Jump to content
  • Announcements

    • Rodion Nagornov

      Долгое сохранение сообщений || Delays while posting (click here to read the full text RU/EN)   09/20/2017

      Due to some technical reasons visual delays are possible while message sending. Actually your message is published immediately - just interface works long. In such case, please, do not re-send your message immediately! Press F5 to reload the page and check if your message/topic is published. || По техническим причинам возможно визуально долгое отправление сообщений на форуме. Фактически ваше сообщение публикуется мгновенно - долго отрабатывает графика. В случае подобной ситуации, пожалуйста, сначала обновите страницу (F5) и проверьте, появилось ли ваше сообщение. Не пытайтесь сразу отправить его заново.
Sign in to follow this  
pronecracker

Trojan.Win32.DNSChanger.ik

Recommended Posts

Hello folks. Sometime ago I noticed that when I enter a web address that does not exist (or one that I believe does exist but that I can therefore not visit), Firefox redirects me to some fake porn site that always looks the same but has a different name. It also happens in Internet Explorer.

I have Norton Internet Security 2005; it finds nothing. There are no updates for it. So I did a Kaspersky Online scan, and two viruses were found, Trojan.Win32.DNSChanger.ik and Trojan-Downloader.Win32.Adload.jm. I am new to Kaspersky software, so I had to figure out that the online scanner could not remove these nasty things for me. Attached is the Kaspersky Online scanner log.

My question is: what can I do to remove these things?

Thanks in advance.

infection.txt

Share this post


Link to post
Hello folks. Sometime ago I noticed that when I enter a web address that does not exist (or one that I believe does exist but that I can therefore not visit), Firefox redirects me to some fake porn site that always looks the same but has a different name. It also happens in Internet Explorer.

I have Norton Internet Security 2005; it finds nothing. There are no updates for it. So I did a Kaspersky Online scan, and two viruses were found, Trojan.Win32.DNSChanger.ik and Trojan-Downloader.Win32.Adload.jm. I am new to Kaspersky software, so I had to figure out that the online scanner could not remove these nasty things for me. Attached is the Kaspersky Online scanner log.

My question is: what can I do to remove these things?

Thanks in advance.

Hi pronecracker,

You need to install KIS or KAV trial version in order to remove the viruses and also so that other people in this forum could help you. If you do want to try KIS or KAV do remember to uninstall Norton with a Norton Removal Tool and then install KIS or KAV.

 

Regards

 

Ziaul

 

P.S. KIS has firewall, parental control and spam control and KAV does not have these features and there are few other differences.

Edited by ziaul

Share this post


Link to post

Thats because the actual infected files are located in the system restore folder.

 

If you have a valid license with Symantec, I suggest you talk to their tech support and get them to cure your pc. If you download and run a trial of Kaspersky, we would be glad to assist here. Forum rules don't permit otherwise.

 

 

If you don't want to use a trial of K, head over to http://forums.maddoktor2.com/index.php?showforum=17 where the good folks will be able to clean you up.

 

You can remove the dns settings manually, but I wouldn't recommend this and it is better if an experienced malware fighter talks you through the procedures to make sure that there are no other nasties lying around.

Edited by MAPKOBKA^^

Share this post


Link to post
Guest
This topic is now closed to further replies.
Sign in to follow this  

×