Virus: Trojan: DNS Changer
Hey, I have a virus on my computer, I need help removing it. It's a DNS Changer. ID's include: Net-Worm.Win32.DipNot.D Backdoor.Win32.Kbot Rootkit.Win32.Agent.pp Trojan.Win32.Agent Will I be able to remove it and how? I keep getting pop up ____ messages or desktop icons. Please help :( ~K1 person needs an answerI do too
December 23rd, 2009 6:55am

I did a system restore. It seems as if that was a potential solution... Any advice on what I could do to prevent such problems?
Free Windows Admin Tool Kit Click here and download it now
December 23rd, 2009 8:18am

Hi KShelp, I would suggest a follow-up with MBAM to make sure nothing is lurking in there. You can download to your desktop Malwarebytes' Anti-Malware from Here or Here Double Click mbam-setup.exe to install the application. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware , then click Finish. If an update is found, it will download and install the latest version. Once the program has loaded, select "Perform Quick Scan ", then click Scan . The scan may take some time to finish,so please be patient. When the scan is complete, click OK, then Show Results to view the results. Make sure that everything is checked , Click Remove Selected . When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Notes) The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM. Extra Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process; if asked to restart the computer, please do so immediately. If you encounter this message: "c:\program files\malwarebytes' Anti-Malware\mbamext.dll Unable to register the dll/ocx: RegSvr32 failed with exit code 0x5" Click on ignore mbamext.dll From now on keep MBAM updated and use it to scan every so often for malware, or upgrade to the paid version for realtime scanning and auto updating. Here is my standard list of simple steps that you can take to reduce the chance of infection in the future. Above all, prevention would include watching where you surf to and how you surf. The following suggestions are general prevention and are not customized for your computer. You may have already taken some of these steps, and depending on your current security, you may not need to implement all of these: 1. Visit Microsoft Update: Make sure that you have all the Critical Updates recommended for your operating system, Office, and IE. The first defense against infection is a properly patched OS from Microsoft Update at update.microsoft.com. More info HERE . 2. Please use a firewall and realtime anti-virus. Keep the anti-virus software and firewall software up to date. 3.You might consider installing Mozilla / Firefox . http://www.mozilla.com/en-US/ 4. Do not use file sharing. Even the safest P2P file sharing programs that do not contain bundled spyware, still expose you to risks because of the very nature of the P2P file sharing process. By default, most P2P file sharing programs are configured to automatically launch at startup. They are also configured to allow other P2P users on the same network open access to a shared directory on your computer. The reason for this is simple. File sharing relies on its members giving and gaining unfettered access to computers across the P2P network. However, this practice can make you vulnerable to data and identity theft. Even if you change those risky default settings to a safer configuration, the act of downloading files from an anonymous source greatly increases your exposure to infection. That is because the files you are downloading may actually contain a disguised threat. Many very malicious worms and trojans, such as the Storm Worm, target and spread across P2P files sharing networks because of their known vulnerabilities. 5. Before using or purchasing any Spyware/Malware protection/removal program, always check the following Rogue/Suspect Spyware Lists . http://www.spywarewarrior.com/rogue_anti-spyware.htm http://www.malwarebytes.org/database.php 6. If you have not already done so, you might want to install CCleaner and run it in each user's profile: http://www.ccleaner.com/ ** UNcheck the option to install the Yahoo toolbar that is checked by default for the Standard version, or download the toolbar-free versions (Slim or Basic) when given the option for those. 7.Web Of Trust , uses colored alerts to warn about risky websites warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites: Red for Warning = STOP Yellow for Use Caution Green for Safe Grey for Unknown There is a Web Of Trust version for Firefox as well. 8. You might consider installing SpywareBlaster: http://www.javacoolsoftware.com/spywareblaster.html It will: Prevent the installation of ActiveX-based spyware, adware, browser hijackers, dialers, and other potentially unwanted software. Block spyware/tracking cookies in Internet Explorer and Mozilla Firefox. Restrict the actions of potentially unwanted sites in Internet Explorer. Tutorial here:http://www.bleepingcomputer.com/forums/tutorial49.html Periodically check for updates 9. Here are some helpful articles: "How did I get infected?" http://www.bleepingcomputer.com/forums/topic2520.html "I'm not pulling your leg, honest" by Sandi Hardmeier http://www.microsoft.com/windows/IE/community/columns/pulling.mspx
December 23rd, 2009 11:07pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics