trojan virus

Learn about Computer Security Virus/Malware Removal Assistance
#1

i believe i have something similar to this on desktop and my laptop…

trojan_osx_dnschanger

i know that one there is usually associate with mac systems is there something like that can also run on windows…

my desktop is running windows 7 home premium.and the laptop is running windows 7 home premium bot th 32 bit system…

i consant page redirects no matter what browser im running on. right know i running CD and firefox. i have firefox running with no scripts and CD running with ADblock… on the no scripts i have google analytics and google sydincation disable. seems to help some what…ive run several add antispyware and antivirus programs with no return on finding anything.i redid my laptop hoping to get rid of with the same problem recurring…i would appreicate some help with this…

thanks
meghan cox

#2

Can you please list the programs you’ve scanned with?

I’d advise using Hitman Pro, Malwarebytes, and SuperAntiSpyware.
Also, which AV do you have installed?

#3

i ran malwarebytes, A2, superantispyware, spybot, hitman 3.5.i also used iobit advance system care and iobit 360 i was sent a link by some in email from comodo to run scanner off the firewall side…nothing was found but the normal cookies…im running CIS 4.1 the free verison right know…i ran them all in safe mode and normal mode.

thanks
meghan

#4

Could you try installing CCleaner and using it to delete your temporary files.

Also, which scanner alerted you to the threat you mention in your first post?
Did any of the other scanners find anything? If so which ones and what did they find?

Are you still finding things in yours scans if you scan again or are they not finding anything anymore?

Sorry, I just need more information about your specific situation.

#5

i ran ccleaner as well… i have page redirects no matter what i search for on any browser…the only thing any of them find is cookie called atdmt…thats all its finding…nothing else…

meghan

#6

If none of the scanners found anything then how do you know that the name of a malware on your computer is trojan_osx_dnschanger?

Also, can you please download and run HiJackThis and post the log?

#7

i didnt mean i had that pacutrial trojan…i ment i have something actiing like that on my laptop…here is the hijack this file…

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\windows\system32\taskeng.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”
O4 - HKLM..\Run: [Adobe ARM] “C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe”
O4 - HKCU..\Run: [msnmsgr] “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background
O23 - Service: Emsisoft Anti-Malware 5.0 - Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\Emsisoft Anti-Malware\a2service.exe
O23 - Service: AMD External Events Utility - AMD - C:\windows\system32\atiesrxx.exe
O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe
O23 - Service: COMODO livePCsupport Service (CLPSLS) - COMODO - C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: IS360service - IObit - C:\Program Files\IObit\IObit Security 360\IS360srv.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\windows\system32\PSIService.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

#8

check two things, check your hosts file and also check your DNS servers.

#9

im sorry i dont know do how do…how do i check them…

thanks

#10

host file How to: Check and repair the Hosts file

dns settings Fix your DNS problems | Computerworld

#11

i did that nothing seemed to be wrong…it seemed to working ok…

thanks