• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

A DNS changer virus(trojan)?

When i do a search on google or Bing instead of getting on to the website clicked i am gettng rerouted to a different website advertising a product or clinic etc.. For example, when clicking on the mayo clinic site after doing a google search, i will get on to a site advertising  a pain clinic. This is happening to me 80% of the time when i do any searches  and it is **bleep** frustrating. I noticed this happening about 3 weeks ago or so.I ran the norton power eraser tool which said there were no risks? How can i correct this problem?

Replies

Kudos0

Re: A DNS changer virus(trojan)?

When i do a search on google or Bing instead of getting on to the website clicked i am gettng rerouted to a different website advertising a product or clinic etc.. For example, when clicking on the mayo clinic site after doing a google search, i will get on to a site advertising  a pain clinic. This is happening to me 80% of the time when i do any searches  and it is **bleep** frustrating. I noticed this happening about 3 weeks ago or so.I ran the norton power eraser tool which said there were no risks? How can i correct this problem?

Kudos0

Re: A DNS changer virus(trojan)?

How long has this gone on for??

Quads

Kudos0

Re: A DNS changer virus(trojan)?

quad,   for the past month.  what if i do a restore point to correct this situation.? Will this work?  Thanks!! 

Kudos0

Re: A DNS changer virus(trojan)?

ANY other user other than the thread starter is not to use any instructions, scripts or proceedures,  The work though in cleaning a system is individual and only for that system due to a number of factors.

Please do not run any tools unless instructed to do so. 

  • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability. Do as the instructions ask nothing extra or run things twice
  • If I ask a Question just answer it, don't run anything unless it states.
  • Major steps used:

1. Find

2. Break

3. Destroy

4. Cleanup  (including system as a whole)

Please read every post completely before doing anything. 

  • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
  • Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forum, (sometimes )

  • Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.

 

Download OTL http://www.bleepingcomputer.com/download/otl/   On to the Desktop

Disable Norton / Symantec for say 30mins 

Start OTL,  (Right click and from the menu choose "Rin as Administrator")

Click the Scan All Users checkbox.

Change file age to 90 days

Press the 

An OTL.txt  and extras.txt will be created. To attach back in a post

Quads

Kudos0

Re: A DNS changer virus(trojan)?

Quad, i will run the procedures as outlined by you and post the attachments to you tomorrow. thanks for your help.  redfordl

Kudos0

Re: A DNS changer virus(trojan)?

Quad ,here are the reports attached. otl.txt,etc.  Sorry for the gross delay.  About a month ago i did download malaware .org software which found no infections.  Thanks!!  hOPE TO HEAR FROM YOU SOON AND take your time in analyzing them.

yours  redfordl

File Attachment: 
Kudos0

Re: A DNS changer virus(trojan)?

Another user that 

a) Looks like they have tried quite a bit and left it a long time,

b) Can not follow instructions

Quads

Kudos0

Re: A DNS changer virus(trojan)?

I thought i had followed your instructions. I had installed the malaware before your instructions. You figure such a highly recommended program would find the director infections.    But if this means that you will not analyze my reports let me know.I wish you woould reconsider.  Thanks!!  redfordl

Kudos0

Re: A DNS changer virus(trojan)?

People must really think I cannot read, including logs

OTL logfile created on: 12/17/2012 3:52:26 PM - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\basic\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

Run3 means that OTL has already been run prevously

location is against my instructions 

Quads

Kudos0

Re: A DNS changer virus(trojan)?

yes, thinking that the malaware co could help me i ran the otl and a dds programs as per their intructions to go back one month and had them analyze them.  After analyzing them  their next intructions were hard to follow so  i gave up with them. norton directly could not solve my problem so i went with the malaware co.   Then i put it out on the norton community forum and you answered,but evidently you do not wish to continue helping me.   I am asking for your help in the spirit of the christmas season. In no way am i infering that you cannot read a log,but i told you the truth as to how i proceeded in this manner which i think any computer novice would follow in going to the software cos. or experts for help!!   Anyway, if you do not wish to help  have a Merry Christmas  and a Happy New Year!!

Kudos0

Re: A DNS changer virus(trojan)?

"thinking that the malaware co could help me i ran the otl and a dds programs as per their intructions to go back one month and had them analyze them.  After analyzing them  their next intructions were hard to follow so  i gave up with them."

 

More the one forum using tools and instructions is a No, No,  Even though you can't follow instructions.

 

Quads

This thread is closed from further comment. Please visit the forum to start a new thread.