worm keeps modifying dns setttingsin registry

I had a virus w32.tidserv
I have removed it a few times with various pieces of software, however it has installed a script or something similar that keeps changing my dns server to a known problem server in the Ukraine. It seems to work OK, but I know it will redirect when it wants to. I keep deleting all the dns data and keys in the registry but they keep appearing. Is there a simple to use program that will let me know what is changing my registry settings? Is there any way to lock the registry so that it can only be modified by keyboard input?

 

I was able to completely remove the effects of this virus by following them malware removal guide on this forum. I had just about given up on that. Thanks.