30 pts.
 Preferred DNS Keeps Changing without my permission
hello, i have directed my PC's preferred DNS to my main server, but every time it keeps changing to a weird IP, an it doesn't stop even tho i change it back, wen i return to the IP properties, its back to that weird IP. would much appreciate your help Thanks

Software/Hardware used:
ASKED: September 21, 2008  6:58 AM
UPDATED: June 7, 2010  3:05 PM

Answer Wiki:
Use <a href="http://www.avast.com">Avast!Antivirus's </a>boot time scanner. Sounds like you may have a virus on your computer. There are several viruses out there which change your DNS settings to point to their DNS Server so that when you try to go to sites they can intercept the call and direct you to their version of the site. I would use another computer and download an antivirus program, then burn that program on CD and use the CD to install the anti-virus on the computer in question. ************************************************************************** I agree, sounds line a virus/spyware Another option, which you may want to run in addition to the above suggestion, is to download <a href="http://www.clamwin.com/">ClamWin</a> it is a "no install" antivirus program that runs from a USB drive. Make sure you update the virus signatures before using to software. ******************************************************************************************
Last Wiki Answer Submitted:  December 10, 2008  10:40 pm  by  Flame   14,895 pts.
All Answer Wiki Contributors:  Flame   14,895 pts. , Denny Cherry   64,520 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

ok il try that, but ive got these issues as well, one being that when

i try to install kaspersky my pc keeps rebooting,
and the ClamWin anti virus is not an on-access scanner,

i would have to manually scanner a file to know if its infected, and in this case i dont know what that file is :(

Pls, help me :(

Thanks

 30 pts.

 

MrDenny and Flame covered the most likely. If you have scanned your system with several antivirus/scumware programs (like on-line Trend Micro, Bitdefender) then I would look at this as a wild shot. What is the weird IP. Have you done a WHO IS lookup? Have you searched your network for a rogue DHCP server?
Let us know how you are doing.
dmw

 2,220 pts.

 

It does sound like you have scumware. Here is a link with information that may help you. If you know how to boot into safe mode with networking, you can do on line scans at Trend Micro, Bitdefender, http://www.eset.com/onlinescan and use the instructions at http://www.malwarebytes.org

What do you currently use for your antivirus program?

Keep us informed
dmw

 2,220 pts.

 

i just backed up my hard drive and re installed windows, cos it was holding up alot of work.

Thanks alot for all your replies and suggestions

it is very much appreciated :-D

 30 pts.

 

Keep in mind that your backup more than likely contains files that are infected. If you restore these files you could be right back where you started. Installing a program like Spybot and adaware then keeping the updates current might help you avoid problems in the future.
Good Luck!
-Flame

 14,895 pts.

 

Hi guys
i have the same problem with my system
i am using XP2002 SP3
my preferred DNS keeps changing
i did a IP look up on the DNS it keeps changing to and it turned out to be some server in Ukraine
if i manually change my preferred DNS it reverts back to the same DNS and restarts the computer
the only way for me to change it is to uncheck TCP Ip properties from Local area connection check it back again and change the IP
But when i restart my computer it becomes same again
I am using Kaspersky 2009
i don’t know how long its been happening
but i noticed it recently after the my connection speed started dwindling
is it possible that my userid’s and passwords have been compromised

 10 pts.

 

If you are using DYNDNS with the internet guide enabled, it changes your DNS settings to their DNS servers. You are allowed to change the DNS settings but the old settings will return as soon as you save the setting.
Disable the internet guide in the DYNDNS client and you will be able to enter and save your DNS servers.
This was causing printer sharing and a host of other network issues

 10 pts.