Removal Guide

Remove “Ads by DNSUnlocker” Virus

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Are you infected by “Ads by DNSUnlocker” ? We can help you remove “Ads by DNSUnlocker” with our free removal instructions, covering Chrome, Firefox, Internet and Safari.



“Ads by DNSUnlocker” is a potentially unwanted application that belongs to a family of viruses called Adware. Until you remove “Ads by DNSUnlocker” from your computer you will experience a large quantity of spam advertisement messages – Ads for short. The virus will pop-up a page full of Ads every time you start your browser or load a new tab/page within it. The virus is also capable of turning different words in any text you read into hyperlinks, which is just another form of Ads. It’s also possible (though rarely) for “Ads by DNSUnlocker” to mess with your default search engine preferences or install unwanted toolbars.

As long as you have “Ads by DNSUnlocker” on your computer every time you open a page your CPU has to load two pages instead of one, and the Ads taker a greater toll on in due to animations. The virus will also draw extra bandwidth for the very same reason.

Remove “Ads by DNSUnlocker”

Virus developers always expand and improve on their creations in order to make them harder to remove. This means that there are always multiple version of the same virus in existence. Every one of them usually has a small difference and requires a slightly different approach in order to remove it. The aim of this guide is to be able to delete all versions, but this also means that some steps might be redundant depending on how old your version of the virus is. If any of the following steps produces no results make sure you’ve done everything correctly. If that is the case and there is no result you should just skip on to the next step.

There is also a possibility that a new version has appeared and this guide does not full work. If you are having any problems we’d appreciate if you share them in the comments section below.


Our first step here is a reboot in Safe Mode. If you already know how to do it, just skip this and proceed to Step 2. If you do not know how to do it, continue reading:

For Windows 98, XP, Millenium and 7 Users:

Restart your computer. To be sure you don’t miss the time when you need to press it, just spam F8 as soon as the PC starts booting. In the new menu, choose Safe Mode With Networking.


Proceed to Step 2.

For W. 8 and 8.1 Users:

Click the Start button Picture of the Start button, then Control Panel —> System and Security —> Administrative Tools —> System Configuration.Administrator permission required


Then check the Safe Boot option and click OK.  Click  Restart in the new pop-up.

system- config

Proceed to Step 2.


“Ads by DNSUnlocker” has been known to infect all popular internet browsers. If you have more then one browser installed remember to run Step 2 and Step 3 for each browser (Don’t forget Internet Explorer comes with every Windows installation!).

Also remember that while the Ads may look harmless they can be very dangerous. Very often the sites they point to are fakes that copy legitimate sites, using the same design and similar URLs. Spending money on anything offered by the Ads would be foolish to say the least.

“Ads by DNSUnlocker” may also create pop-ups and banners claiming you have problems with your computer. They might warn of registry errors, viruses, missing plug-ins and critical updates. All such messages are fake and they only exist to make you more compliant to install the “free” programs that are supposed to fix the problems. Those programs will be either viruses or cracked copies that will try to scam you in some way.

Never download and install any files offered by “Ads by DNSUnlocker”. If you’ve already installed such a file try to remember the name. You will have to remove that virus and soon.

ie9-10_512x512  For Internet Explorer Users:

Open IE, then click  IE GEAR —–> Manage Add-ons.

pic 3

Find “Ads by DNSUnlocker” . Remove it by pressing Disable.

If your Home Page is different from the usual, click IE GEAR —–> Internet Options>edit the URL box with your preferred search engine, and click Apply.

firefox-512  For Mozilla Firefox Users:

Open Firefoxclick on mozilla menu (top right) ——-> Add-ons.

pic 5.

Hit Extensions next.

Get Rid of Ads by DNSUnlocker

“Ads by DNSUnlocker”  should be somewhere around here –  Remove it.

chrome-logo-transparent-background For Google Chrome Users

 Start Chrome, click chrome menu icon —–>More Tools —–> Extensions.


pic 7

In  Extensions,  find the virus and  select  chrome-trash-icon.

Remove Ads by DNSUnlocker from Chrome

 Click chrome menu icon   again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines.  Remove anything but the search engines you normally use.

pic 9

safari For Safari Users:

Open Safari, and click Safari —–>Preferences —–> Extensions—–>Uninstall the malware.


Right click on the browser’s shortcut, then click Properties.

NOTE: Below, we are showing Google Chrome, but the method is the same for all browsers.


Once you’ve reached Properties —–> Shortcut (on the band at the top), then in the Target type field, you should REMOVE EVERYTHING AFTER .exe.


(Works for Windows XP, 7,  8,  8.1)

Hold windows-buttonand R together. Write appwiz.cpl  in the new field, then click OK.


You are now in the Control Panel. Search around for “Ads by DNSUnlocker” and anything else suspicious-looking. Uninstall  it/them. Also, be extremely careful. Viruses often spend one last ditch effort to trick you into installing more of their kind. If you see a screen like this when you click Uninstallchoose NO:


Hold windows-buttonand R again – but this time copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A .txt file will open – don’t touch anything there. If you are hacked and someone has access to your PC, there will be a bunch of other IPs connected to you at the bottom. This is what hosts file looks like:

hosts_opt (1)

If there is anything connecting to you below “Localhost” you may be hacked, and it’s best to ask us in the comments for directions.


This is perhaps the most important and difficult step, so be extremely careful. Open the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.


Once it opens, choose the Processes Tab. Look at all of the processes in front of you and try to determine which ones are a virus. Google them or ask us in the comments and we will provide the best assistance we can. If the virus returns later on, the reason is that you missed something here. However, we should warn you – doing this can be extremely risky, so the best course is to seek assistance from us.


This is likely the most important and difficult step to perform, so be extremely careful with what follows. Anything you done wrong could your computer significantly. If you are not feeling comfortable, we advise you to download a professional anti-malware software to remove “Ads by DNSUnlocker” for you. This step will terminate the process associated with the virus and delete any associated files. This is the most important step for removing the virus permanently. Unfortunately if the wrong process is terminated and files deleted this can cause system instability, errors and data lost. If the files deleted are used by Windows your computer might not even load the next time you start it!  Also, note that your account names and passwords may be exposed to the virus – including any accounts connected to your credit cards. If you do not delete the virus completely it could send the data back to whoever created it, so do not delay.


Right click on each of the virus processes separately and select Open File Location. Also, End the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.


Take a look at the following things:

Type msconfig in the search field and hit enter: you will be transported to a new window. 


Go in the Startup tab and Uncheck anything that has “unknown” as Manufacturer.

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. Alternatively, if you can’t find any this way, look in these directories, and delete the registries manually:

  • HKEY_CURRENT_USER—-Software—–Random numbers
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random


Did we help you? Please, consider helping us by spreading the word!

STEP 6 – Optimization

We’ve prepared a short and sweet optimization guide, specifically designed for users who just removed a virus. It is completely free, you do not need to download anything, and it’s not very time consuming. If you are interested – How To Remove Guide’s Optimization Tips.


Leave a Comment