DNS Changer trojan is a dangerous virus that changes the DNS (Domain Name Server) Computer Configuration. The virus hijacks your Internet service provider on the Internet (ISP) DNS servers and change them to use their web browser to the management of illegal, unwanted and porn sites, etc. In addition, by changing the settings on your computer, steal personal information, install unwanted software, and invites other viruses and malware to attack computers. Once infected with the virus, then simply log on to your computer or e-mail box, but the kidnapper is lower. Do not worry, as a solution to this problem. Here is your complete guide to free virus removal support to help you remove viruses from your computer.
Instructions:
You must first determine whether a computer or router is plagued by DNS Changer or not. If your computer or router using a fake DNS server so harassed and should be treated immediately. Open Command Prompt in the Start menu> All Programs> Accessories. Alternatively, you can type "cmd" in the Run box and press Enter to open a command prompt. When the window opens, type "ipconfig / all" (without quotation marks) and press Enter. Find the DNS. You have to be somewhere in the range from 0 to 255
Note the DNS records and compare them with a fake DNS server. Fake of them belong to 85,255,127,255 85,255,112.0, 64.28.176.0 to 64.28.191.255, 67.210.0.0 to 67.210.15.255, 77.67.83.255 77.67.83.0 to; 93,188,167,255 93,188,160.0 for 213.109.64.0 to 213.109. 193 227 227 218 79 255 and, among others. It is necessary to perform the same procedure for the wireless router as well. If the DNS records that match any of those here, the computer or router will be adopted in accordance with the DNS Changer. Follow the instructions to remove it completely.
First, create a full backup of computer data. You can choose to save either the computer or cloud backup to external storage media like flash drives. After the backup completes, go to the Windows directory. Open Run (Start menu) and type "% windir% \ system32 \ drivers" (without quotation marks) and press Enter. The command will take you to the list of drivers. Look at the file "ndisprot.sys just right click and select Rename. Change the file name to something else. When finished, select the file and press the Delete key on your keyboard. When prompted for confirmation, press the Yes button. You have to remove file from the Recycle Bin, as well.
If the file has been deleted, open the Run again and type "regedit" (without quotation marks) and press Enter. This will open Windows Registry Editor. Before you leave, so make sure you back up all files. After scanning the registry for these wires and removes the last element in the whole thread. Remember that you should not delete the entire thread, then only the last record.
• HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces] "NameServer"
• HKEY_LOCAL_MACHINE\\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{random} DhcpNameServer = 85.255.xx.xxx,85.255.xxx.xxx
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{random} NameServer = 85.255.xxx.133,85.255.xxx.xxx
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\
DhcpNameServer = 85.255.xxx.xxx,85.255.xxx.xxx
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\
NameServer = 85.255.xxx.xxx,85.255.xxx.xxx
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\%RandomCLSID%"DhcpNameServer"
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\%RandomCLSID%"NameServer"
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\%Random CLSID% "DhcpNameServer"
When finished, close the Registry Editor. Open your antivirus software and perform a full scan of your computer. Wait for the scan to finish. When finished, remove antivirus invite dangerous objects detected during the scan. After connecting to the Internet and download the latest version to remove DNSChanger either McAfee or Malwarebytes. Save the downloaded file on your computer.
Upon completion, you should find and run the installation file. Follow the instructions and / or run. When the tool is installed, open it and then update the latest definitions of viruses and malware. Wait until after the update. After completion of a full computer scan. So I invite you the tools to remove all infected files. Close all windows. Empty the trash, and then restart your computer. The computer is no DNS Changer Trojan virus.
