Howard, if I may but in here. I would be grateful ifyou could help me. I am a non-techie here and flying by the seat of my pants. I also have exactly the same HKLM entry. You say that if this name server does not belong to your ISP, get HJT to get rid of it. My ISP original account details give a primary DNS of 22.214.171.124, secondary 126.96.36.199, and an IP address of 188.8.131.52 Is any of these the same as the 'name server' you mention? I understand the IP (numerical) address should = (my ISP's name address) www.tiscali.co.uk The reason I ask is that I have had problems with my ISP's DNS servers causing (with a secure online web site) 'page cannot be displayed' To get round that, and as it seemed a good idea, anyway, I installed Treewalk, which causes the PC to use DNS numerical addresses, avoiding the name addresses. But TW would not work, and after many postings in their Forum, they concluded that my 184.108.40.206 80.225.252 address was fishy: they couldn't get TW to work. I have since run a DNS test at DNSReport.com on my ISP domain = tiscali.co.uk (omit www.), which showed up minor (yellow) but no real (red) problems. So, if I am able to get rid of the HKLM... entry in HJT, it could mean my ISP DNS servers problems would be over My question is - as I have described my position, should I delete this entry?