Severity scale:  

Remove DNSMystic virus (Virus Removal Instructions) - Free Guide

removal by Olivia Morelli - - | Type: Adware

Why my computer acts sluggish, and why do I see so many DNSMystic ads on my screen on a daily basis?

DNSMystic virus is a dangerous computer infection that causes annoying advertisements[1] appear on a computer screen on a daily basis. Other known as DNSMystic adware, this program is believed to belong to the DNSUnlocker group[2] of potentially unwanted programs (PUP). As is known, DNSUnlocker adware is an ad-supported program that maliciously pushes third-party advertisements to the user and making a virtual layer on the screen. The program tries to deliver sponsored content via banners, in-text links, pop-up and pop-under ads, interstitial ads, and other forms of advertising. It appears that DNSMystic functions in the same way. Although DNSUnlocker malware is advertised as a tool that helps to “access Geo restricted web sites” by changing DNS settings[3], and, judging by the name of it, DNSMystic is probably going to be praised the same way, it is better to avoid these programs as much as possible. DNS Mystic might configure browser shortcuts, install helpers and change your browser settings to gain full control of your web browser and use it for its own purposes. It seems that now this adware program can affect all major browsers, including IE, Firefox, Chrome, Safari, and most likely others. If infected, these browsers will start displaying DNSMystic ads at random times.

Questions about DNSMystic virus

DNSMystic adware
Expert from our team reveals how DNSMystic adware looks, and what kind of ads DNSMystic displays on the computer screen.

Annoyance is not the only problem that “Ads by DNSMystic” cause. Most importantly, these advertisements are not trustworthy, and consequently it is not safe to click on them. Each of them carries a link pointing to an external third-party website, and not all of them are secure to visit. Besides, content displayed by these ads might not be real, too. Do not be surprised if a click on an interesting-looking ad throws you on a completely suspicious gambling or gaming website. Sadly, just like any other adware-type program, DNSMystic might collect information about your browsing activities and habits, analyze it and use it to provide you with a selection of targeted third-party advertisements. We must point out that the aim of ad-supported programs is to convince users visit external websites and generate pay-per-click[4] revenue this way. However, we already mentioned that these websites might not be safe, for example, they can advertise vague software pieces, for instance, adware or browser hijackers. In the worst case, you might come across a website that falsely claims that a certain program on your computer is outdated and you need to install updates. Remember – such updates can be bundled with spyware or malware, and you definitely do not want such software on your computer. If you suspect that your system is infected with this threat, better remove DNSMystic immediately. The most efficient DNSMystic removal method requires an anti-malware or anti-spyware program, and if you do not have it, we suggest installing Reimage Reimage Cleaner Intego software.

How did this adware manage to slip through Firewall and infect my PC?

The most shocking fact about adware programs is that the majority of them are considered to be legitimate programs. DNSMystic adware is one of them. However, techniques that it uses to infiltrate the target system are not so fair, at least in our opinion. The software spreads with a help of other free programs and can be easily installed alongside many free programs available to download online. Therefore, you should set proper installation settings when installing programs downloaded from the Internet. Contrary to a popular belief, “Default” and “Standard” installation settings are not the best choices. They often hide statements about additional third-party software added to the main program. Your task is to switch the installation settings to “Custom” or “Advanced” option and remove ticks from agreements to install these extra programs.

How can I fix my computer after DNSMystic hijack?

In order to fix the damage that DNSMystic adware has done, you have to uninstall this ad-supported software from the system. The best way to remove DNSMystic virus is to scan the entire system with anti-malware[5] software to detect all files that belong to it. In case you are willing to test your DNSMystic removal skills without using anti-malware software, you might want to rely on instructions written by our experts:

You may remove virus damage with a help of Reimage Reimage Cleaner Intego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage Happiness
Intego Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner.

To remove DNSMystic virus, follow these steps:

Eliminate DNSMystic from Windows systems

In order to remove DNSMystic virus, you will need to complete series of very important tasks. You must do everything carefully if you do not want to make any mistakes that would result in system stability problems. First of all, go to your Control Panel, and, using instructions given below, find and uninstall DNSMystic or DNSUnlocker from the system. Then, we suggest you check if these folders are still on the system:

  • C:\Windows\System32\Tasks\dnsmystic;
  • C:\Program Files (x86)\DNSMYSTIC.

If they are, make sure you delete them. Finally, clean your browsers from suspicious add-ons and extensions if you do not want to see DNSMystic ads ever again. However, remember that DNSMystic often travels in bundles with other spyware, so running a system scan with anti-spyware or anti-malware is a highly recommended, although optional task to do. Thorough system scan can reveal hidden spyware samples on your system. 

  1. Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs). Click 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, click on 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program. If you are 'Windows 10 / Windows 8' user, then right-click in the lower left corner of the screen. Once 'Quick Access Menu' shows up, select 'Control Panel' and 'Uninstall a Program'.
  3. Uninstall DNSMystic and related programs
    Here, look for DNSMystic or any other recently installed suspicious programs.
  4. Uninstall them and click OK to save these changes. Right click on each of suspicious entries and select 'Uninstall'

Uninstall DNSMystic from Internet Explorer (IE)

  1. Remove dangerous add-ons
    Open Internet Explorer, click on the Gear icon (IE menu) on the top right corner of the browser and choose Manage Add-ons. Click on menu icon and select 'Manage add-ons'
  2. You will see a Manage Add-ons window. Here, look for DNSMystic and other suspicious plugins. Disable these entries by clicking Disable: Right click on each of malicious entries and select 'Disable'
  3. Change your homepage if it was altered by virus:
    Click on the gear icon (menu) on the top right corner of the browser and select Internet Options. Stay in General tab.
  4. Here, remove malicious URL and enter preferable domain name. Click Apply to save changes. Delete malicious URL, enter your desired domain name and click 'Apply' to save changes
  5. Reset Internet Explorer
    Click on the gear icon (menu) again and select Internet options. Go to Advanced tab.
  6. Here, select Reset.
  7. When in the new window, check Delete personal settings and select Reset again to complete DNSMystic removal. Go to 'Advanced' tab and click on 'Reset' button. Now select 'Delete personal settings' and click on 'Reset' button again

Delete DNSMystic virus from Microsoft Edge

Reset Microsoft Edge settings (Method 1):

  1. Launch Microsoft Edge app and click More (three dots at the top right corner of the screen).
  2. Click Settings to open more options.
  3. Once Settings window shows up, click Choose what to clear button under Clear browsing data option. Go to Settings and select 'Choose what to clear'
  4. Here, select all what you want to remove and click Clear. Select 'Clear' button
  5. Now you should right-click on the Start button (Windows logo). Here, select Task Manager. Open the start menu and select 'Task Manager'
  6. When in Processes tab, search for Microsoft Edge.
  7. Right-click on it and choose Go to details option. If can’t see Go to details option, click More details and repeat previous steps. Right-click 'Microsoft Edge' and select 'Go to details' Select 'More details' if 'Go to details' option fails to show up
  8. When Details tab shows up, find every entry with Microsoft Edge name in it. Right click on each of them and select End Task to end these entries. Find Microsoft Edge entries and select 'End Task'

Resetting Microsoft Edge browser (Method 2):

If Method 1 failed to help you, you need to use an advanced Edge reset method.

  1. Note: you need to backup your data before using this method.
  2. Find this folder on your computer: C:\Users\%username%\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  3. Select every entry which is saved on it and right click with your mouse. Then Delete option. Go to Microsoft Edge folder on your computer, right-click every entry and click 'Delete'
  4. Click the Start button (Windows logo) and type in window power in Search my stuff line.
  5. Right-click the Windows PowerShell entry and choose Run as administrator. Find Windows PowerShell, right-click it and select 'Run as administrator'
  6. Once Administrator: Windows PowerShell window shows up, paste this command line after PS C:\WINDOWS\system32> and press Enter:
    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register $($_.InstallLocation)\AppXManifest.xml -Verbose}
    Copy and paste a required command and press 'Enter'

Once these steps are finished, DNSMystic should be removed from your Microsoft Edge browser.

Get rid of DNSMystic from Mozilla Firefox (FF)

Mozilla Firefox is one of the main targets of DNSMystic adware. You should delete suspicious extensions from it ASAP. You might encounter add-ons such as Conduit, DNSUnlocker, DNSMystic, or Iminent. Better remove them from the browser.

  1. Remove dangerous extensions
    Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions. Click on menu icon and select 'Add-ons'
  2. Here, select DNSMystic and other questionable plugins. Click Remove to delete these entries. Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them
  3. Reset Mozilla Firefox
    Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information. Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  4. Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete DNSMystic removal. Click on 'Reset Firefox' button for a couple of times

Remove DNSMystic from Google Chrome

Your task is to review all extensions installed in Chrome and remove them one by one. We suggest looking for extensions such as Iminent Toolbar, Conduit, DNSUnlocker, DNSMystic, and similarly entitled ones. They all can be related to this software.

  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select DNSMystic and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  4. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  5. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  6. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  7. Click Reset to confirm this action and complete DNSMystic removal. Click on 'Reset' button to complete your removal

Eliminate DNSMystic from Safari

  1. Remove dangerous extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and select 'Preferences'
  2. Here, select Extensions and look for DNSMystic or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and uninstall malicious add-ons
  3. Reset Safari
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and select 'Reset Safari...'
  4. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete DNSMystic removal process. Select all options and click on 'Reset' button

About the author

Olivia Morelli
Olivia Morelli - Ransomware analyst

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Olivia Morelli
About the company Esolutions


Removal guides in other languages

  1. Lorry13 says:
    January 27th, 2017 at 7:50 am

    I have been infected with DNSMystic, and now I see ads non-stop! Hate this adware!!!

  2. gilbert_o says:
    January 27th, 2017 at 7:51 am

    Cant stop the flow of all these hideous ads from dnsmystic… its the most annoying ad-supported program I have ever encountered!

  3. back29 says:
    January 27th, 2017 at 7:52 am

    I think im infected with both dnsunlocker and dnsmystic at the moment

  4. madwish says:
    January 27th, 2017 at 7:53 am

    All these gambling ads and lottos are driving me insane. I hope that Reimage can fix this problem… Because Im angry already

Your opinion regarding DNSMystic virus