DNS Unlocker “Virus” Removal (October, 2016 Update)

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

This article helps with the DNS Unlocker “Virus” removal from Chrome, Firefox, IE and Android phones. If a DNS Unlocker removal tool is what you are looking for, we can help you with that as well.

Remove Ads by DNS Unlocker

Remove Ads by DNS Unlocker

DNS Unlocker removal tool is a program known to belong to the well-known adware class. It is marketed as supposedly being able to grant you access to blocked websites and digital media, free of charge. Unfortunately it does not deliver. As you can tell from its name, that’s not quite the point of adware programs, merely the pretense of their legality. This type of software is designed for all of the most popular Internet browsers (Chrome, Mozilla, Internet Explorer) and has been well documented to induce numerous advertisements in the form of pop-up windows, layers of banners and random in-text links on pages, where they normally aren’t present. We strongly advise you against clicking on any of these ads, because it is very common for them to sometimes be fake or just pose a clever ruse for the user to be tricked into clicking on the specific pop-up or link. Once this happens you will in many cases be redirected to shady websites and prompted to install different types of software under the pretense of missing “codecs”, different program updates, anti-virus programs or tools to deal with a “detected” threat. These are exactly the types of things that would have you end up in a situation where a DNS Unlocker removal is unavoidable. You can see another prime example of this type of software in our how to remove Yoursites123 instructions.

All that being said, however, please note that adware is not to be confused with a virus or other type of malware (‘malicious’ + ‘software’ = malware). It is an annoying piece of programming, but it will not directly harm your computer or the data stored on it. Specialists like to refer to these types of things as potentially unwanted programs or PUP. One of the reasons why DNS Unlocker would be potentially unwanted was described above, but there’s also another, no less important reason for you to consider ridding yourself of this parasite as quickly as you can. Adware is notorious for collecting you browsing related information, since it needs to optimize the content of the ads and make it more appealing to you. This information, which might include your geolocation, IP address, favorite sites, search queries and even personal details you’ve entered somewhere, is stored, analyzed and quite likely sold to third parties. We assume you can extrapolate the dangers of there being cyber criminals among these third parties and what that could result in, should your data land in their hands. So even though DNS unlocker is not a virus you should strive to have it removed from your machine – the sooner, the better.

In addition to these more serious ways in which the DNS Unlocker “virus”can affect you, you could also expect to experience one or more of the following symptoms related to being infected by adware:

  • General slowdown of your PC;
  • Various system errors;
  • Possible gathering and installation of other adware.

When it comes to dealing with nuisances like the DNS Unlocker “virus”, understanding how it came to be on your PC in the first place is paramount. There are several ways this could have happened: Spam email is the first and most widely used method, but probably the least effective one. The second and by far the most lucrative one are freely distributed programs bundled with adware. These packages contain unwanted “extra content” that is firmly seated on the thin grey line between legal and illegal. You will typically find these on open-source download platforms or torrent websites. Once downloaded, a common mistake many people make (apart from not reading the EULA) is choosing the default setup settings. This is what enable the developers to stealthily include the bundled in adware, because you have technically already given your permission for that. So they end up having to deal with some DNS Unlocker removal problem. For this reason, we highly recommend choosing the advanced/custom settings for any such installation, because it will allow you to view what ‘complimentary’ programs have been included and give you the option of permitting or not permitting them to be installed as well.

An additional piece of information:

You may (or may not) encounter this Adware with a varying degree of other names, like powered by DNS, powered by DNSUnlocker, brought by DNS Unlocker, etc. The name doesn’t really matter. It’s all basically the same thing, so don’t be confused even if there are small differences. The DNS Unlocker “Virus” refers to the practice of advertisement platforms labeling their ads to increase their own renown. In reality it doesn’t mean anything. We’ve already had several people in the comments confused by this, so we wrote it down here to make matters clear. 


Name DNS Unlocker
Type Adware/Browser Hijacker hybrid
Danger Level Medium (DNS Unlocker can lead to additional programs, potentially even malicious ones, being installed on your computer)
Symptoms Small icons appearing in the ash-tray. Advertisements imposed on any browser pages. Sudden redirects to random websites.
Distribution Method Bundled with various types of free software, spam email and from online adverts
Detection Tool

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version.
More information about SpyHunter and steps to uninstall.


DNS Unlocker Removal

Readers are interested in:

NOTE! If you are an android mobile user, follow this guide: Android Malware Removal


Reboot in Safe Mode (use this guide if you don’t know how to do it).

This was the first preparation.

UPDATE! If you are coming back in search of new information, make sure to check the updated sections below (Steps 3 and 6)


To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Reveal All Hidden Files and Folders.

  • Do not skip this – DNS Unlocker may have hidden some of its files.

Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer.



Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.



Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).


Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512 Remove DNS Unlocker from Internet Explorer:

Open IE, click IE GEAR —–> Manage Add-ons.

pic 3

Find the threat —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove DNS Unlocker from Firefox:

Open Firefox, click mozilla menu ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.
chrome-logo-transparent-backgroundRemove DNS Unlocker from Chrome:

Close Chrome. Navigate to:

C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.

  • At this point the threat is gone from Chrome, but complete the entire guide or it may reappear on a system reboot.


Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are dangerous. Google them or ask us in the comments.


This is the most important and difficult part. If you delete the wrong file, it may damage your system irreversibly. If you can not do this,
>> Download SpyHunter - a professional parasite scanner and remover.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Right click on each of the problematic processes separately and select Open File Location. End the process after you open the folder, then delete the directories you were sent to.



Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random


In my case I found presence of the Adware in:


 I found a bunch of CinemaPluses and CrossBrowse(r) in there.


  • HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionUninstall

In here I found something called Iminent Toolbar and Linkey. These are both something you need to remove.


There may be others. My recommendation for practically anything in this step is to carefully review all  the strings I originally mentioned one by one, and these two new ones. Anything at all that seems it may be related to DNS Unlocker – google it. See where that leads you. At least for now it has worked for me.


We received some new information for the DNS Unlocker removal procedures – a big thank you to Ricardo Lira for this. We (foolishly) did not take into account something that should have been obvious: DNS Unlocker tampers with your DNS settings. To remove it completely you have to restore these settings. We will show you how to do this here (again, taken from Ricardo Lira‘s comment, and edited):

Type Control Panel in the Windows Search field, hit enter. From then on navigate to Network and Internet —> Network and Sharing Center —-> Change Adapter Settings.

Right-click your active internet connection and click properties. Under the Networking tab, scroll down to Internet Protocol Version 4 (TCP/IPv4). Highlight (left click) that then click on properties. Both options in this window should be automatic! The first option should be set to “Obtain an IP address automatically” and the second should be set to “Obtain DNS server address automatically!”


I have DNS Unlocker on one of my PCs as well – and I spent the last few days trying to crack this thing. I found some of its files on my PCs temp files. You can easily access them by doing the following:

First, open your Control Panel, and click on Folder Options —> View, click Show hidden files and folder and unclick Hidden extensions for known files types. After that, click Apply.

Next, hold the Windows Key and R at the same time. Then type in the new field %temp% and hit Enter. Delete all the files in the directory you were sent to – even if they are not part of DNS Unlocker, they are only temporary files that will be deleted anyways, so better safe than sorry.

Also go in your Program Files and Program Data Folders (on both the C: and D: drives) and look around for anything resembling an Adware entry – sort the folders by date and look for ones created when the Adware first appeared.

If you believe the adware is still lurking somewhere in your browsers, as a last resort, you can navigate to your Appdata folder and delete your profile for that browser. All your settings will be gone, together with anything related to the DNS Unlocker. Also delete any other folders in Appdata that you believe were created by it.

Did we help you? Please, consider helping us by spreading the word!

Remember to leave us a comment if you run into any trouble!

  • Anthony Alekji

    Please help, i’ve tried everything and can not remove it, DNS lookup and coupoon keep spamming me and make my webpages run slower.

    • Stefan Sadakov

      First questions: What browser(s) are you using? Also, Is Ads by DNS Unlocker present in the browsers or you can’t locate it this way?

  • Pingback: DNS Unlocker Removal | Home Computer Security Guide()

  • Ricardo Lira

    This tutorial works awesome but you still need to add one more thing to it! I followed your tutorial and at the end, I was still stuck with some kind of app that was causing my google chrome to populate coupon on every page I would visit! After investigating, I found out that the damn “DNS Unlocker” had modified my DNS settings! After fixing this I was completely good! I have google chrome, so I am unsure if this fix persist to other browsers.

    The path to do this follows:

    Control Panel > Network and Internet > Network and Sharing Center > Change Adapter Settings > Right-click your active internet connection (usually Wi-Fi since everyone uses that, unless your using a desktop) and click properties > Now under the Networking tab, scroll down until you find Internet Protocol Version 4 (TCP/IPv4) > Highlight that then click on properties > Both options in this windows should be automatic! The first option should be set to “Obtain an IP address automatically” and the second should be set to “Obtain DNS server address automatically!” If your computer belongs to a company or you actually have a custom DNS then this would not apply to you. Once you are finish, click “OK” and close the windows > Now go back into Chrome and reset your settings one more time and boom! It should work just fine.

    • Stefan Sadakov

      Thank you for the information! It’s very helpful. I’ll add it to the DNS Unlocker removal guide immediately.

  • Help please
    I have followed all instructions above and still find the DNS pop ups appearing whilst I browse???

    • using windows 8 and IE 11

      • Stefan Sadakov

        Try the updated last step.

        • susan

          If you mean step 7 already did that or do you mean step 8?

  • Amari

    I followed all of this and the virus is still showing up on google chrome. Do you have any further tips? I appreciate all of your help.

  • Eric B

    In the hosts file in step 4, after local host it says “start of entries inserted by Spybot search and destroy” and after that I would estimate there are probably more than a thousand entries with the same IP address as local host. I uninstalled Spybot s&d but that did not change anything? What now? Thanks for your help

    • Stefan Sadakov

      Try again now. I updated the guide again.

  • Melissa

    DNS was not listed as an extension on Chrome when I opened it, but it’s definitely on my computer. I had local host in that text file as well. I went ahead and uninstalled it, but can’t find which processes running are DNS. Please help!

    • Melissa

      I also don’t have an ads popping up

  • Alireza Tabatabaee

    I did all those steps and nothing changed 🙁
    I’m using Windows 7 and Opera.

  • Stefan Sadakov

    For anyone asking: I clearly stated in the removal guide that if any step is not applicable for you, you should just skip it. These things change – they may be in your extensions – or not.
    I just updated the guide again. Hopefully now it will help you. This virus seems to change every few days and it’s hard to keep up with it.


    I am hacked!!
    In step 4 I found 2 ips.

    What to do?

    • Stefan Sadakov

      What are the names next to the IPs? Are there names? Describe what exactly you see.

      • Dan

        I also have some ips, thislinkeskipsanyemptylines; mirillis.com; http://www.mirillus.com; serwer2.paka-service.com; ns386119.ovh.net; mirillis.pl

        • Stefan Sadakov

          I can’t find any information about these? Do you have any idea how these got there. My recommendation is to either install professional software that would scan your files for malware, or copy these adresses to a .txt file and delete them from your HOSTS file. See what happens then.
          Please, leave a comment to tell me what happened, I really want to help you 🙂

  • paul b

    Hi i found an IP in step 4. When checking what programs had recently updated or been installed, only my McAfee was the one which had automatically updated without me physically doing it. Going back to step 4, under the localhost section in notepad i have got: mssplus.mcafee.com Any suggestions?

    • Stefan Sadakov

      No, that’s perfectly fine. Mcafee shouldn’t have anything to do with DNS Unlocker. I was referring to possibly seeing a bunch of ips that have no designation, no mssplus.mcafee.com etc. This is OK. Go on with the guide – the updated last sections should do the trick if the rest fails.

  • Hi. I have had an attack with the dnsunlocker virus. Having meticulously followed the instructions above I noticed that when I go to manage add ons to disable dnsunlocker there is no such extension. Am I missing something here.
    Thanks for the tutorial.

    • Stefan Sadakov

      No, you’re doing everything fine. DNS Unlockerk just changed – virus creators like to change their creations with time, so that removal guides like ours don’t work properly. there’s no way to know which “version” of the virus you have, so we listed everything needed to get rid of it. Just move on to the next step and you’ll be fine. But make sure to cover all the steps even if you don’t see it. There’s always a chance you may miss something.

  • Melina

    Why nowhere is written about android devices being defected with dns unlocker. I’ve problem with these ads on my mobile

  • Melina

    Unfortunately nowhere is written about the android devices defected by this virus. I’ve found it on my mobile.

    • Stefan Sadakov

      I will add an android section today.

  • Pingback: Ssurrokk | Pearltrees()

  • Za

    Hi, I’ve had the DNS Unlocker problem from a couple of days ago, and am using the Safari browser on a MacBook Pro. May I know what steps I should take? I’ve already tried looking for browser extensions, but there were none. Thank you!

    • Stefan Sadakov

      Try everything disclosed in the guide first. We updated it recently (check the last 2 steps of the PC guide). If nothing there works, leave another comment and I’ll try to help you in another way.

  • Pingback: حذف Malware از روی مرورگرها - صفحه 2()

  • Fiona Dyer

    The only thing that has installed onto my computer in the last week are Microsoft updates, so it’s obviously attached itself to them somehow. I can’t get rid of it at all and it re-installs every time you restart the PC. That’s yet another PC knackered by people who have nothing better to do.

    • Stefan Sadakov

      If it reinstalls itself on reboot, your DNS Unlocker removal should definitely be 100% about regedit. See the updated parts in the guide – you must be missing something. If you can’t do it, leave another comment for me and I’ll assist ou 🙂

  • Daniel Watanabe

    Hi there, I am 13 and I have recently encountered DNS Unlocker and I’ve always uninstalled it at the ‘Uninstall a Program’ section. My PC ran fine until a few months DNS Unlocker comes back, and it does not show up at the Uninstall a Program section, neither is it also at the Extensions section on my Chrome browser, it’s the browser that I use a lot often. Please help!

    • HowToRemove.Guide Team

      Did you cover all of the steps described here, particularly the last 3 steps?
      It’s not a problem if DNS Unlocker doesn’t show up in Chrome or the Control Panel. Just move along and continue with the guide. There are different versions of the virus, and some show up in the control panel & the extensions, but others don’t. There’s no way to know which version yuo got exactly. Don’t hesitate to ask other questions.
      I advise you to just complete the guide, and if it’s not gone when you finish, ask me and I’ll give you pointers 🙂

  • Eric

    I have had this virus sneaking around my computer for months now. I’ve been following the guide so far and have found many files and folders whose names are comprised of nothing but random numbers and/or letters littered all throughout my Registry, Program Files, Program Files (x86), ProgramData, AppDataLocal, Extensions, etc. I have no Idea whether or not I should delete any of these files or folders since they give no information as to what they actually are or do. A decent amount of these folders have files with the type name “YYoutouubeAdBlocKe”, sorry the only screenshot I took of that is in the Temp folder. (I had the AdBlock Plus extension for google for a while, but I don’t think that’s the type name used by that extension. Also the vast majority of the files with that type name come back after shortly after being deleted.) I didn’t take screenshots of each and every one of the Folders/Files mentioned above, just some to provide examples. I also have AdAlert and Bueno Search Toolbar plaguing Chrome (I’ve never had any ad spam related problems with Bueno Search. I can usually just remove the extension and it won’t bother me again, but the extension always comes back after resetting chrome and removing whatever profile is active at the time from Users), and some extension named Best Save For You on IE (I haven’t used IE once ever on this computer either. I found out about that extension when following this guide.) I followed the guide as best I could and it didn’t help at all. Could this all be fixed by simply restoring the computer to Factory Settings or by doing a Factory Restore to a much earlier date? I am completely fine with losing all my data if it means this garbage will be gone.

    • HowToRemove.Guide Team

      I suggest you use SpyHunter’s scanner. It can point you in the direction of the infected files. If you have difficulties, I’l help you remove them myself.
      A factory reset works almost 100% of the time. You should not have any trouble after a factory reset.

  • Roxan

    Hello all,
    If you still cannot get rid of DNS Unlocker even after following all the 8 steps, try this out.
    1. Go to network connections.
    2. Internet protocol version 4.
    3. Select “Obtain DNS server address automatically” radio button.
    4. Click on “Advanced”, “DNS” tab.
    5. Remove any entry in “DNS server addresses, in order of use.”

    Problemo solved !!!!

    PS: Step 3 would give you a solution in most of the cases.

    Happy browsing.

  • JibJabs

    1.The only I am unable to follow is Step 7 (Updated !), I can’t do anything other than install it.
    2.I’m confused on what Step 3 is trying to tell me; either to actually remove everything or type (remove everything here) after .exe

    3.Another problem is after using this guide DNSUnlocker has gotten significantly worse and that it’s still on the computer.

  • HowToRemove.Guide Team

    If the problem is still occurring then it is recommended that you do.

  • Breanna Fey-Ra Snare

    Hey. I got to the final step in the update and it says it cannot delete some of the Temp files because they are either open in Adobe or in the COM Surrogate. What does that mean and how can I fix it?

    • HowToRemove.Guide Team

      Hello, Breanna. You might try to copy the whole folder on another partition and try to edit it and then replace the existing one with the edited files. If the problem still persists, we suggest you download the software listed in the article above and use the free scan function to locate your problem files. Let us know how this goes.

  • Elise


    I have made every step, but though DNS Unlocker is still on my computer… What can I do?

    At step , I have this:

    # localhost name resolution is handled within DNS itself.

    # localhost

    # ::1 localhost

    Thank you very much for the help


    • HowToRemove.Guide Team

      Hi Elise,
      Could you please explain in detail which steps you managed to complete and which you weren’t able to.

  • Donovan

    Hi, I was just wondering, will a PC reset work in removing this? Up until this morning when I opened my computer the adware hadn’t installed itself and everything I needed backed up was already saved to an external drive. Just to be safe I went ahead and decided to reset my PC and wipe all the files, programs and drivers. It’s just short of a full factory reset, so this way the files are gone but the OS (Windows 10) and the programs pre-installed on the computer when I got it will be reinstalled upon reset.

    Long story short: should this get rid of the DNS Unlocker? Unfortunately it’s not my first time it’s happened and I’m pretty careful about what I install since it happened the first time. So I figured that a full reset would probably work. In the event it doesn’t work, would you suggest I try going through the steps here again, or would you suggest a full factory reset?

    • HowToRemove.Guide Team

      Hello Donovan,
      In theory what you are describing should work. If the problem reappears we would recommend going through the steps again and considering installing the software from the article above, the scan function is free and can at least pinpoint your problem files. A full factory reset should be a last resort solution.

  • Autumn Thatcher

    This actually worked!! I had to find it manually in regedit with ctrl + f “dns” and I’m so glad it’s finally gone! Thank you!

    • HowToRemove.Guide Team

      No problem 🙂 Glad we could help.

  • Mindy

    The steps above got rid of it for me!! Thank you so much!! I will look to you first for help with any viruses. I went through three other extremely long and time consuming processes that did not work. You’re now in my Favorites!

    • HowToRemove.Guide Team

      Glad to hear we managed to help you! 🙂

  • monika

    hi i found several host names in step 4 as follows: down.baidu2016.com, 123.sogou.com, http://www.czzsyzgm.com, http://www.czzsyzxl.com. how to fix this pls help

    • HowToRemove.Guide Team

      Hello Monika,

      You’d better delete them from your hosts file, they indeed look quite suspicious, you can save them to a .txt file first though, just in case something goes wrong, you can add them again manually.
      Let us know afterwards how that goes for you.

  • HowToRemove.Guide Team

    You are welcome anytime 🙂

  • HowToRemove.Guide Team

    Hello again monika. Don’t worry, you are not bothering us 🙂
    Download the scanner from one of our advertisements. It should point you towards any infected files you might have missed. I’m willing to bet there’s something in regedit you didn’t see. Try with the scanner and tell us how it went.

  • Max

    Thanks you a lot, I’ve been searching through a lot of guides and this one is the best by far. At least I’ve got rid off that shitty adware.

  • HowToRemove.Guide Team

    Hi Bronia,

    Have you tried already to reset your browser? You can find the instructions on how to do it here https://howtoremove.guide/android-malware-removal/

    Please try that first and let me know of the outcome. Thank you.

  • HowToRemove.Guide Team

    Hi Varun,

    These settings are OK, this file is safe and the problem lies elsewhere.

    Can you open the network settings of your adapter and tell me if any changes have been made to the ICP4/IP protocol?

  • HowToRemove.Guide Team

    Glad i could help!

  • HowToRemove.Guide Team

    Hi Meg,

    This line is added if you had (or currently have) Mcafee installed on your PC. It helps it load updates. Feel free to remove it if you want.

  • HowToRemove.Guide Team

    Hi Steven,

    Please open the network connections (should be a computer icon on your task bar)-> network and sharing for Windows 10. Select the adapter by clicking on the line after Connections, click on properties, click on the IP4 protocol, click on properties.

    Do you have any numbers in the fields there?

  • HowToRemove.Guide Team

    Hi Kirstie, can you do the following:

    Please open the network connections (should be a computer icon on your task bar)-> network and sharing for Windows 10. Select the adapter by clicking on the line after Connections, click on properties, click on the IP4 protocol, click on properties.

    Do you have any numbers in those fields?

  • HowToRemove.Guide Team


    Can you go to your network adapter, press properties, then select IP4 from the list and click on properties again. Do you see any numbers written in the DNS field?

  • HowToRemove.Guide Team

    Hi, you need to delete these lines from the hosts file, then save it afterwards. If that doesn’t work do the following:

    Search for Notepad in windows search, right click on it and select Run as admin. When the program runs use the inside “Open” menu to open the hosts file and delete the lines.

  • HowToRemove.Guide Team

    Hi Vikki, what you need to do is simply delete those lines from the file, then save it. If you don’t get permission to do that first run Notepad as an admin (search for notepad in windows search,, right click on exe-> run as admin) and then open the Hosts file from the inside menu of Notepad: File->Open.

  • HowToRemove.Guide Team

    Hi Maverik, did you try using an ant-malware program like Spyhunter already?

  • Cassandra Diaz (SweetSoundRadi

    hi I have these in my host down.baidu2016..com 123.sogou..com http://www.czzsyzgm..com http://www.czzsyzxl..com mssplus.mcafee..com

    • HowToRemove.Guide Team

      Hi Cassandra,

      You likely have an illegal copy of McAfee installed, that’s what the last line is about. All other lines related to chineese sites should be deleted.

  • HowToRemove.Guide Team

    That’s nothing. It’s perfectly safe 🙂 Did the guide work for you?

  • HowToRemove.Guide Team

    Is this in safe mode or out of it?

  • HowToRemove.Guide Team

    Did you try Spyhunter, the scanner from one of our ads. The paid version is for automatic removal. The scanner is free, so just use it to help you find the infected files, then use our guide in conjunction with it.
    Did that help you? Tell me if it doesn’t, in the meanwhile I’ll try to think of another way to resolve your situation 🙂

  • HowToRemove.Guide Team

    Hi Cloud, I’m glad you were able to solve the problem regardless.

  • HowToRemove.Guide Team

    Hi Lyle, thanks for the feedback. That’s why downloading codecs from un-trusty sources is a really bad idea.

  • HowToRemove.Guide Team

    Well can you tell me exactly what you did?

  • HowToRemove.Guide Team

    Hi Tianna, just delete them from the file, then save it.

  • HowToRemove.Guide Team

    Hi there, just delete them from the file. If you are not able to save the file afterwards do the following:

    Do a Windows search for Notepad.
    Right-click on the executable that comes as the search result -> Run as administrator
    When notepad opens press File->Open and navigate to the hosts file in the windir/system32/Drivers/etc/ directory

    You should be now able to save the file after deleting the IPs.

  • HowToRemove.Guide Team

    These are definitely part of DNS Unlocker – or something else that was installed with it. Delete the lines from the file and save it.

  • HowToRemove.Guide Team

    Try downloading the scanner from one of our ads – it will help you find any leftover files you missed.
    Did this help? 🙂

    • Carlo

      I was reluctant to download anything more but did so as a last resort as my computer was basically unusable anyway. 86 issues detected, went through and deleted all that was found and now computer is as good as new. Thank you so much for this page!!

  • HowToRemove.Guide Team

    No. I recommend downloading the scanner from one of our ads, so you can find the adware files more easily.

  • HowToRemove.Guide Team

    Yes, using SpyHunter is definately the easiest way to do it. Otherwise you have to hunt them down manually.

  • TehDracona

    I just typer in %temp% and hit enter. Do i delete just the files or everything that has come up e.g. .temp files and the random number and letter in bracket files, or just everything from the place i was sent. Thanks for the help in advance

    • HowToRemove.Guide Team

      Hello TehDracona, just to be clear of any possible confusion – which step are you referring to?

  • HowToRemove.Guide Team

    Delete the files inside the folder. That’s it.

  • HowToRemove.Guide Team

    Hi Eimy,
    “when I click open and go to host files it says it’s empty”
    what do you mean exactly?
    you can’t locate/see the hosts file? Please elaborate so we can help you.

  • HowToRemove.Guide Team

    Hi Eimy,
    please give us more information about these IPs you are trying to remove, post them here or provide us with a screenshot, so we can know more about your issue.

  • HowToRemove.Guide Team

    Hi Breeana,
    that is because we are receiving a lot of Spam and the comments are moderated before posted on the site.

  • HowToRemove.Guide Team

    Hi Big guy,
    nobody wants any of these harmful contents. They just find their way in our system. Contact us if you need further help.

  • HowToRemove.Guide Team

    Hi Jessa,
    did you run Safe Mode WITH Networking ? In Step 1 there is a guide you can check.