zlob DNS Changer

gszittrain · Mar 15, 2009

Hello,

My wife's PC began showing Vimax "enlargement" ads a few months ago, so we ran Spybot and found the Zlob DNS Changer malware entries. AntiMalwarebytes also has found the entries...and both programs say they successfully delete the malware, but it reappears immediately. She has no idea where it came from.

Please help us. We followed the cleanup instructions--see the attachments.

Thank you so much.

gszittrain · Mar 15, 2009

Also attached the SuperAntiSpyware logs...

chaslang · Mar 17, 2009

Welcome to Major Geeks!

The infection you have is known to infect router hardware. If you have a router hooked up then you need to follow the instructions for your hardware and reset it to factory default settings. Normally there is a recessed push button type switch that needs to be held down for some number of seconds to do this. After resetting to factory defaults on your router, you will need to reconfigure the router for your network if you have made any changes to the default network setup.

Then you should run Malwarebytes again and immediately reboot. Then run it one more time just to be sure it did not come back.

Let us know if this helps.

Log in or Sign up

zlob DNS Changer

gszittrain Private E-2

Attached Files:

MGlogs.zip

ComboFix.txt

mbam-log-2009-03-14 (20-15-47).txt

gszittrain Private E-2

Attached Files:

SUPERAntiSpyware Scan Log - 03-14-2009 - 20-01-36.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member