Billing & Account Support
DNSChanger Malware Virus Information
Last Updated: Fri, 17 Jun 2016 > Related Articles
Learn more about the DNSChanger virus, a form of malware that may be negatively affecting your system settings.
Cox Communications is dedicated to protecting the Internet experience of our customers. We notify customers when their computer systems may be infected a virus or other malicious software, which is commonly known as malware. DNSChanger malware affects your Internet browsing experience and can remotely control computers.
The following are ways that DNSChanger malware affects your computers, routers, or gateways.
- Redirects your Internet traffic to alternative websites, allowing the malicious operator to control the customer’s Internet browsing experience.
- Infected computers can be controlled remotely.
Additional details about this malware, how it can attack, and how your system may have been infected are available on the FBI and Department of Justice website.
DNSChanger malware causes a computer to use rogue Domain Name System (DNS) settings in one of two ways. First, when malware infects a computer, it changes the DNS settings to bad settings controlled by the malicious operator. Second, if the malware infects a router or gateway, all computers located behind the router or gateway within your network could be controlled by the malicious operator. Therefore, these changes may impact all computers on your network, even if those computers are not themselves infected with the malware.
This malicious software has many forms and versions. While no utility can always detect and remove all versions from all operating systems, Cox recommends the following free tools as they may be effective to remove DNSChanger malware.
- For Windows Vista and Windows 7, refer to Norton Power Eraser.
- For all other Windows operating systems, refer to Microsoft Safety Scanner.
- For Mac OS X, refer to DNSChanger Trojan Horse Removal.
Choose a removal tool that best suits your needs. All computers connected to the Internet should be scanned.
If these tools are unable to remove the malware, the Department of Justice along with the FBI and Cox, recommend that you update your master boot record and reformat your hard drive. If you are unable to do this yourself, take it to a local repair shop or contact Cox Tech Solutions. Visit Cox Tech Solutions online or call 877-TEC-SOLV (832-7658) to get started.
Check your DNS settings. It is important that you find and remove any incorrect settings on your computer, router, or gateway.
If your DNS settings display IP addresses within the ranges listed below, you must reconfigure the device and secure your router or gateway with a strong password. For tips on creating a strong password, refer to Cox Password Requirements.
- 188.8.131.52 through 184.108.40.206
- 220.127.116.11 through 18.104.22.168
- 22.214.171.124 through 126.96.36.199
- 188.8.131.52 through 184.108.40.206
- 220.127.116.11 through 18.104.22.168
- 22.214.171.124 through 126.96.36.199
- Use one of the guides below to access the your computer's Internet settings.
- To access the DNS settings of your router or gateway, refer to the owner's manual.
Further assistance is available at Cox Tech Solutions.