Billing & Account Support
DNSChanger Malware Virus Information
Last Updated: Wed, 19 Feb 2014 > Related Articles
Learn more about the DNSChanger virus, a form of malware that may be negatively affecting your domain name system settings.
DNSChanger Malware Information Cox Communications is dedicated to protecting the Internet experience of our customers. We notify customers when their computer systems may be infected with malware.
DNSChanger, a form of malware, redirects your Internet traffic to alternative websites, allowing the malicious operator to control the customer’s Internet experience. A common method is to redirect advertisement traffic to sites controlled by the malicious operator. This malware can also allow infected computers to be controlled remotely. Details about this malware, how it can attack, and how your system may have been infected, can be found on the following FBI and Department of Justice website.
DNSChanger malware causes a computer to use rogue, or bad, Domain Name System (DNS) settings in one of two ways. First, if the malware successfully infects the customer’s computer(s), it changes the DNS settings to replace the good ISP settings with rogue settings that are then operated by the malicious operator. Second, if the malware infects a router or gateway device on the customer’s network, all computers located behind the router or gateway device within your network could be controlled by the malicious operator. Therefore, these changes may impact all computers on your network, even if those computers are not themselves infected with the malware.
There are many forms and versions of this malicious software and no utility can effectively detect and remove all versions from all operating systems. Cox recommends you consider using the following free tools for removing the malicious software:
Windows Operating Systems:
Mac OS X: DNSChanger Trojan Horse Removal
As a precaution to protect your privacy and data -- if these tools are unable to remove the malware -- the Department of Justice with the assistance of the FBI and Cox, recommend that you update your master boot record and reformat your hard drive, or take it to a local repair shop to have this done.
Cox Tech Solutions can assist. Visit Cox Tech Solutions online at https://secure.coxtechsolutions.com/ or call 877.TEC.SOLV (832.7658) to get started.
Check your DNS settings. It is very important that you find and remove any incorrect settings on your computer, router, or gateway.
If your DNS settings have IP addresses within the ranges listed below, you must re-configure the device and secure the router / gateway with a strong password. See Cox Password Requirements for tips.
- 184.108.40.206 through 220.127.116.11
- 18.104.22.168 through 22.214.171.124
- 126.96.36.199 through 188.8.131.52
- 184.108.40.206 through 220.127.116.11
- 18.104.22.168 through 22.214.171.124
- 126.96.36.199 through 188.8.131.52
Follow one of the below guides to access the Internet settings on your computer:
To access your router or gateway settings, see the owner's manual and locate the DNS settings.
Further assistance is available at Cox Tech Solutions at affordable rates.