DNS changer problem here....

[ryanox]

I just download iobit 360 beta 2.0 and when I scan my computer...

it detected a trojan.DNSchanger located on C:\resycled , which is i can't find the folder (even I have check to reveal the hidden files and folders)

 

I've tried couple of times to remove it with bitdefender and iobit 360,

but it keeps recreated itself each time I restart or shutdown my PC...

 

Need help here...:cry:http://img530.imageshack.us/img530/7433/screenshotakz.jpg

 

thx.....:?

[333halfevil]

Do you have an USB stick or other storage device plugged into your PC?

[demitris]

hi ryanox

DNSChanger is a trojan that will direct u in other webpages u are looking for malicious purposes

find information here

http://news.softpedia.com/news/DNSChanger-Trojan-Removal-Tool-2-0-Out-Download-Here-100410.shtml

 

and download the free removing tool if you trust

 

i did'nt need to use it anyway

 

cheers

[fuzzydice45]

I don't know about removing the problem, but to view the recycler folder you need to check "Show hidden files and folders" and uncheck "Hide protected operating system files" as seen here:

[demitris]

hi reanox

 

i checked again in SOFTPEDIA and the program i proposed you is for MAC Computers so do not download it

sorry for the mistake

 

anyway search in INTERNET and there is something to find

 

cheers

[ryanox]

@333halfevil: no, I don't have any USB Drive plug into my computer...

 

@fuzzydice45: thx for ur help... I can find the resycled folder now, but the folder is empty... so I can't perform Iobit 360 powerful delete feature...

 

@demitris: thx for the tips... I found something on internet 'bout this:

 

(http://www.myantispyware.com/2007/11/06/how-to-remove-trojan-dnschanger/)

 

any suggestion?

 

thx...:smile:

[demitris]

hi ryanox

 

read information in geeks forum

 

http://forums.majorgeeks.com/showthread.php?t=180381

 

cheers

[demitris]

hi ryanox

 

this one here claims he has the solution

 

http://forums.majorgeeks.com/showthread.php?t=173311

 

cheers

[ha14]

Hi

 

Instal combofix and let it to work:

 

or

1. turn off system restore

2. boot in safe mode

3. run malwarebytes full scan

4. re boot if clean turn on system restore.

 

http://www.digitaldrake.com/how-to-remove-the-trojandnschanger-virus/

[ryanox]

hi ha14

 

I'm following ur solution and it works for me...

 

thx for ur help:grin:

[ha14]

Hi

Glad that it worked its a kind of one apparently have to be removed once for all otherwise its regenerate itself!!!!! Like a virus:evil:

[vman]

At our computers at school, we had an infection that spread like wildfire, similar to yours.

 

The infected files where copy.exe, host.exe, and autorun.inf.

 

What i did, was download a command line scanner, boot in safemode, and run a full scan.

 

Malwarebytes at the time did not pick up the infection, even after sending them samples of the infected file.

 

The ones that regenerate are a pain in the wahoo.