IPB

Welcome Guest ( Log In | Register )

 
Closed TopicStart new topic
> Trojan.Win32.DNSChanger.ik, Found during online scan. Do not own KAV, how remove?
pronecracker
post 20.01.2008 15:09
Post #1


Newbie
*

Group: Members
Posts: 2
Joined: 20.01.2008




Hello folks. Sometime ago I noticed that when I enter a web address that does not exist (or one that I believe does exist but that I can therefore not visit), Firefox redirects me to some fake porn site that always looks the same but has a different name. It also happens in Internet Explorer.
I have Norton Internet Security 2005; it finds nothing. There are no updates for it. So I did a Kaspersky Online scan, and two viruses were found, Trojan.Win32.DNSChanger.ik and Trojan-Downloader.Win32.Adload.jm. I am new to Kaspersky software, so I had to figure out that the online scanner could not remove these nasty things for me. Attached is the Kaspersky Online scanner log.
My question is: what can I do to remove these things?
Thanks in advance.
Attached File(s)
Attached File  infection.txt ( 19.18K ) Number of downloads: 6
 
Go to the top of the page
 
+Quote Post
ziaul
post 20.01.2008 15:23
Post #2


Advanced Member II
****

Group: Gold beta testers
Posts: 390
Joined: 19.06.2007




QUOTE(pronecracker @ 20.01.2008 16:39) *
Hello folks. Sometime ago I noticed that when I enter a web address that does not exist (or one that I believe does exist but that I can therefore not visit), Firefox redirects me to some fake porn site that always looks the same but has a different name. It also happens in Internet Explorer.
I have Norton Internet Security 2005; it finds nothing. There are no updates for it. So I did a Kaspersky Online scan, and two viruses were found, Trojan.Win32.DNSChanger.ik and Trojan-Downloader.Win32.Adload.jm. I am new to Kaspersky software, so I had to figure out that the online scanner could not remove these nasty things for me. Attached is the Kaspersky Online scanner log.
My question is: what can I do to remove these things?
Thanks in advance.

Hi pronecracker,
You need to install KIS or KAV trial version in order to remove the viruses and also so that other people in this forum could help you. If you do want to try KIS or KAV do remember to uninstall Norton with a Norton Removal Tool and then install KIS or KAV.

Regards

Ziaul

P.S. KIS has firewall, parental control and spam control and KAV does not have these features and there are few other differences.

This post has been edited by ziaul: 20.01.2008 15:26


--------------------
Sony Ericsson Xperia Arc V.2.3.2
Go to the top of the page
 
+Quote Post
dawgg
post 20.01.2008 22:15
Post #3


Forum Elite
**************

Group: Moderators
Posts: 9299
Joined: 6.04.2006
From: London




Disable System Restore and enable it again
Go to the top of the page
 
+Quote Post
pronecracker
post 20.01.2008 23:35
Post #4


Newbie
*

Group: Members
Posts: 2
Joined: 20.01.2008




QUOTE(dawgg @ 20.01.2008 21:15) *
Disable System Restore and enable it again

I did, though I don't understand what it is for...?
Go to the top of the page
 
+Quote Post
Baz^^
post 20.01.2008 23:47
Post #5


Wrestling Champion
**************

Group: Gold beta testers
Posts: 8799
Joined: 10.03.2007




Thats because the actual infected files are located in the system restore folder.

If you have a valid license with Symantec, I suggest you talk to their tech support and get them to cure your pc. If you download and run a trial of Kaspersky, we would be glad to assist here. Forum rules don't permit otherwise.


If you don't want to use a trial of K, head over to http://forums.maddoktor2.com/index.php?showforum=17 where the good folks will be able to clean you up.

You can remove the dns settings manually, but I wouldn't recommend this and it is better if an experienced malware fighter talks you through the procedures to make sure that there are no other nasties lying around.

This post has been edited by MAPKOBKA^^: 20.01.2008 23:50


--------------------
Kind Regards,

Baz (volunteer moderator/beta testing lead -- I don't work for Kaspersky
)
Go to the top of the page
 
+Quote Post

Closed TopicStart new topic

 



Lo-Fi Version Time is now: 2.08.2014 04:23