View Full Version : Zlob.DNSChanger ! Problema


wizard964
18-12-2007, 22:49
Como é que posso remover este malware definitivamente ?
Como evitar ?
Claro tenho Anti-Spyware (Spyware Terminator) (actualizado)
Anti-Virus (KasperSky Antivirus)

nono54
19-12-2007, 08:56
bondia
scan o teu comptador con:
http://siri.urz.free.fr/Fix/SmitfraudFix.exe (option 1)et
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
desactive o teu antivirus!
da os logs quando accabo
a+;)

wizard964
21-12-2007, 12:33
Valeu problema resolvido !

SmitFraudFix v2.274

Scan done at 13:18:05.92, Fri 12/21/2007
Run from C:\Documents and Settings\Wizard\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» DNS Before Fix

Description: Intel(R) 82566DC Gigabit Network Connection - Packet Scheduler Miniport
DNS Server Search Order: 208.67.220.220
DNS Server Search Order: 208.67.222.222

HKLM\SYSTEM\CCS\Services\Tcpip\..\{3D443FF5-72CA-48FF-87CF-E7B86D3910C5}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{3D443FF5-72CA-48FF-87CF-E7B86D3910C5}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{45E7765E-6BA5-49B1-905B-D31976C05794}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{4DF85F87-3062-4A75-9C06-7042C35FCE01}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{3D443FF5-72CA-48FF-87CF-E7B86D3910C5}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{3D443FF5-72CA-48FF-87CF-E7B86D3910C5}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{45E7765E-6BA5-49B1-905B-D31976C05794}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{4DF85F87-3062-4A75-9C06-7042C35FCE01}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS3\Services\Tcpip\..\{3D443FF5-72CA-48FF-87CF-E7B86D3910C5}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS3\Services\Tcpip\..\{3D443FF5-72CA-48FF-87CF-E7B86D3910C5}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS3\Services\Tcpip\..\{45E7765E-6BA5-49B1-905B-D31976C05794}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS3\Services\Tcpip\..\{4DF85F87-3062-4A75-9C06-7042C35FCE01}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222

»»»»»»»»»»»»»»»»»»»»»»»» DNS After Fix

Description: Intel(R) 82566DC Gigabit Network Connection - Packet Scheduler Miniport
DNS Server Search Order: 208.67.220.220
DNS Server Search Order: 208.67.222.222

HKLM\SYSTEM\CCS\Services\Tcpip\..\{3D443FF5-72CA-48FF-87CF-E7B86D3910C5}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{3D443FF5-72CA-48FF-87CF-E7B86D3910C5}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{45E7765E-6BA5-49B1-905B-D31976C05794}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{4DF85F87-3062-4A75-9C06-7042C35FCE01}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{3D443FF5-72CA-48FF-87CF-E7B86D3910C5}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{3D443FF5-72CA-48FF-87CF-E7B86D3910C5}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{45E7765E-6BA5-49B1-905B-D31976C05794}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{4DF85F87-3062-4A75-9C06-7042C35FCE01}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS3\Services\Tcpip\..\{3D443FF5-72CA-48FF-87CF-E7B86D3910C5}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS3\Services\Tcpip\..\{3D443FF5-72CA-48FF-87CF-E7B86D3910C5}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS3\Services\Tcpip\..\{45E7765E-6BA5-49B1-905B-D31976C05794}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS3\Services\Tcpip\..\{4DF85F87-3062-4A75-9C06-7042C35FCE01}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222



Ja consigo ter acesso as outras paginas de internet sem nenhum problema ! Agradecido !

nono54
22-12-2007, 18:13
bondia
nao a nada de limpo no log:n1qshok:
si nao tens problems todo bon:coolshad:
a+
boas festas