Replaces TCP/IP registry settings with alternatives.

Usage

TCPIPAddress:<old ip(s)>,<new ip(s)>[,advanced build parameters]

Examples

TCPIPAddress:"1.2.3.4","192.168.1.1"

Description

Used to counter malware that sets itself as DNS server or other similar basic TCP/IP properties.

1. The first parameter specifies one or more IPs to detect.
2. The second parameter specifies one or more IPs the previous ones should be replaced with. Make sure this is something that would fit all users; e.g. for DNS, you might want to take a look at OpenDNS.
3. Versions starting 1.5.2 allow optional advanced build parameters in third place.

Scan Results

• Entries that will update the infected registry values, replacing the bad IPs with new, good ones.

See also

Similar commands

• HostRedirect
• RegyChange