How to get rid of "DNS Unlocker"?

Anonymous
2015-08-26T14:50:57+00:00

Windows Defender can't remove DNS Unlocker Malware although my Windows Defeneder is up to date!! What to do?

Windows for home | Other | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2015-08-28T10:14:04+00:00

I am just copying some other person's solution which worked for me.

"

After investigating, I found out that the damn "DNS Unlocker" had modified my DNS settings! After fixing this I was completely good! I have google chrome, so I am unsure if this fix persist to other browsers.

The path to do this follows:

Control Panel > Network and Internet > Network and Sharing Center > Change Adapter Settings > Right-click your active internet connection (usually Wi-Fi since everyone uses that, unless your using a desktop) and click properties > Now under the Networking tab, scroll down until you find Internet Protocol Version 4 (TCP/IPv4) > Highlight that then click on properties > Both options in this windows should be automatic! The first option should be set to "Obtain an IP address automatically" and the second should be set to "Obtain DNS server address automatically!" If your computer belongs to a company or you actually have a custom DNS then this would not apply to you. Once you are finish, click "OK" and close the windows > Now go back into Chrome and reset your settings one more time and boom! It should work just fine.

"

Respect to the developers who build these malware!

Was this answer helpful?

90+ people found this answer helpful.
0 comments
Answer accepted by question author
Anonymous
2015-08-26T15:30:01+00:00

See this free, multi-step removal guide from Malwaretips.com: http://malwaretips.com/blogs/ads-by-dns-unlocker-removal/

If you do not see the program in Control Panel that you think is responsible for the ads and popups or you cannot uninstall it then move on to steps 2 and 3 (scan with AdwCleaner and Malwarebytes Free). If necessary you can run Hitman Pro (Trial Version) as suggested in step 4.  You may need to reset your browsers (see step 5).

Good luck…

Was this answer helpful?

30+ people found this answer helpful.
0 comments

152 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2016-02-28T22:47:06+00:00

    @SilviuG, that will be effective for a while but you're only treating the symptoms.  To get to the cause you need to get rid of DNS Unlocker from your machine and that will probably involve most, if not all of the steps others have mentioned.  It will probably also mean checking your registry and getting rid of all traces of DNS Unlocker from there too.

    To be honest I'm amazed that this wretched thing isn't high on the list of malware that security software checks for.  I've seen Windows Defender happily let the thing on to my machine and ESET wouldn't shift it.

    I agree Mike. Windows Defender can't detect it, nor can Norton, nor can a whole bunch of other anti-malware and anti-virus software. Some anti-malware apps can detect parts of the infection but not all, while being unable to sanitize the infection adequately. It is a serious threat to computers worldwide but for some reason is being ignored, which I believe is very dangerous, because there is the very real potential for someone to re-engineer this thing into a very harmful virus that has the capacity to cripple computer systems worldwide. All of the major companies appear to be sticking their heads in the sand on this problem, and this attitude could come back to bite them if they continue to do nothing.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2016-02-28T17:32:32+00:00

    @SilviuG, that will be effective for a while but you're only treating the symptoms.  To get to the cause you need to get rid of DNS Unlocker from your machine and that will probably involve most, if not all of the steps others have mentioned.  It will probably also mean checking your registry and getting rid of all traces of DNS Unlocker from there too.

    To be honest I'm amazed that this wretched thing isn't high on the list of malware that security software checks for.  I've seen Windows Defender happily let the thing on to my machine and ESET wouldn't shift it.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2016-02-26T10:34:43+00:00

    Please try the solution I posted (see quote below) and report back if it helped, it's been about a month since I did this and it seems to be working, no more DNS-unlocker

    I have had problems with DNS Unlocker for about 8 months now.

    I tried all available tools and solutions out there (including the ones presented in this thread). 

    They were unsuccessful on the long term (even if I was clean for a few hours/days/weeks).

    DNS Unlocker works via a Javascript in your browser. Blocking Javascript in your browser would get rid of the problem, but you can't use the interenet with Javascript blocked these days.

    Another method is to block the websites that distribute this script using your hosts file.

    A guide is available here: http://winhelp2002.mvps.org/hosts.htm

    However, don't use the entire list from there, if you are not confortable with that.

    Here is the list I used, this is enough to block DNS Unlocker todat. They might change the servers serving the script tomorrow, but you can always update the list. Please report back if this worked. Just add the following lines to your hosts file using Notepad.

    You can find the servers yourself by pressing F12 in Chrome on an infected page and looking at the Network tab, then JS tab, and looking for DNSUnlocker entries. This is how I came up with this list.

    EDIT: before reporting your results with this method, please flush your DNS and clear browser data (cookies ans such). You probably know how to clear your cookies. To flush your DNS, open an elevated command prompt and type ipconfig /flushdns

    0.0.0.0       ads.ad4game.com

    0.0.0.0       bdv.bidvertiser.com

    0.0.0.0       scsdev

    0.0.0.0       ib.adnxs.com

    0.0.0.0       segment-pixel.invitemedia.com

    0.0.0.0       cas.criteo.com

    0.0.0.0       tags.bluekai.com

    0.0.0.0       ld2.criteo.com

    0.0.0.0       pixel.invitemedia.com

    0.0.0.0       pix04.revsci.net

    0.0.0.0       vt.adition.com

    0.0.0.0       vube.com

    0.0.0.0       lp.sharelive.net

    0.0.0.0       www.888poker.com

    0.0.0.0       888poker.com

    0.0.0.0       www.bet365.com

    0.0.0.0       bet365.com

    0.0.0.0       kovla.com

    0.0.0.0       888casino.com

    0.0.0.0       www.888casino.com

    0.0.0.0       10990-29575966.ampxchange.com

    0.0.0.0       www.safesidetab.com

    0.0.0.0       www.tradeexchange.com

    0.0.0.0       yxo.warmportrait.com

    0.0.0.0       m73.dnsqa.me

    0.0.0.0       comparinggenie.com

    0.0.0.0       www.comparinggenie.com

    0.0.0.0       www.dnsunlocker.com

    0.0.0.0       dnsunlocker.com

    0.0.0.0         visadd.com

    0.0.0.0         a.visadd.com

    0.0.0.0         cdn.visadd.com

    0.0.0.0         tag.imonomy.com

    0.0.0.0         nps.pastaleads.com

    0.0.0.0         pstatic.eshopcomp.com

    0.0.0.0         w3i.co

    0.0.0.0         istatic.eshopcomp.com

    0.0.0.0         cdncache-a.akamaihd.net

    0.0.0.0         asrvvv-a.akamaihd.net

    0.0.0.0         srv.imonomy.com

    0.0.0.0         a.softpeaches.com

    0.0.0.0         jem.recombinantsunengaged.com

    0.0.0.0         kdv.decipheringwarns.com

    Was this answer helpful?

    0 comments