Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


McAfee alert DNSchanger!ca. Not sure if infected

  • Please log in to reply
No replies to this topic

#1 yorick73


  • Members
  • 37 posts
  • Local time:10:35 AM

Posted 11 November 2009 - 07:25 PM

Hi All,
I was recently helped by a member to remove a trojan and fix the resulting damage (link here: http://www.bleepingcomputer.com/forums/topic267033.html)
Everything has been running fine. Today I keep getting a message from my McAfee AV software that the trojan DNSchanger!ca was automatically blocked and removed. I get this message every 5 minutes and it automatically results in the closing of internet explorer 8. The location is listed as C:\\windows\system32\tdlwsp.dll. I've run superantispyware, a McAfee scan, spybod search and destroy, microsoft malicious software removal tool and Malwarebytes but nothing is found. I don't know if I have this trojan already or if it really is being blocked...every 5 minutes! I don't know if this is related to my past problem. Can anyone help me determine if I am infected and how I should deal with this? I have a Dell PC running XP SP3.

Thanks to anyone willing to have a look,


BC AdBot (Login to Remove)


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users