Content

DNSChanger.f.gen

Type
Trojan
SubType
Generic
Discovery Date
03/28/2008
Length
Minimum DAT
5262 (03/28/2008)
Updated DAT
5761 (10/04/2009)
Minimum Engine
5.2.00
Description Added
03/28/2008
Description Modified
10/07/2008 2:44 AM (PT)
Risk Assessment
Corporate User
Low
Home User
Low

Tab Navigation

Characteristics

This is a Generic Detection for DNSChanger.f trojan/rootkits.

For further details please see the DNSChanger.f VIL here:

http://vil.nai.com/vil/content/v_141841.htm

 

Symptoms

For further details please see the DNSChanger.f VIL here:

http://vil.nai.com/vil/content/v_141841.htm

Method of Infection

For further details please see the DNSChanger.f VIL here:

http://vil.nai.com/vil/content/v_141841.htm

Removal

All Users:
Use current engine and DAT files for detection and removal.

Modifications made to the system Registry and/or INI files for the purposes of hooking system startup, will be successfully removed if cleaning with the recommended engine and DAT combination (or higher).

Additional Windows ME/XP removal considerations

Variants

Variants

    N/A

All Information

Overview -

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.  The main objective of this trojan is to change the default DNS entries to its own preferred DNS server.

Characteristics

Characteristics -

This is a Generic Detection for DNSChanger.f trojan/rootkits.

For further details please see the DNSChanger.f VIL here:

http://vil.nai.com/vil/content/v_141841.htm

 

Symptoms

Symptoms -

For further details please see the DNSChanger.f VIL here:

http://vil.nai.com/vil/content/v_141841.htm

Method of Infection

Method of Infection -

For further details please see the DNSChanger.f VIL here:

http://vil.nai.com/vil/content/v_141841.htm

Removal -

Removal -

All Users:
Use current engine and DAT files for detection and removal.

Modifications made to the system Registry and/or INI files for the purposes of hooking system startup, will be successfully removed if cleaning with the recommended engine and DAT combination (or higher).

Additional Windows ME/XP removal considerations

Variants

Variants -

    N/A