Once you have identified an infected computer, it is recommended that you download and run one or more of the following cleaning tools:

McAfee Stinger:  http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
Microsoft MSRT:  http://www.microsoft.com/security/pc-security/malware-removal.aspx
Norton Power Eraser:  http://security.symantec.com/nbrt/npe.aspx?lcid=1033

The DNSChanger malware may also modify your operating system's local DNS settings, which will need to be reset manually:

For Windows 7

On your computer:

1. Click the Windows Start Button
2. Double Click "Control Panel"
3. Click the "Network and Internet" link
4. Click the "Network and Sharing Center" link
5. Click the "Change adapter settings" link on left
   
   

    Note: Your computer may have more than one network connection such as Wireless and Wired - both need to be updated.
   
   

6. Right-click on the adapter type (wired or wireless)
7. Left-click on "Properties"
8. Double click on "Internet Protocol Version 4 (TCP/IPv4)
9. Select "Obtain DNS Server Address Automatically"
10. Click "OK" button
11. Double left-click on "Internet Protocol Version 6 (TCP/IPv6)"
12. Select "Obtain DNS Server Address Automatically"
13. Click "OK" button
14. Click "OK" button to close the Properties window
15. Repeat the steps if you identified multiple network connections on your computer

For Windows Vista

On your computer:

1. Click the Windows Start Button
2. Double Click "Control Panel"
3. Click the "Network and Internet" link
4. Click the "Network and Sharing Center" link
5. Click the "Manage network connections" link on left
   
   Note: Your computer may have more than one network connection such as Wireless and Wired - both need to be updated.
   
   
6. Right-click on the adapter type (wired or wireless)
7. Click on "Continue button"
8. Double click on "Internet Protocol Version 4 (TCP/IPv4)
9. Select "Obtain DNS Server Address Automatically"
10. Click "OK" button
11. Double left-click on "Internet Protocol Version 6 (TCP/IPv6)"
12. Select "Obtain DNS Server Address Automatically"
13. Click "OK" button
14. Click "OK" button to close the Properties window
15. Repeat the steps if you identified multiple network connections on your computer

For Windows XP

On your computer:

1. Click the Windows Start Button
2. Double click "Control Panel"
3. Double click on "Network Connections"
4. Right-click on "Local Area Connection"
5. Left-click on "Properties"
   
   Note: Your computer may have more than one network connection such as Wireless and Wired - both need to be updated.
   
   
6. Left-click on "Internet Protocol (TCP/IP)
7. Left-click on the "Properties" button
8. Select "Obtain DNS Server Address Automatically"
9. Click "OK" button
10. Click "OK" button to close the Properties window
11. Repeat the steps if you identified multiple network connections on your computer

If you are not running a Windows operating system, or are unable to remove the malware using this utility, as a precaution to protect your privacy and data, the Department of Justice, with the assistance of the FBI, is recommending that you update your master boot record and reformat your hard drive or take it to a local repair shop to have this done.

Once you have run a cleaning tool and made these changes, go back to http://www.dns-ok.us and check that the page is now green. If you have successfully cleaned the infected computer(s), but this page is red once you reconnect your computer(s) to your router, the DNS settings on your router may have been changed by this malware issue. You should reset the DNS settings to default settings per the vendor’s recommended configuration. Here is a selection of more commonly seen manufacturers:

• Asus: http://service.asus.com/ProductCategory.aspx?pid=8
• Belkin: http://www.belkin.com/networking/wireless-routers/support/
• Cisco/Linksys: http://homesupport.cisco.com
• D-Link: http://www.dlink.com/support/
• Motorola: http://www.motorola.com/support
• Netgear: http://support.netgear.com
• SMC: http://na.smc.com/about/support/
• Trendnet: http://www.trendnet.com/support/