trojan dnschanger virus removal

February 14, 2011 at 18:38:10
Specs: Windows 7, 1.6 GHz / 2665 MB
I have a trojan dnschanger virus on my desktop with windows xp. I just bought a new notebook and somehow it seems to have infected it also, it has windows 7. Can my router hold this virus, I haven't transfered any files between the 2 computers. Malware bytes can remove them, but they come right back shorltly after awhile.

See More: trojan dnschanger virus removal

Report •


#1
February 14, 2011 at 19:18:20
Hi,

First I'd like you to download Rkill and run from here (Please do not restart your computer after running Rkill, as this will cause the malicious process to respawn it self): http://download.bleepingcomputer.co...

Secondly, please download TDSSkiller from here and run a scan: http://support.kaspersky.com/faq/?q...

If this doesn't work, please let me know, and I'll suggest another solution.

The reason Malwarebytes doesn't remove the virus is because it's most likely a Rootkit (which is malicious software that is designed to hide itself from your anti-virus software).

Helpful tips before getting started: http://www.computing.net/howtos/sho...


Report •

#2
February 14, 2011 at 21:49:50
When I ran the rkill it seemed to terminate early and I tried it twice. The tdsskiller came up clean. I am attaching the logs from rkill.
This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 02/15/2011 at 0:45:16.
Operating System: Microsoft Windows XP


Processes terminated by Rkill or while it was running:

Rkill completed on 02/15/2011 at 0:45:24.


Report •

#3
February 15, 2011 at 08:47:58
Have you tried running Malwarebytes in Safe Mode?..

If that hasn't worked for you, please try running Hitman Pro if possible: http://dl.surfright.nl/HitmanPro35_...

It cannot be run in Safe Mode, unfortunately.

Helpful tips before getting started: http://www.computing.net/howtos/sho...


Report •

Related Solutions

#4
February 15, 2011 at 22:39:20
The hitman pro wouldn't run, it came up as a invalid win32 application. I ran malwarebytes in safe mode and i don't think it got rid of the virus.

Report •

#5
February 15, 2011 at 22:48:02
Are you using 64bit Windows 7 or 32bit?

Helpful tips before getting started: http://www.computing.net/howtos/sho...


Report •

#6
February 16, 2011 at 07:05:16
I am using a 32bit program.
Ted

Report •

#7
February 16, 2011 at 09:36:38
Do you have a blank CD available by any chance?.

Helpful tips before getting started: http://www.computing.net/howtos/sho...


Report •

#8
February 16, 2011 at 21:01:14
yes sure i have blank cd's

Report •

#9
February 16, 2011 at 21:17:26
I'd like you to download and burn the Kaspersky Rescue Disk on your non infected computer: http://support.kaspersky.com/faq/?q...
http://support.kaspersky.com/viruse...

How to burn an ISO image: http://cdburnerxp.se/help/Data/burn...
CDburnerXP: http://cdburnerxp.se/help/Intro/cdb...

Before installing CDBurnerXP you may be asked to download and install the latest Microsoft .Net Framework. You should see a window prompting you, select "Yes".

Life With Out
Geek Squad: Your blog for tips, info on viruses, and more!


Report •


Ask Question