Preferred DNS keeps changing without my permission

30 pts.
Tags:
DNS
DNS server
Hello, I have directed my PC's preferred DNS to my main server, but every time it keeps changing to a weird IP, an it doesn't stop. Even though I change it back, when I return to the IP properties, its back to that weird IP. Would much appreciate your help. Thanks

Answer Wiki

Thanks. We'll let you know when a new response is added.

Use Avast!Antivirus’s boot time scanner.

Sounds like you may have a virus on your computer. There are several viruses out there which change your DNS settings to point to their DNS Server so that when you try to go to sites they can intercept the call and direct you to their version of the site.

I would use another computer and download an antivirus program, then burn that program on CD and use the CD to install the anti-virus on the computer in question.

**************************************************************************
I agree, sounds line a virus/spyware
Another option, which you may want to run in addition to the above suggestion, is to download ClamWin it is a “no install” antivirus program that runs from a USB drive. Make sure you update the virus signatures before using to software.
******************************************************************************************

Discuss This Question: 8  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Shey2k7
    ok il try that, but ive got these issues as well, one being that when i try to install kaspersky my pc keeps rebooting, and the ClamWin anti virus is not an on-access scanner, i would have to manually scanner a file to know if its infected, and in this case i dont know what that file is :( Pls, help me :( Thanks
    30 pointsBadges:
    report
  • Dwiebesick
    MrDenny and Flame covered the most likely. If you have scanned your system with several antivirus/scumware programs (like on-line Trend Micro, Bitdefender) then I would look at this as a wild shot. What is the weird IP. Have you done a WHO IS lookup? Have you searched your network for a rogue DHCP server? Let us know how you are doing. dmw
    2,235 pointsBadges:
    report
  • Dwiebesick
    It does sound like you have scumware. Here is a link with information that may help you. If you know how to boot into safe mode with networking, you can do on line scans at Trend Micro, Bitdefender, http://www.eset.com/onlinescan and use the instructions at http://www.malwarebytes.org What do you currently use for your antivirus program? Keep us informed dmw
    2,235 pointsBadges:
    report
  • Shey2k7
    i just backed up my hard drive and re installed windows, cos it was holding up alot of work. Thanks alot for all your replies and suggestions it is very much appreciated :-D
    30 pointsBadges:
    report
  • Flame
    Keep in mind that your backup more than likely contains files that are infected. If you restore these files you could be right back where you started. Installing a program like Spybot and adaware then keeping the updates current might help you avoid problems in the future. Good Luck! -Flame
    14,925 pointsBadges:
    report
  • Silverx8080
    Hi guys i have the same problem with my system i am using XP2002 SP3 my preferred DNS keeps changing i did a IP look up on the DNS it keeps changing to and it turned out to be some server in Ukraine if i manually change my preferred DNS it reverts back to the same DNS and restarts the computer the only way for me to change it is to uncheck TCP Ip properties from Local area connection check it back again and change the IP But when i restart my computer it becomes same again I am using Kaspersky 2009 i don't know how long its been happening but i noticed it recently after the my connection speed started dwindling is it possible that my userid's and passwords have been compromised
    10 pointsBadges:
    report
  • EagleVision
    If you are using DYNDNS with the internet guide enabled, it changes your DNS settings to their DNS servers. You are allowed to change the DNS settings but the old settings will return as soon as you save the setting. Disable the internet guide in the DYNDNS client and you will be able to enter and save your DNS servers. This was causing printer sharing and a host of other network issues
    10 pointsBadges:
    report
  • TjeChiwara

    Not necessarily a virus . . . depends on the IP address . . . if it is the Server IP, you have a misconfigured network . . . there are some potential answers in the computer Profile Setup that have worked  in some circumstances, this is a very difficult problem to resolve.

    10 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following