1. urbanphoenix

    urbanphoenix Private E-2

    Hey all,
    Just been hit with Zlob.Dnschanger :cry and have been going through a number of forums in order to get this solved! So far majorgeeks has been the most informative of them all!

    Also went through the other Zlob threads on here but cant seem to get rid of it..

    Been through the Read/Run me first and Vista cleaning procedure.
    Disabled UAC and sys restore.

    Got logs for
    SAS, Spybot, Mbam, Mgtools and SmitfraudFix. Will post combofix logs soon.

    Any help would be greatly appreciated!
     

    Attached Files:

  2. urbanphoenix

    urbanphoenix Private E-2

    Logs for SmitfraudFix and MGtools
     

    Attached Files:

  3. urbanphoenix

    urbanphoenix Private E-2

    Logs for SmitfraudFix and MGtools!
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    You did not attach the log from ComboFix. Did you have a problem running it?

    The infection you have is known to infect router hardware. If you have a router hooked up then you need to follow the instructions for your hardware and reset it to factory default settings. Normally there is a recessed push button type switch that needs to be held down for some number of seconds to do this. After resetting to factory defaults on your router, you will need to reconfigure the router for your network if you have made any changes to the default network setup.

    After doing the above, tell us how things are working.
     
  5. urbanphoenix

    urbanphoenix Private E-2

    hey chaslang,
    thanks for your reply!

    been a bit busy and i've just got the combofix logs like you requested. also, i don't use a router as i'm connected to the internet via an ethernet cable to the wall port in my uni dorm!

    i've also recently run spybot, mbam and superantiv but zeros hits although Panda activescan picked up a few things. (i've attached that log as well)

    thanks for your help!
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Panda did not find anything other than false detections of files from ComboFix and SmitFraudFix. In addition there were just notices indicating you are missing a few updates from Microsoft.

    What exact problems are you still having?
     
  7. urbanphoenix

    urbanphoenix Private E-2

    initially it was redirects and popups, but it seems to have stopped since my last post. is there anyway to confirm that its gone?
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your logs already confirmed it was gone since they were clean. ;)


    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
      • Delete the C:\combofix folder from combofix (if it exists)
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
    7. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    8. After doing the above, you should work thru the below link:
     
  9. urbanphoenix

    urbanphoenix Private E-2

  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Surf safely!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds