DNS unlocker Help with removal

Luuk53830

Estimable
Oct 4, 2014
2
0
4,510
0
Hi, first of all thank you for reading my post and any help you can provide.
I have an old laptop that recently got infected with the DNS Unlocker malware/virus and it has been a total pain in the a** to remove, MalwareBytes does detect it and can remove it but then my internet doesn't work anymore (wireless). Chrome just gives me a this error:
DNS_PROBE_FINISHED_NXDOMAIN
I have tried following a few tutorials but none of them even match, i dont have any unwanted extentions in Chrome or any other browser, my Network settings are what they should be and i don't have any unwanted programs installed either.
Any help is highly appreciated,
 

AcmeUK

Commendable
Nov 23, 2016
3
0
1,520
1
My browser got hijacked by DNS Unlocker!

I am using Win10 with Defender activated and I am careful about what sites I visit, but I still got hit!
Spybot S & D did not find the ‘Malware’ neither did AdAware.

Analysis of my system showed that DNS Unlocker had made 2 changes to my system.

The first change I located was that DNS server addresses had been added to my network adapter TCP/IP settings.
To get to these settings I navigated to my network adapter then navigated as follows:-

Properties > Internet Protocol V4 > Properties > Advanced > DNS tab

Here in the DNS server addresses I found that 82.163.142.7 95.211.158.134 had been added.

I deleted these addresses and rebooted my PC, all fixed; or so I thought.

After a while I was again bombarded by DNS Unlocker adds. I checked the TCP/IP settings and there was nothing there.
I eventually found that a Registry key had been added. See details below:-

Key Location : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

Key Name : NameServer

Key Type : REG_SZ

Key Value : 82.163.142.7 95.211.158.134

I deleted the key, rebooted and all is well.

I hope this helps others.
 

AcmeUK

Commendable
Nov 23, 2016
3
0
1,520
1
My browser got hijacked by DNS Unlocker!

I am using Win10 with Defender activated and I am careful about what sites I visit, but I still got hit!
Spybot S & D did not find the ‘Malware’ neither did AdAware.

Analysis of my system showed that DNS Unlocker had made 2 changes to my system.

The first change I located was that DNS server addresses had been added to my network adapter TCP/IP settings.
To get to these settings I navigated to my network adapter then navigated as follows:-

Properties > Internet Protocol V4 > Properties > Advanced > DNS tab

Here in the DNS server addresses I found that 82.163.142.7 95.211.158.134 had been added.

I deleted these addresses and rebooted my PC, all fixed; or so I thought.

After a while I was again bombarded by DNS Unlocker adds. I checked the TCP/IP settings and there was nothing there.
I eventually found that a Registry key had been added. See details below:-

Key Location : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

Key Name : NameServer

Key Type : REG_SZ

Key Value : 82.163.142.7 95.211.158.134

I deleted the key, rebooted and all is well.

I hope this helps others.
 
Thread starter Similar threads Forum Replies Date
1 Antivirus / Security / Privacy 1
J Antivirus / Security / Privacy 2
V Antivirus / Security / Privacy 2
N Antivirus / Security / Privacy 6
A Antivirus / Security / Privacy 2
C Antivirus / Security / Privacy 1
K Antivirus / Security / Privacy 1
C Antivirus / Security / Privacy 1
surfer10k Antivirus / Security / Privacy 2
A Antivirus / Security / Privacy 1
1 Antivirus / Security / Privacy 1
P Antivirus / Security / Privacy 2
G Antivirus / Security / Privacy 0
G Antivirus / Security / Privacy 2
A Antivirus / Security / Privacy 2
A Antivirus / Security / Privacy 4
M Antivirus / Security / Privacy 5
A Antivirus / Security / Privacy 9
T Antivirus / Security / Privacy 4
U Antivirus / Security / Privacy 3

ASK THE COMMUNITY