SysChat

SysChat (http://www.syschat.com/forum.php)
-   General Tech Support (http://www.syschat.com/general/general-tech-support/)
-   -   Cannot open government of Canada web sites (http://www.syschat.com/cannot-open-government-canada-web-sites-1997.html)

Sami 05-10-2007 02:20 PM

Have you tried ewido anti-spyware? that effectively removes this trojan.

This Trojan is called Trojan.DR.DNSChanger.MT ( Trojan.Win32.DNSChanger.hk, Win32/Small.FB) more details can be found here Trojan.DR.DNSChanger.MT

Some times you may have to manually make changes to your DNS settings after removing this entry.

To change reset dns servers follow the steps below

Start -> Settings -> Network Connections

Right click on your default connection, usually local area connection for cable and dsl, and click on properties.
Double-click on the Internet Protocol (TCP/IP) and
Select the radio button -> Obtain DNS servers automatically -> 0K

mhookem 05-10-2007 04:07 PM

Just a suggestion, are there any settings on your spyware software.

Can you remember any software you downloaded/installed around the time the problem started?

Donald 05-10-2007 08:37 PM

Still cannot access any government of Canada web sites
 
-My network connection was already selected for "obtain DNS automatically".
-I have not loaded any new software that I can remember prior to encountering this problem.
-I checked out the web site for ewido anti-spyware and it appears to have been taken over by AVG anti-spyware and I already run that program.
I don't know what to do next!

mhookem 05-11-2007 07:27 AM

Cannot open government of canada websites
 
:icon_twisted: You have obviously got a trojan.

If I am right in saying you are using Aliant to connect to the internet, I have had a look under the 'Help & Support' section and they are saying that you do not need to use the DNS settings.

Although even if disabling this option bypassed the trojan you would still have the trojan on your computer.

As is quite common you may have an unwanted .dll in your system32 folder which keeps replacing the problem after an attempt to fix it with some of the software you've tried.

I've had a bit of a look around and some other people are suggesting some more software called Fixwareout.exe
http://downloads.subratam.org/Fixwareout.exe

Personally I don't think downloading all sorts of anti-spyware is the best thing to do in the long-run. It's always better to try and work it out yourself so that you can begin to learn where to look if you get another infection.

Only several months ago I managed to click on a link that instantly downloaded some spyware that had the cheek to direct me to a site that had the software needed to remove the spyware ( at a cost of about $30! )

I found a nice little program called procexp, you can use it to look at all the processes currently running on your computer and any .dlls' etc. that are linked to the process ( including you internet connection ).

It even highlights images that are 'packed' which is a good indication of some spyware that is trying to hide itself within an encrypted image.

http://www.microsoft.com/technet/sys...***plorer.mspx

As I mentioned above, I've had a look around and most people seemed to be using a great list of software to find some 'out of place' objects then fixing them.

Every body has to do the same thing when dowloading some malicious software that's trying to hide, use the process of elimination, corner the culprit and blast it out of the water!!:icon_wink:

b1caez01 05-12-2007 05:19 PM

System Restore Could Be The Culprit
 
Since it appears that you have been advised that it is malware...get ready to spend about an hour...

1. shut off system restore before altering the registry > Start > Help... > Undo changes...System Restore > System Restore Settings > Turn off System Restore on all drives > If you are in unfamliar territory check this URL ... Windows XP System Restore Guide
2. delete all restore points...just by turning off System Restore all your restore points will be deleted or use the inboard Disk Cleanup tool and then select the more options tab...
3. apply your anti-malware progs following an update of each
4. scan your registry manually, for the offending item, if you do not have a prog that will do this for you [Registy First Aid is my first choice, but it is not free]...something like that...
5. delete all that you find...since you know it to be malware induced, there MAY not be a need to back up the registry, but do it anyway
6. set one or more malware progs to scan upon a reboot
7. set one or more file killers to delete certain files, that you can hopefully identify early in the process, upon reboot
8. be sure install disk is in the proper bay
9. do sfc /scannow
10. reboot
11. download the new TREND MicroSystems TREND HIJACKTHIS...more powerful then the old, and FREE...run it
12. repeat the above (1-9) as necessary


All times are GMT -4. The time now is 10:18 PM.


Copyright © 2005-2013 SysChat.com


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54