Hey you,
BE IN THE KNOW!

35,000 ransomware infections per month and you still believe you are protected?

Sign up to receive:

  • alerts
  • news
  • free how-to-remove guides

of the newest online threats - directly to your inbox:


Remove Ads by DNS Unlocker and Dnspalenville.exe

Renmove-DNS-unlocker-dnspalenville.exe-sensorstechforumAn extremely aggressive and intrusive adware, DNS Unlocked has been around for quite some time now, affecting all types of users all over the globe. The unwanted program, also known as PUP shows adverts across each page during online browsing. To learn about DNS Unlocker and remove it effectively, we urge you to read this article completely.

Threat Summary

NameDNS Unlocker
TypeAdd-Supported Software
Short DescriptionDNS Unlocker resembles a ligitimate program which provides access to geo-restricted websites, however it may perform unwanted activities.
SymptomsThe user may be redirected to pages with online surveys; as a result, targeted ads may appear in his browser.
Distribution MethodVia bundling or fake setups.
Detection Tool See If Your System Has Been Affected by DNS Unlocker

Download

Malware Removal Tool

User ExperienceJoin Our Forum to Discuss DNS Unlocker.

DNS Unlocker – A Quick Background

This nasty software first appeared on the security radar during the autumn of 2014, associated with the keyword “Netflix DNS Unlocker”. The software has nothing to do with Netflix, although it claims to enable users who cannot access Netflix(online service for watching TV series and other shows and movies online) from their area to use it, by modifying their DNS settings. Instead, the program uses the DNS Settings it has modified to sniff out user information and display various advertisements of unknown origins to the user. Even though Netflix is available in many places today, there are still a lot of geo-restricted websites that may push users into looking for access from their location and hence making the mistake of installing DNS Unlocker by accident. These factors make the software still very eventful and widely distributed, generating its author’s profit.

How Is DNS Unlocker Spread

To be distributed, the program does not have a direct download link on its website. Instead, it is spread via other methods, such as third-party installers downloaded from sites that may provide different programs for free. Such programs may be older versions of widely used apps, media players, video recorders, video converters and other programs downloaded daily. Some websites may replace or add to the installation of the programs DNS Unlocker’s installation file which slickly enough installs it on your computer. Users often tend to miss such “bundled” applications when they install programs for one reason or another. Here is how DNS Unlocker may appear on the “Advanced” or “Custom” installation options of your computer:

DNS-Unlocker-bundled-sensorstechforum

Since DNS Unlocker and other PUPs (Potentially Unwanted Programs) like it are widely spread out across the web, users are strongly advised to read the End User License Agreement and always check for bundled applications. One particular software that may assist in “catching” such apps and may help to stop them is EULAlyzer which stops the installation if a specific keyword (for example bundling) is discovered. This makes it a very powerful tool in combination with a rich knowledge base and a recommended one if you want to detect adware or other rogue software slipping past you.

Associated Files and Objects with DNS Unlocker

Once the program is already installed on your computer it may leave its common files in the %Program Files% or %Program Files (x86)% (Depending on your Windows) folder of your computer:

dns unlocker-pop-ups

In addition to that, DNS Unlocker also modifies and creates multiple registry entries, such as the ones below in gray, reported by Symantec researchers for one particular detection of the software:

→ HKEY_LOCAL_MACHINE\SOFTWARE\ {alpha-numerical-value-here}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Dhcp\Parameters\”{alpha-numerical-value-here}” = {Hexidecimal Value}Source:Symantec

DNS Unlocker’s Activity In Detail

Finally after its ready and operational, DNS Unlocker may begin to display advertisements of various character on your computer. Such adverts may be:

  • Banners.
  • Pop-ups.
  • Ad-supported search results on a hoax search engine.
  • Browser Redirects.

An example of how DNS Unlocker advertisements may appear on an affected computer may be the following picture:

ads-dns-unlocker-sensorstechforum

This is a clear indicator of having the application on your computer and such advertisements may redirect to other third-party websites. This is the main risk associated with DNS Unlocker, since it is created with that very purpose. Not only the suspicious software can redirect the user to third-party domains that want to generate hoax traffic and make money to their authors via pay-per-click and other affiliate schemes, but there are other dangers as well. We have divided the dangers associated with third-party websites in two main group:

Malicious domains that may infect the user with malware or rogue and unwanted software.
Dangerous domains that may scam users out of their money displaying fake messages, claims, etc.

Besides those dangers, DNS Unlocker also changes the IP version 4 DNS address of the user to what may appear to be an address belonging to the suspicious individuals behind it.

ip-address-dns-sensorstechforum

Such address is most likely used to collect user information, such as the following:

  • The browsing history.
  • The user’s online clicks.
  • Online search history.

This information may be used for different purposes, and even according to DNS Unlocker’s Privacy Policy, shared with third-parties whose policies you may know nothing about:

DNS-Unlocker-privacy-policy-sensorstechforum

Remove DNS Unlocker Files from Windows and Refresh Your Computer

Conventional uninstall may not be all that it will take to remove DNS Unlocker from your computer. This is why we urge you to take other steps towards the removal of this program. We have designed removal instructions below, and we suggest that you follow them for maximum effectiveness. In case you cannot locate or delete the files that are displayed in the article above or you believe that there are other unwanted programs or malware on your computer, you should use the steps for automatic removal. Also, be advised that malware researchers strongly recommend you to scan your computer with an advanced anti-malware software to automatically discover and delete all DNS Unlocker associated objects. Such program will also protect your PC from other programs of such character and malware in the future.

In addition to that, we have also prepared a video tutorial for removal of DNS Unlocker which may additionally assist you in the manual removal. In case you have any questions you may want to follow our forum topic about DNS Unlocker.

Manually delete DNS Unlocker from Windows and your browser

Note! Substantial notification about the DNS Unlocker threat: Manual removal of DNS Unlocker requires interference with system files and registries. Thus, it can cause damage to your PC. Even if your computer skills are not at a professional level, don’t worry. You can do the removal yourself just in 5 minutes, using a malware removal tool.

1.Remove or Uninstall DNS Unlocker in Windows
2.Remove DNS Unlocker from Your Browser
3.Fix registry entries created by DNS Unlocker on your PC

Automatically remove DNS Unlocker by downloading an advanced anti-malware program

1. Remove DNS Unlocker with SpyHunter Anti-Malware Tool
2. Back up your data to secure it against attacks related to DNS Unlocker in the future
Optional: Using Alternative Anti-Malware Tools

Vencislav Krustev

A network administrator and malware researcher at SensorsTechForum with passion for discovery of new shifts and innovations in cyber security. Strong believer in basic education of every user towards online safety.

More Posts - Website

Share on Facebook Share
Loading...
Share on Twitter Tweet
Loading...
Share on Google Plus Share
Loading...
Share on Linkedin Share
Loading...
Share on Digg Share
Share on Reddit Share
Loading...
Share on Stumbleupon Share
Loading...
Please wait...

Subscribe to our newsletter

Want to be notified when our article is published? Enter your email address and name below to be the first to know.