Remove Ads by DNS-Locker Virus From Chrome/Firefox/IE

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

This article aims to help users remove Ads by DNS-Locker from Chrome, Firefox, Internet Explorer and Safari, as well as their respective system.

Remove DNSLocker

What we have on our hands today in the face of Ads by DNS-Locker is a virus of the Adware variety. There viruses are well known by their characteristic method of operation, which involves the creation of large amounts of advertisements and their aggressive presentation while you browse the internet. As you have probably found for yourself these things are quite annoying and they will be displayed whenever you start your browser or load any kind of link.

The Ads created by Ads by DNS-Locker will generally try to advertise goods that you have recently viewed in online stores and this behavior is possible, because Ads by DNS-Locker scans your browsing history in direct violation to your privacy. It is also capable of sending that data back to it’s creator, so a quick removal of the virus is highly recommended.

Dangers associated with Ads by DNS-Locker

It’s important to realize that while Ads by DNS-Locker may look scary and also annoying as hell it is pretty toothless as far as viruses go – at least until you keep away from it’s Ads. Since you can’t expect any quality control from a virus it’s highly possible that some of the Ads lead to dangerous infected sites. These can not only try to download and install other viruses on your computer, but they may also try to steal your credit card details in a practice known as phishing.

Generally you will be presented with some kind of hard to resist heavily discounted or outright free program download. It is also possible that it can be accompanied by fake warnings and errors about non-existing problems withing your computer. For these reasons it’s generally a very bad idea to install anything offered by Ads by DNS-Locker. The virus is best left ignored.

1: Enter Safe Mode.
2: Remove Ads by DNS-Locker from Chrome, Firefox, Internet Explorer and Safari.
3: Remove the virus from browser shortcuts.
4: Uninstall the virus from your AddRemove Programs.
5: Permanently remove Ads by DNS-Locker from Task Manager’s processes.
6: Delete the virus from Regedit and Msconfig.
7: Optimize your PC after the removal is done.

Remove Ads by DNS-Locker

Things readers are interested in:

Many viruses are constantly updated in order to be made harder to  get rid of and Ads by DNS-Locker is no exception to this. In fact there are multiple versions of it in existance and the newer ones always require more steps to be removed. We’ve written our guide to encompass all known versions of Ads by DNS-Locker, but this has also the drawback of containing unnecessary actions when dealing with older versions of the virus.

Don;t worry. Just run the steps in turn and if you even encounter a point where Ads by DNS-Locker is not listed for removal (but it should as described) just feel free to skip it and move on to the next step.


Our first step here is a reboot in Safe Mode. If you already know how to do it, just skip this and proceed to Step 2. If you do not know how to do it, continue reading:

For Windows 98, XP, Millenium and 7 Users:

Restart your computer. To be sure you don’t miss the time when you need to press it, just spam F8 as soon as the PC starts booting. In the new menu, choose Safe Mode With Networking.

Proceed to Step 2.

For W. 8 and 8.1 Users:

Click the Start button ,then Control Panel —> System and Security —> Administrative Tools —> System Configuration.Administrator permission required


Then check the Safe Boot option and click OK.  Click  Restart in the new pop-up.

Proceed to Step 2.

For Windows 10 Users:

  1. Open the Start menu.
  2. Click the power button icon in the right corner of the new Start menu to show the power options menu.
  3. Press and hold down the SHIFT key on the keyboard and click the Restart option while still holding down the SHIFT key.

Windows 10 will perform the reboot. Next do the following:

Click the Troubleshoot icon, then Advanced options —> Startup Settings. Click Restart.
After the reboot click on Enter Safe Mode With Networking (Fifth Option).

Continue with Step 2.


To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Ads by DNS-Locker has quite likely infected all of your internet browsers and now you must clean out every single one. Otherwise you run the substantial risk of Ads by DNS-Locker cloning itself back if even one copy remains. Note that you shouldn’t forget any old browsers that are still installed on your PC, but you havn’t used in a while. THis is almost always the case for users who don’t use the default windows Internet Explorer program.

While you are doing this it is possible that you are presented with pop-up windows containing varios generous offers. Don’t trust them – it’s just Ads by DNS-Locker’s safety mechanism and should be ignored.

ie9-10_512x512  For Internet Explorer Users:

Open IE, then click  IE GEAR —–> Manage Add-ons.

pic 3

Find Ads by DNS-Locker . Remove it by pressing Disable.

If your Home Page is different from the usual, click IE GEAR —–> Internet Options>edit the URL box with your preferred search engine, and click Apply.

Go to STEP 3.

firefox-512  For Mozilla Firefox Users:

Open Firefoxclick on mozilla menu (top right) ——-> Add-onsHit Extensions next.

Remove DNSLocker From Firefox

Ads by DNS-Locker  should be somewhere around here –  Remove it.

Go to STEP 3.

chrome-logo-transparent-background For Google Chrome Users

 Start Chrome, click chrome menu icon —–>More Tools —–> Extensions. There,  find the virus and  select  chrome-trash-icon(Remove).

Remove DNSLocker From Chrome

 Click chrome menu icon again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines.  Remove anything but the search engines you normally use.

Go to STEP 3.

safari For Safari Users:

Open Safari, and click Safari —–>Preferences —–> Extensions—–>Uninstall the malware.

Go to STEP 3.


Right click on the browser’s shortcut, then click Properties.

NOTE: We are showing Google Chrome, but the method is the same for all browsers.


Once you’ve reached Properties —–> Shortcut (on the band at the top), then in the Target type field, REMOVE EVERYTHING AFTER .exe.

Continue with STEP 4.


Hold the Windows Key and R together. Write appwiz.cpl in the new field, then click OK.


You are now in the Control Panel. Search around for Ads by DNS-Locker and anything else suspicious-looking. Uninstall it/them. Also, be extremely careful. Viruses often spend one last ditch effort to trick you into installing more of their kind. If you see a screen like this when you click Uninstallchoose NO:


Hold the Windows Key and R againbut this time copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A .txt file will open – don’t touch anything there. If you are hacked and someone has access to your PC, there will be a bunch of other IPs connected to you at the bottom. This is what a hosts file looks like:

hosts_opt (1)

If there are a bunch of strange IPs connecting to you below “Localhost” you may be hacked, and it’s best to ask us in the comments for directions.

Go to STEP 5.


Open the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.


Once it opens, choose the Processes Tab. Look at all of the processes in front of you and try to determine which ones are a virus. Google them or ask us in the comments and we will provide the best assistance we can.


Next we have possibly the most difficult and also dangerous part of the guide, but also the most important one. Please be careful,  doing something wrong can damage your PC significantly. If you are not feeling comfortable, we advise you to download a professional Ads by DNS-Locker remover. Additionally, accounts connected to your credit cards, or important information, may be exposed to other, more subtle viruses that are very hard to detect manually and need an automated scan, which the program we offer you will provide.


Right click on each of the virus processes separately and select Open File Location. Also, End the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.

Move on to STEP 6.


Take a look at the following things:

Type msconfig in the search field and hit enter: you will be transported to a new window. 


Go in the Startup tab and Uncheck anything that has “Unknown” as Manufacturer.

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If you can’t find them this way, look in these directories, and delete the registries manually:

  • HKEY_CURRENT_USER—-Software—–Random numbers
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!

Did we help you? Please, consider helping us by spreading the word!

STEP 7 – Optimization

We’ve prepared a short and sweet optimization guide, specifically designed for users who just removed a virus. It is completely free, you do not need to download anything, and it’s not very time consuming. If you are interested – How To Remove Guide’s Optimization Tips.


  • Hi there
    Ctfmon.exe is a legit windows process
    So is unsecapp.exe
    So is svchost.exe

    Be careful with the last one, ransomware viruses often try to mimic it. If it suddenly startings using a lot of memory and CPU look of a possible second copy of the process.

  • Hi Delphine,
    can you be more detailed? What are your worries? Tell us more so we can help you.

Leave a Comment