Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


DNS changer Trojan: win32.trojan.dnschanger

  • Please log in to reply
2 replies to this topic

#1 EFraceRR


  • Members
  • 3 posts
  • Local time:11:53 PM

Posted 08 December 2008 - 10:31 PM

EDIT: I have Vista home premium (standard 32 bit edition)

I performed a quick scan with Ad-Aware 2008 and it located the file win32.trojan.dnschanger in C:\Program Files\HP Games\Family Feud/uninstall.exe

I removed the file using the Ad-Aware program. I then performed a quick scan using Malwarebyte's Anti-malware program, and then performed a full scan. The file was not detected again. The logs did not indicate any infected registry files.

I then rebooted my laptop, and performed another quick scan using Ad-Aware. The only thing that came up were Privacy things, like cookies and 2 MRU objects. These are a normal occurrence, correct?

I am currently performing a Kaspersky online "critical areas" scan. So far, no detections.

After doing a little research, after I had discovered and removed the file, I did notice my computer was a bit sluggish when starting at the desktop screen after start up. I believe it is because I still have some infection somewhere. I know I became infected sometime this month. I do not know when.

I would like to make sure my computer is truly clean, and the registry is also unharmed/fixed.

Thank you all.

Edited by EFraceRR, 09 December 2008 - 12:56 AM.

BC AdBot (Login to Remove)


#2 EFraceRR

  • Topic Starter

  • Members
  • 3 posts
  • Local time:11:53 PM

Posted 09 December 2008 - 01:06 AM

Here is the result of the Kaspersky scan:

Tuesday, December 9, 2008
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001)
Kaspersky Online Scanner 7 version:
Program database last update: Tuesday, December 09, 2008 00:43:40
Records in database: 1444973

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - Critical Areas:
C:\Program Files
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Scan statistics:
Files scanned: 225627
Threat name: 0
Infected objects: 0
Suspicious objects: 0
Duration of the scan: 02:39:11

No malware has been detected. The scan area is clean.

The selected area was scanned.

Edited by EFraceRR, 09 December 2008 - 12:11 PM.

#3 EFraceRR

  • Topic Starter

  • Members
  • 3 posts
  • Local time:11:53 PM

Posted 09 December 2008 - 12:12 PM


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users