Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.116 85.255.112.183 1.2.3.4 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{b69e83f8-638d-45a6-948a-b1a3e4d69c32}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.116 85.255.112.183 1.2.3.4 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.116 85.255.112.183 1.2.3.4 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{b69e83f8-638d-45a6-948a-b1a3e4d69c32}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.116 85.255.112.183 1.2.3.4 -> Quarantined and deleted successfully.
and now i can't acces antivirus sites and microsoft sites.please help me to resolve this hijacker
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.116 85.255.112.183 1.2.3.4 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{b69e83f8-638d-45a6-948a-b1a3e4d69c32}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.116 85.255.112.183 1.2.3.4 -> Quarantined and deleted successfully.
Edited by jacks39, 23 February 2009 - 02:42 PM.