DNS_PROBE_FINISHED_BAD_CONFIG — What It Means & How to Fix It

What Does This Error Mean?

This error means your device's DNS settings are misconfigured. DNS is the system that translates website names into addresses your computer can use. When the configuration is wrong or corrupted, your computer cannot complete that translation. The result is that websites fail to load, even if your internet connection is technically active.

Affected Models

Google Chrome
Microsoft Edge
Windows
macOS
Android
ChromeOS

Common Causes

Your network adapter's DNS settings were changed manually and are now incorrect
A VPN or proxy app changed your DNS settings and left them in a broken state
A recent Windows or macOS update corrupted your network configuration
Your router handed out a bad DNS address via DHCP
Malware or security software modified your DNS settings without your knowledge

How to Fix It

On Windows, open Settings > Network & Internet > Change adapter options. Right-click your connection, choose Properties, select 'Internet Protocol Version 4 (TCP/IPv4)', and click Properties. Set it to 'Obtain DNS server address automatically'.

This resets any manual DNS settings back to automatic, which usually fixes the bad config.
Open Command Prompt as Administrator (right-click Start > 'Command Prompt (Admin)') and run these commands one at a time: netsh winsock reset, netsh int ip reset, ipconfig /flushdns. Then restart your computer.

These commands reset your computer's network stack to factory defaults.
If you use a VPN, disconnect it and disable it temporarily. Then test the website again.

VPNs often change DNS settings. A buggy VPN can leave bad settings behind even after disconnecting.
Restart your router and modem. Unplug both, wait 30 seconds, and plug them back in. Wait 2 minutes for them to fully reconnect.

The router provides DNS addresses to your devices. A restart can fix a bad DHCP/DNS response.
Set a manual DNS server. In your network adapter's IPv4 settings, choose 'Use the following DNS server addresses' and enter 8.8.8.8 (preferred) and 8.8.4.4 (alternate). Click OK.

Google's public DNS servers are reliable and free. This bypasses any bad DNS your router is handing out.

When to Call a Professional

If your DNS settings look correct but the error persists, a technician can check your router configuration and run deeper network diagnostics. If you suspect malware changed your settings, run a full malware scan or contact a computer repair professional.

Frequently Asked Questions

Did a Windows update cause this?

It is possible. Some Windows updates reset or change network adapter settings. After a major update, your DNS settings may have been set to an incorrect manual value. Go to your network adapter properties and set DNS back to automatic, or manually enter a known good server like 8.8.8.8.

Will resetting the Winsock fix the problem?

Often yes. The Winsock is a programming interface that handles how your computer communicates over a network. If it gets corrupted — by a bad update, malware, or a crashed VPN — resetting it can restore normal network behavior. The command 'netsh winsock reset' is safe to run and only affects network settings.

How do I know if malware changed my DNS settings?

Check your DNS server addresses manually. If they show unusual IP addresses that are not from Google (8.8.8.8), Cloudflare (1.1.1.1), or your ISP, that is suspicious. Run a malware scan with Windows Defender or Malwarebytes before fixing your DNS settings.