Easily Remove DNSChanger Trojan Virus on Windows 7, Vista, XP and Mac

▶ Millions will lose Internet on March 8th due to a Trojan Called DNSChanger.

▶ Check if you are one among them.

▶ If your computer is affected, immediately rectify it with tools availabe at the end of this article.

The Internet could go dark for millions of users worldwide on March 8 because of a malware that has corrupted computers in more than 100 countries. In fact, it is estimated that 500,000 in America alone infected.

Easily Remove DNSChanger Trojan Virus on Windows 7, Vista, XP and Mac


If Federal Bureau of Investigation(FBI) will go ahead with its plans to switch off servers that were put in place instead of the rogue servers then its all over.


Do not panic now as we have come up with a possible solution to avoid blackout on March 8th in this article today.

Well let me explain you the complete story of the “Internet Shutdown on March 8th”.


At first lets start with the basics and know what is a DNS server, DNSChanger and other basics. Then I will let you know the solution – a DNSChanger Removal Tool.


What is a DNS Server?

DNS server which stands for Domain Name System server is a free Internet service which coverts the domain name to the actual IP address.

For eg. when you type http://google.com on your browser, it is converted in to its respective IP address by a DNS server.


Since it becomes difficult for the users to remember the IP addresses of all websites, we use a name and the DNS server converts the name into the IP address for us.


In brief, DNS Servers are a critical component of your computer’s operating environment without them, you would not be able to access websites, send e-mail, or use any other Internet services.



What is a DNSChanger?

The DNSChanger is a Trojan that enters any computer when the user downloads it unknowingly from some porn or other rogue websites.


It replaces the existing original DNS servers settings on the users computer with fraudulent servers operated by the criminals.


As a result, the user is unknowingly redirected to websites that distributed fraudulent software or displayed ads that put money into the bad guys’ pockets.


The malware was first discovered around 2007, and since then it has infected millions of computers.



Why is this malware damn Dangerous?

1>> Once DNSChanger enters your system, it will disable the antivirus or any other security software running on it.


2>> Also, it will not allow the user to visit any security websites.


In such a scenario it becomes really difficult to get it out of the PC.

If it is not removed, then no Internet.


Can you even Imagine life without Internet ?



Enter FBI..

Last year, the FBI uncovered a network of rogue DNS servers and also arrested 6 men who had allegedly involved in making the Trojan.


The FBI later stepped up by replacing the rogue Trojan servers with servers of their own in an attempt to remediate the damage, but the fix was only temporary.


Now the FBI is expected to end use of those replacement servers as early as next month(MARCH 8th) and, at that point, the Internet for millions could essentially be over.


Don’t worry if your computer is affected, you have as many as half of the Fortune 500 companies, as well as two dozen government entities that are affected too.



How to know if your Computer is affected?

Visit this website : www.dns-ok.de . It is a German website that tells you if your computer is affected by the malware.

When I visited the website, this is how it looked.


Just download this DNSChanger Removal Tool from Avira and run it. It will tell you if your computer is affected or not.

In brief,

If your DNS servers are in these range, then you are affected.

  • –
  • –
  • –
  • –
  • –
  • –



Official WebsiteWikipediaEasily Remove DNSChanger Trojan Virus on Windows 7, Vista, XP and Mac



Solution.. The Relief..


For Windows Users :

The solution to this problem comes from one of the worlds best security software provider Avira.

1>> Download the removal tool from here.

2>> No need to install. Just double-click on the file and run it.

3>> The tool will first check if your computer is affected.

4>> If affected, it will apply the recommended changes within the DNS settings.

5>> However, a restart of Windows will be necessary after the execution of the tool and a successful repair.


For Mac Users :

1>> Download the removal tool from here.

2>> Once downloaded run the setup file.

3>> Restart Mac once the recommended changes are made by the tool.


I also suggest that you once again check your computer with Virus Remover 2011 and TDSS Killer.


Install an antivirus once again. Check here for the list of free and premium antivirus softwares .


When nothing works out,

Just reinstall the Windows or Mac OS. This is the last and best solution to the problem.


54 Comments to Easily Remove DNSChanger Trojan Virus on Windows 7, Vista, XP and Mac

  1. Do you mind if I quote a few of your articles as long as I provide credit and sources back to your website? My blog site is in the very same niche as yours and my visitors would truly benefit from some of the information you provide here. Please let me know if this okay with you. Thank you!

  2. Nikhil you really created a very useful informative technology web site. We are your fan. Thank you for sharing with us.

  3. thanks for this wonderful information on such deadly virus.

    I checked mu computer for DNSChanger virus but thank god I am safe.
    Thanks for this wonderful dnschanger removal tool for windows.

    Others plz check your computer before losing Internet.

    Else you will cry.

  4. Thank you very much Nikhil your articles are the best. I did a check and my computer doesn’t have any malware. Thank you again !!!

  5. Francois Goulet

    Both recommended tools said my PC was not infected by DNSChanger. But my antivirus software is still disabled and the PC is very slow. Have not seen pop up ads in a while, though.

  6. Win Mail to Outlook

    I am regular visitor, how are you everybody? This article posted at this web site is in fact fastidious.

  7. Hi

    this is what I get after running the RemoveDNSCharger
    “The DNS settings of your system have not been manipulated by the DNSCharger” What does this means?


  8. key windows 7

    Great post. I used to be checking constantly this weblog and I’m inspired! Very useful information specifically the final section 🙂 I deal with such info much. I was seeking this certain info for a very lengthy time. Thank you and good luck.

  9. Hi, yup this article is really nice and I have learned lot of
    things from it about blogging. thanks.

  10. windows 7 key

    hello!,I really like your writing very a lot! proportion we communicate more approximately your article on AOL? I need a specialist in this area to resolve my problem. May be that’s you! Looking forward to look you.

  11. hi im a victim of the dnschanger aka honeypot collector virus. My internet provider has been blocking me to connect to the internet due to this stupid virus. I do have a wireless router, ive done the dnschanger website checks, downloaded tdsskiller, and kapsersky rescue disk, used my android phone to tether to update my eset antivirus and malware bytes. Still getting blocked.. Today i havent used or connected any of my pcs to my router, just used my tablet toconnect to the internet and i did get blocked again due to this virus! Pls help and my last resort which i hate to do is a reformat.. Anything else would be vey very helpful thanks

    • Even after doing all the steps mentioned in the article, if you failed to remove that dirty virus, I suggest you to take backup of all necessary files to your pen drive or if you have an external hard disk and then re-install Windows. That is the only way ahead if you don’t want to lose Internet friend.
      Consider yourself to be lucky since your computer is not hacked completely.

      • ty for your reply. i recently bought a new router and all pcs are currently off. using my android tablet to reply back, ive also purchased a new ssd. if all this fails ill be so lost and have a hole in my wallet. by any chance can the dnschanger infect other parts of the computer? or can it only live in a harddrive?

  12. Hi< nikHiL dont know, what kind of virus has gone into my PC, suddenly word files are not working, no cursor, every thing is selected itself, if i select a word document above desktop, all files prior to it are selected itself. suddenly all numeral keys are not typing numbers but other characters instead like exclaimation sign, at the rate sign, hash signs etc. Two arrow keys for moving right or left have failed totally.suddenly without caps lock, all albhabets start appearing as either all caps or small without my control. One more thing one window for sticky/toggle key keeps appearing on the monitor with a noisy sound, which never used to happen earlier.It asks either to cancel or change the settings. I dont know what to do?? I have antivirus program guardian buyed for one year in my laptop but it does not detect any thing. Please help me.i am in dire need to get hold of my PC.

    • Smita,

      I don’t believe its a virus thats affecting your computer. It sounds like its a stuck shift key or a messed up keyboard. On any computer XP and beyond if you hit the shift key 5 times it will bring up “Sticky keys” option for windows. That sound is just the sound windows makes when the sticky keys option comes up. If you keep hitting shift it sounds like R2-D2 from star wars lol. Sorry just a side note. But either your keyboard is damaged or your shift key is stuck. to unstick a stuck key the easiest thing to do is:
      turn off computer
      take out battery(if laptop)
      or unplug keyboard (if desktop)
      **do this outside**
      get denatured or isopropal alcohol and pretty much pour it all over you keyboard. ( i generally hold it at a 45 degree angle and let it run down).
      Let your keyboard sit for about an hour.
      then blow it out with compressed air/air duster
      and wipe with paper towel or microfiber cloth.

      that should fix your keyboard issue if its stuck.
      if you do that and you’re still having issues then your keyboard is broke or has failed and needs to be replaced.

      I Hope this helps,
      Computer System Analyst II

  13. After going over a handful of the articles on your web site,
    I truly like your way of blogging. I book-marked it to my
    bookmark website list and will be checking back in the near future.

  14. I rarely leave a response, however i did some searching and wound
    up here Easily Remove DNSChanger Trojan Virus on Windows 7, Vista, XP and Mac : TechnoJourney. And I actually do have some questions for you if you usually do not mind.
    Is it simply me or does it seem like some of these remarks.

  15. CrustyRuss

    Thank you, Nikhil!! My father-in-law’s computer was infected with the DNSChanger virus and your article helped me to help him remove it! Much appreciated!!

  16. I’ve been surfing online greater than three hours lately, yet I by no means discovered any fascinating article like yours.

  17. I can’t connect to the internet with explorer firefox or any program. None of my virus scanners work nor did any of the suggested programs posted here work no threats found. I need help fixing this. I thought I had the DSN Changer but I’m not sure what to do now… I even tried the restore point.

  18. ok I go to the german website and it says that my dns configuration is manipulated, I download the avira tool to deal with this and it says that my system isn’t affected by the DNSchanger. But I go back to the german site and their still saying that it’s been manipulated. Is it something else that’s the problem?

  19. My laptop suddenly doesn’t access the internet. when I perform a check or a diagnosis on internet settings it says,” failed to configure IP address. I used another PC on the same internet cable and it connects normally. I tried many solutions; anti-viruses,malware tools, I even reinstalled fresh copies of windows xp , vista and 7 and all in vain. please if you have any suggestions, give it to me. My laptop is dead without internet.

    • Check your Network Interface Card. There may be some problem with it. Because you say that you have installed fresh copy of windows, I feel that something is wrong with your hardware. If the problem persists, contact your Internet Service Provider.

  20. ok I go to the german website and it says that my dns configuration is manipulated, I download the avira tool to deal with this and it says that my system isn’t affected by the DNSchanger. But I go back to the german site and their still saying that it’s been manipulated. Is it something else that’s the problem?I’ve done all this disinfection steps, I mean manually desinfection, but I keep getting the same msg 🙁 🙁

  21. thank you so much. this really helped… only problem is, i already paid for the damn vista security… hope i can block the charges on time. anyway, thanks again.

    Provide me information to know how I will be able to know that my system gets infected once again by same virus???

  22. Dinesh Atluri

    Hi Nikhil,from today morning onwards my dell laptop is shutting down frequently for below 5 mins..i think this was happened due to this dns virus..actually in my laptop i had kaspersky licensed anti virus..but still i am facing this pblm..my laptop is one year old.from past one year i did not face any single pblm..today only i was facing this one.please guide me dude..

    • Hi Dinesh,

      The DNS Changer virus will not cause frequent Laptop shutdown. It will definitely be due to a technical fault in your laptop. Take it to the nearest Dell service center or call their helpline for more details.
      It is definitely not due to the DNS Changer.

  23. On Friday, we reported that on Monday more than 2,45,000 computers throughout the world could face an Internet blackout if the Alureon Malware had infected them and the PCs were not patched. The problem arose because the virus was designed to redirect Internet traffic through rogue DNS servers controlled by criminals and since the DNS servers act like the gateway to the Internet and now that the servers of the criminals are about to get permanently terminated, the computers will not connect to the Internet. If you haven’t already, you should check whether your computer is infected with the virus and fix it.

    Tools for repairing DNS Violations are as follows:

    Hitman Pro (32bit and 64bit versions)
    Kaspersky Labs TDSSKiller
    McAfee Stinger
 – http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
    Microsoft Windows Defender Offline
 – http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline
    Microsoft Safety Scanner
    Norton Power Eraser
 – http://security.symantec.com/nbrt/npe.aspx
    Trend Micro Housecall
 – http://housecall.trendmicro.com
 – http://macscan.securemac.com/
 – http://www.avira.com/en/support-for-home-knowledgebase-detail/kbid/1199

  24. Heya i am for the first time here. I hope to give something back and help others like you helped me.

  25. It’s always exciting to read through content from other authors and practice something from other web sites.

What's Your Thoughts On This?