Results 1 to 3 of 3

Thread: DELETE DNSChanger!!!!

  1. #1
    Junior Member godsangel2006's Avatar
    Join Date
    Nov 2008
    Location
    the Netherlands
    Posts
    27

    Unhappy DELETE DNSChanger!!!!

    Hey guys!

    I'm having difficult times with my laptop since Trojan Zlob.DNSChanger got in to it. My Spybot also found lots of tracking cookies and I have no idea what can I do with it. All the time I'm deleting them, they come back during the second check.

    Please, hepl!!!!!!!!!!!!!!!

    Nataly

  2. #2
    Junior Member godsangel2006's Avatar
    Join Date
    Nov 2008
    Location
    the Netherlands
    Posts
    27

    Default

    Here is the log file from Malwere check up:

    Malwarebytes' Anti-Malware 1.30
    Database version: 1399
    Windows 6.0.6001 Service Pack 1

    1/30/2009 3:18:51 PM
    mbam-log-2009-01-30 (15-18-51).txt

    Scan type: Full Scan (C:\|D:\|E:\|F:\|)
    Objects scanned: 178533
    Time elapsed: 2 hour(s), 21 minute(s), 33 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 3
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3cbea290-25ff-4c45-b634-80125ca3f8a6}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.127 85.255.112.141 -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{3cbea290-25ff-4c45-b634-80125ca3f8a6}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.127 85.255.112.141 -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{3cbea290-25ff-4c45-b634-80125ca3f8a6}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.127 85.255.112.141 -> Quarantined and deleted successfully.

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)

  3. #3
    Security Expert: Emeritus
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    29,374

    Default

    Hello godsangel2006

    Please see this next

    Please follow the instructions in the above thread and then start a fresh topic with the logs required.

    Regards.
    Microsoft MVP Consumer Security 2008-2011

    Member of ASAP and UNITE since 2006

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •