DNSChanger is a malware that changes the Domain Name System (DNS) settings on the compromised computer. ... Your computer then uses this IP address to locate and connect to the website. DNS servers are operated by your Internet service provider (ISP) and are included in your computer's network configuration.

What does a DNS changer do?

What Does DNSChanger Do to My Computer? DNSChanger malware causes a computer to use rogue DNS servers in one of two ways. First, it changes the computer's DNS server settings to replace the ISP's good DNS servers with rogue DNS servers operated by the criminal.

Does changing DNS actually work?

DNS servers translate human-friendly domain names to machine-friendly IP addresses. You're probably using a DNS server supplied by your ISP, one whose quality is unknown. Switching to a third-party DNS service can both speed your internet activity and protect against tricky DNS-based attacks.