DNS Block

By GoldSparrow in Adware

Threat Scorecard

Ranking: 4,734
Threat Level: 10 % (Normal)
Infected Computers: 7,945
First Seen: July 20, 2015
Last Seen: September 19, 2023
OS(es) Affected: Windows

If you see pop-up advertisements and similar content labeled 'Ads by DNS Block' appearing on your desktop, this means that an adware program is being hosted by your machine. DNS Block may have entered your computer using a very common method called bundling that consists in the addition of adware to popular free applications available on the Web. DNS Block also tries to convince computer users to download its program by promising to keep them unidentified while browsing the Internet. Some computer users may be fooled by this promise and allow DNS Block to be installed on their machines. However, as soon as they start experiencing the problems that may be caused by DNS Block, they may conclude that it is better to remove DNS Block from their computers. Besides unwanted advertisements that may cover the Web page you are visiting, DNS Block may turn these Web pages' text into hyperlinks, gather information that include the computer user's browsing habits and interfere with the machine's performance. DNS Block also may cause the installation of additional adware and PUPs. Security researchers advise computer users to get rid of DNS Block and its components using a malware remover.

SpyHunter Detects & Remove DNS Block

File System Details

DNS Block may create the following file(s):
# File Name MD5 Detections
1. DnsBlockUpdateSvc.exe 00e0f83ab0e613c17c12b8246d3b6bdf 192

Registry Details

DNS Block may create the following registry entry or registry entries:
CLSID
{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}
{E7BF74EE-9106-4113-B216-2F980BA29141}
{F2DB3739-77FB-41EB-9ED3-ABF34DF2DBF7}
Regexp file mask
%WINDIR%\System32\dns.block
%WINDIR%\SysWOW64\dns.block
SOFTWARE\Classes\AppID\DPBHO.DLL
SOFTWARE\Classes\DPBHO.DownloadProtect
SOFTWARE\Classes\DPBHO.DownloadProtect.1
SOFTWARE\Classes\WOW6432Node\AppID\DPBHO.DLL
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}
SYSTEM\ControlSet001\services\DnsBlockUpdateSvc
SYSTEM\ControlSet002\services\DnsBlockUpdateSvc
SYSTEM\CurrentControlSet\services\DnsBlockUpdateSvc

Directories

DNS Block may create the following directory or directories:

%LOCALAPPDATA%\DnsBlock
%PROGRAMFILES%\DnsBlock
%PROGRAMFILES(x86)%\DnsBlock

URLs

DNS Block may call the following URLs:

ads5_repl.js

Trending

Most Viewed

Loading...