I would delete the hosts file (not stictly DNS, I know, but the computer uses the host files (and indeed the lmhosts file) before making a DNS request). It is either C:\windows\system32\drivers\etc or c:\winnt\system32\drivers\etc or C:\windows\hosts When you reboot, Windows will cretate a new default one. The other DNS info is in your dialup TCP/IP properties. You should get all DNS info remotely (ie from your ISP) but this trojan may have put some static addresses in. To check: (for Windows 2000/XP) right click My Network Places > properties > right click the internet dial up > properties > highlight TCP/IP > properties > both IP address and DNS address should be automatic > advanced > ensure there are no DNS servers in place under DNS tab. For Windows 98: right click Network Neigborhood > properties > highlight TCP/IP for the dialup adapter > properties > ensure IP address is automatic > advanced > ensure there are no settings in DNS tab. If you use a LAN to connect to the internet you should also pickup the host and DNS IP addresses automatically.