Internet
The Internet should add convenience, not headaches. From step-by-step instructions to helpful tips, we'll help you install your equipment, troubleshoot problems, and get the most out of your online experience – minus the migraine.
DNSChanger Malware Virus Information
Last Updated: Tue, 20 Nov 2012 > Related Articles
Summary
Learn more about the DNSChanger virus, a form of malware that may be negatively affecting your domain name services.
Solution
Cox Communications is dedicated to protecting the Internet experience of our customers. We notify customers when their computer systems may be infected with malicious software (malware).
DNSChanger Malware Information Cox Communications is dedicated to protecting the Internet experience of our customers. We notify customers when their computer systems may be infected with malicious software (malware).
DNSChanger, a form of malware, redirects your Internet traffic to alternative web sites allowing the malicious operator (and alleged criminal) to control the customer’s Internet experience. A common method is to redirect advertisement traffic to sites controlled by the malicious operator. This malware can also allow infected computers to be controlled remotely. Details about this malware, how it can attack customers, and how your system may have been infected, can be found on the following FBI and Department of Justice website.
DNSChanger malware causes a computer to use “rogue,” or bad, DNS servers in one of two ways. First, if the malware successfully infects the customer’s computer(s), it changes the computer’s DNS server settings to replace the ISP’s good DNS servers with rogue DNS servers operated by the criminals. Second, if the malware infects a router or gateway device on the customer’s network, all computers located behind the router or gateway device within your network could be controlled by the malicious operator. Therefore, these changes may impact all computers on your network, even if those computers are not themselves infected with the malware.
Malware Tools
There are many forms and versions of this malicious software and no utility can effectively detect and remove all versions of this software from all operating systems at this time. Cox recommends taking the following actions with these free tools as they may be effective in removing the malicious software:
Windows Operating Systems:
Mac OS X: DNSChanger Trojan Horse Removal
If these tools are unable to remove the malware, as a precaution to protect your privacy and data, the Department of Justice with the assistance of the FBI and Cox, recommend that you update your master boot record and reformat your hard drive or take it to a local repair shop to have this done.
Cox Tech Solutions can assist. Visit Cox Tech Solutions online at https://secure.coxtechsolutions.com/ or call 877.TEC.SOLV (832.7658) to get started.
DNS Settings
We recommend that you also check your DNS settings. It is very important that you find and remove any incorrect servers listed in the settings of your computers and router or gateway.
If your DNS settings have IP addresses within any of the ranges listed below, you must re-configure the device and secure the router / gateway with a strong password. See Cox Password Requirements for tips.
- 85.255.112.0 through 85.255.127.255
- 67.210.0.0 through 67.210.15.255
- 93.188.160.0 through 93.188.167.255
- 77.67.83.0 through 77.67.83.255
- 213.109.64.0 through 213.109.79.255
- 64.28.176.0 through 64.28.191.255
To access the Internet settings on your computer you may follow one of our handy guides:
To access your router or gateway settings, please see your device's owner's manual and locate the device's DNS settings.
Further assistance is available at Cox Tech Solutions at affordable rates.
Need More Help?
-
Technical Support
Live Chat
-
Send An Email To
Cox.com
-
Join the Discussion
Support Forums
-
Find Your Nearest
Service Center
-
Give Us A Call
24/7 Phone Support
-
Additional Contacts
Local Information

