy. FBI has shutdown some of these DNS server that is good news. But if your machine is infected then hackers could use it for their advantage. If you noticed DNSchanger Virus on your machine you must remove it as soon as possible before you become victim. These are the steps to help you.

How to remove DNSchanger Virus Steps:

Step 1:Print out these instructions as you will need to shutdown the computer in next step. Need help call us at: 800-518-8533

Step 2:Now power down the DNSchanger Virus infected computer and wait for 30 Seconds before you turn on.

Step 3:Now please turn ON the computer and immediately keep hitting F8 until you see WINDOWS ADVANCED OPTIONS MENU as shown below.
Windows F8 Key

Step 4:In the WINDOWS ADVANCED OPTIONS MENU, go down to the SAFE MODE WITH NETWORKING using the arrow keys on the board. Then press ENTER on the keyboard. This will take your computer to Safe mode. Safe Mode will cause the display and desktop icons to appear changed. This is normal. No need to Panic as it is due to DNSchanger Virus.
Safe mode Option

Step 5:This, DNSchanger Virus, infection may change computer windows settings to use a proxy server that will not allow you to browse any pages on the Internet with Internet Explorer. We will first need to fix this as we will need to download malware removal utilities. They are safe and very reputed in Computer Industry. Now hold down the WINDOWS key and then press the R key.
DNSchanger Virus - Run command Prompt

Step 6:The RUN dialog box will appear. Type iexplore.exe In the RUN dialog and click OK button.
Run command Prompt

Step 7:You will see Internet Explorer. On the top navigation click TOOLS then under the sub-menu of TOOLS choose INTERNET OPTIONS as shown below.
IE Option

Step 8: Now find the CONNECTIONS tab within the INTERNET OPTIONS dialog box and click on it. Then click the LAN SETTINGS button.
DNSchanger Virus - LAN settings

Step 9:If there is a check-mark in the box named “Use a proxy server for your LAN”, under the PROXY SERVER section, then unchecked the box. If there is not a check mark located in the box then you can skip this step and move on to next step.
proxy

Step 10:Now hit the OK button to close the LOCAL AREA NETWORK dialog box. Then press the OK button to close the INTERNET OPTIONS dialog box.

Need help for removing with DNSchanger Virus infection then call us at 800-518-8533 or chat with our experts.

Step 11Now we must end all the processes that belong to DNSchanger Virus so that it does not interfere with your ability clear your computer. Inspector-[random char].exe and Protector-[random char].exe are the processed that needs to be stopped. To do this we need to download Rkill, developed by Bleepingcomputer to help stop the computer process of DNSchanger Virus. Now please hold down the WINDOWS key and the R key simultaneously to open RUN dialog box.
Run command Prompt

Step 12Now type “iexplore.exe http://www.fixpcyourself.com/rkill.com” and hit the OK button.
Rkill

Step 13:Save the Rkill.exe on your desktop. Double-click the Rkill icon and run Rkill.exe. You will see a black MS DOS dialog box. Now it will kill all the processes of DNSchanger Virus. It will take several minute before a Notepad file containing log information on what Rkill found will open. You may review it and close notepad file.

Step 14:Now you are ready to removal all the infection related to DNSchanger Virus. For that you need to use Malwarebytes software. It is a very popular malware and spyware removal application. Now please hold down the WINDOWS key and the R key simultaneously to open RUN dialog box. Type “iexplore.exe http://www.fixpcyourself.com/mbam.exe” and hit the OK button.
Malwarebytes

Need help for removing with DNSchanger Virus infection then call us at 800-518-8533 or chat with our experts.

Step 15:Save the mbam.exe on your desktop. Double click the Malwarebytes icon and run mbam.exe. Now the SELECT SETUP LANGUAGE dialog box will appear. Select your preferred language and hit press OK button.
Malwarebytes Language

Step 16:The Malwarebytes SETUP WIZARD will show blow screen Hit the NEXT button to continue.
Malwarebytes Wizard

Step 17:Now the LICENSE AGREEMENT screen will appear as shown. Accept the agreement and hit NEXT button.
Malwarebytes License Agreement

Step 18:Now the Information screen will appear. Click on next button and continue following the steps.
DNSchanger Virus - Malwarebytes Information

Step 19:SELECT DESTINATION LOCATION screen will appear now. You can choose the location where Malwarebytes can be install. We recommend to choose the default location as shown then click NEXT button.
How to remove DNSchanger Virus - Malwarebytes Install path

Step 20:Now the SELECT START MENU FOLDER screen will appear. Let the default as it is and click NEXT button.
removal guide for DNSchanger Virus - Malwarebytes Folder

Step 21:Now the SELECT ADDITIONAL TASKS screen will appear. If you want a Desktop Icon or Quick Launch icon then check appropriate boxes.
shortcut

Step 22:READY TO INSTALL screen will come next. Hit the INSTALL button to install Malwarebytes.
Remove DNSchanger Virus - Ready to Install

Step 23:In this step let the UPDATE and LAUNCH checked as it is to update the application with latest malware definition to capture all the malwares then click FINISH button.
Updates

Step 24:Once update is done then Scanner screen will launch. Make sure to select PERFORM FULL SCAN is selected to clean up DNSchanger Virus infection. Click on SCAN button to start the scan.
full scan

Step 25:Now choose the local drives that you want to scan from the dialog box and click SCAN button.
How to remove DNSchanger Virus - drive

Step 26:Be patient as the scan will take several minutes before it cleans up DNSchanger Virus infection. Once the scan is finished, a message box saying the scan is complete will appear. Click OK button to close the box then click SHOW RESULTS button.
drive selection

Step 27:From results dialog box choose REMOVE SELECTED button to remove all the infections found. Malwarebytes will also delete all of the files and registry keys affected by DNSchanger Virus and add them to the quarantine.
DNSchanger Virus - quarantine

Step 28:Malwarebytes may required you to reboot the PC to complete the removal of DNSchanger Virus. After completion reboot your computer Malwarebytes will be relaunched, please follow the instructions on the screen and continue the removal process. Once everything is clean out a log will be open created by Malwarebytes. Please reviewed it and closed it. Now your computer should be free of DNSchanger Virus. Enjoy.
DNSchanger Virus - Complete

If you are still having issues. Please call our experts toll-free at 800-518-8533

Technical Details of DNSchanger Virus files :
You may need to delete following DNSchanger Virus files :

%Documents and Settings%\All Users\Start Menu\Programs\DNSchanger Virus
%UserProfile%\Desktop\DNSchanger Virus.lnk
%Program Files%\DNSchanger Virus
%AppData%\Protector-[rnd].exe
%AppData%\Inspector-[rnd].exe
%Documents and Settings%\All Users\Application Data\DNSchanger Virus
%AppData%\NPSWF32.dll

%AppData%\W34r34mt5h21ef.dat
%AppData%\result.db
%CommonStartMenu%\Programs\DNSchanger Virus.lnk

Also please check following DNSchanger Virus registry file:

HKEY_CURRENT_USER \Software\Microsoft\Windows\CurrentVersion\Policies\System ‘DisableTaskMgr’ = 0
HKEY_CURRENT_USER\Software\DNSchanger Virus
HKEY_CURRENT_USER \Software\Microsoft\Windows\CurrentVersion\Policies\System ‘DisableRegedit’= 0
HKEY_CURRENT_USER \Software\Microsoft\Windows\CurrentVersion\Policies\System ‘DisableRegistryTools’ = 0
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system ‘EnableLUA’ = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ‘Inspector’
HKEY_LOCAL_MACHINE\SOFTWARE\DNSchanger Virus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DNSchanger Virus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protector.exe
HKEY_CURRENT_USER \Software\Microsoft\Windows\CurrentVersion\Internet Settings ‘WarnOnHTTPSToHTTPRedirect’ = 0

DNSchanger Virus Symptoms:

Windows update stop working
Cannot run or install new security software
Does not connect to internet
Mostly computer runs slow

How to remove DNSchanger Virus on YouTube Video :

Feel stuck with DNSchanger Virus and need help. Please call our team toll-free at 800-518-8533. We will glad to help you.

3 Thoughts on “Remove DNSchanger Virus (DNS changer Trojan)

  1. infissi roma on July 10, 2012 at 1:07 am said:

    Normally I do not learn post on blogs, but I wish to say that this write-up very compelled me to take a look at and do it! Your writing style has been surprised me. Thank you, very nice article.

  2. Awesome things here. I am very glad to see your post. Thanks so much and I’m looking forward to contact you.

  3. MacLane on July 9, 2012 at 7:52 pm said:

    Thanks a bunch for sharing this with all people you really know what you are talking about! Bookmarked.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Post Navigation

  • Facebook
  • Google+