Removing DNSChanger
Once the infection has been found, the next step is to remove it. Because DNSChanger is a rootkit, removing it not as simple as running an antivirus. One option is to reinstall the operating system and start over from scratch. Kaspersky Lab offers TDSSKiller, a rootkit removal tool, which can also detect DNSChanger and remove it from infected systems.
Some ISPs, such as Comcast, are offering $100+ services to remove the infection for their customers. Concerned users should reach out to their ISPs for similar services.
The government does not expect average users to clean up their systems, however.
"Users who believe their computers may be infected should contact a computer professional," to remove the Trojan, the FBI recommended in its working paper. If you discover that your system is among the nearly half a million infected systems and doubt your own ability to clean it up, DCWG has links to organizations that can help with DNSChanger removal on its website.