pc keeps resetting it dns on the network card

we have a pc that keeps changing the dns address's on the network card.
It should be set to obtain, but randomly changes it to use the following and where as it should be getting the internal server IP from the dhcp server.

I have scanned it for malware and virus using avast business and malwarebytes.
I've looked for startup items and scheduled scripts. nothing
also updated network card drivers

windows 10 pro - fully updated

any recommendations ?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

AlexProject Systems EngineerCommented:
Is it on a domain or anything?
total123Author Commented:
Yes it's on a domain
JohnBusiness Consultant (Owner)Commented:
Try resetting the network card and TCP/IP

Open cmd.exe with Run as Administrator
Then: netsh int ip reset c:\resetlog.txt
Then: ipconfig /flushdns
Then: restart the computer and test.
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

P VStorage & Virtualization  ConsultantCommented:
please go to TCIP setting & check is there DNS specify & its talking from there Please remove & re-install the N/W driver
AlexProject Systems EngineerCommented:
You don't have this set via group policy do you?
total123Author Commented:
It's not a gp thing, already checked that
JohnBusiness Consultant (Owner)Commented:
Did you reset?

Try a USB wireless card and see if the same issue occurs
total123Author Commented:
i've done the reset of log and removed the network card driver to reboot and yet it still causes the issue.
This machine is about an hours drive away. I'm unable to try a wifi option as of yet.
Peter HutchisonSenior Network Systems SpecialistCommented:
Does it have any toolbars, apps  or other addons installed that is enforceing its own settings on the system? Check PRograms and Features, browser addons etc.
Robert RComputer Service TechnicianCommented:
Chris PC makes an awsome DNS tool called ChrisPC DNS Switch. This may not find the reason why the dns keeps changing but will help to change the settings. Note there is a 14 day trial for the pro version, to try it out to see if you want to purchase a license and a standard version but should not be used for commercial purposes.  Very handy tool
https://www.chris-pc.com/download.html or you can read more about the software here.  http://changedns.how/
total123Author Commented:
I've just logged into the pc and had a quick pop up saying, uac is disabled make changes, yes or no. before i could do anything it disappeared.

I've run rkill, ccleaner, avast and malwarebytes.

There are no extensions in chrome and edge
Peter HutchisonSenior Network Systems SpecialistCommented:
Check the registry for TCP settings
a) Open Regedit
b) Browse to HKEY_Local_Machine\System\CurrentControlSet\Services\Tcpip\Parameters\Intefaces.
c) Check each of the interface keys and check settings esp NameServer value.
total123Author Commented:
found this

JohnBusiness Consultant (Owner)Commented:
Uninstall the driver, disable the card, and then run SFC /SCANNOW from an Admin command prompt.

Restart, enable the card and install the driver. See if that removes the issue
total123Author Commented:
done that, hasn't worked
JohnBusiness Consultant (Owner)Commented:
Try the following (given "nothing works")

1. Remove (uninstall) ALL antivirus except Windows Defender.

2. Run a Windows 10 Repair Install and Keep Everything.

Go to the Media Creation Link:


Windows 10 is running, so click on the Download button (not Upgrade Button, select Save.
Create a USB Windows Installation key and then run Setup on the USB Key.
This will launch the Repair and proceed normally.
total123Author Commented:
cheers john, i had a feeling a repair or format would be the next step soon
Robert RComputer Service TechnicianCommented:
Really looks like the system is infected..... as it keeps changing the dns settings   Second based on your comment: "'I've just logged into the pc and had a quick pop up saying, uac is disabled make changes, yes or no. before i could do anything it disappeared." Yeah I agree that the best thing is to do the repair install, but if that does not work you may have to backup your data and do a full reinstall.... which means you will have to reinstall all your apps, drivers etc. Unless there is a recovery partition on your hard drive.
total123Author Commented:
Hi, it has now been decided to replace the pc, rather than doing a visit.

I would like to say thank you for your help
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 10

From novice to tech pro — start learning today.