Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

DNS settings dissappear on every reboot.


  • This topic is locked This topic is locked
9 replies to this topic

#1 sikes

sikes

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:03:03 PM

Posted 25 February 2011 - 03:14 AM

I am facing the problem of the DNS settings dissappearing every time the pc reboots. I have to make manual entries every time to access the net. The rest of the settings are not affected. The pc was recently infected by DNS hijack malware whic was detected and removed by Malwarebytes Anti-Malware software. Trend micro system House Call scan done today reported clean pc. however the problem persists. Please help.....
enclosing the HijackThis log of the scan done (after cleaning the system as advised) is annexed.
SIKES

Attached Files



BC AdBot (Login to Remove)

 


#2 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:12:33 PM

Posted 03 March 2011 - 05:49 AM

Hi,


Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds file to run the tool.
  • When done, DDS will open two (2) logs:
    • DDS.txt
    • Attach.txt
  • Save both reports to your desktop. Post them back to your topic.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#3 sikes

sikes
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:03:03 PM

Posted 04 March 2011 - 04:44 AM

Hi,
Downloaded and ran DDS. Am attaching the two log files for analysis. Thanks,

SIKES

Attached Files



#4 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:12:33 PM

Posted 04 March 2011 - 09:39 AM

Hi,

uTorrent
BitLord


Above listed ones are P2P file sharing programs. P2P downloads are nowadays one of those things that most likely bring infection into the system. My recommendation is to uninstall these (and other if present) P2P file sharing programs.


Uninstall Ask Toolbar and Daemon Tools Toolbar if not installed on purpose.


Please run Notepad (start > All Programs > Accessories > Notepad) and copy and paste the text in the quote box into a new file:

@echo off
>Log1.txt (
ipconfig /all
nslookup google.com
ping -n 2 google.com
route print
)
start Log1.txt
del %0


  • Go to the File menu at the top of the Notepad and select Save as.
  • Select save in: desktop
  • Fill in File name: test.bat
  • Save as type: All file types (*.*)
  • Click save.
  • Close the Notepad.
  • Locate and double-click test.bat on the desktop.
  • A notepad opens, copy and paste the content it (log1.txt) to your reply.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#5 sikes

sikes
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:03:03 PM

Posted 05 March 2011 - 07:06 AM

Attached log1 file as desired.

Attached Files

  • Attached File  Log1.txt   734bytes   1 downloads


#6 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:12:33 PM

Posted 05 March 2011 - 07:12 AM

Hi,

In the windows control panel. If you are using Windows XP's Category
View, select the Network and Internet Connections category otherwise
double click on Network Connections. Then right click on your default
connection, usually local area connection for cable and dsl, and left
click on properties. Click the Networking tab. Double-click on the
Internet Protocol (TCP/IP) item and select the radio dial that says
Obtain DNS servers automatically
Press OK twice to get out of the properties screen and reboot if it asks.
That option might not be avaiable on some systems
Next Go start run type cmd and hit OK
type ipconfig /flushdns
then hit enter, type exit hit enter
(that space between g and / is needed)

Run above instructed test.bat again and post back the log it creates.

After that, reboot the system and then run test.bat once more. Post the log it creates.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#7 sikes

sikes
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:03:03 PM

Posted 07 March 2011 - 02:39 AM

Log file created after following procedure mentioned is attached.

Attached Files



#8 sikes

sikes
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:03:03 PM

Posted 07 March 2011 - 02:46 AM

Second log file created after rebbot is attached.

Attached Files



#9 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:12:33 PM

Posted 07 March 2011 - 03:46 AM

Hi,

Go to device manager (Click start->run and type devmgmt.msc) and to network adapters branch there. Right click network adapter there and select uninstall. Reboot. Windows should detect network adapter automatically at startup and make it ready for you. Run test.bat again after that.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#10 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:12:33 PM

Posted 12 March 2011 - 04:19 AM

Due to the lack of feedback, this topic is now closed.In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users