Content
DNSChanger.f.gen
- Type
- Trojan
- SubType
- Generic
- Discovery Date
- 03/28/2008
- Length
- Minimum DAT
- 5262 (03/28/2008)
- Updated DAT
- 5761 (10/04/2009)
- Minimum Engine
- 5.2.00
- Description Added
- 03/28/2008
- Description Modified
- 10/07/2008 2:44 AM (PT)
Tab Navigation
Characteristics
This is a Generic Detection for DNSChanger.f trojan/rootkits.
For further details please see the DNSChanger.f VIL here:
http://vil.nai.com/vil/content/v_141841.htm
Symptoms
For further details please see the DNSChanger.f VIL here:
Method of Infection
For further details please see the DNSChanger.f VIL here:
Removal
All Users:
Use current engine and DAT files for detection and removal.
Modifications made to the system Registry and/or INI files for the purposes of hooking system startup, will be successfully removed if cleaning with the recommended engine and DAT combination (or higher).
Variants
Variants
N/A
All Information
Overview -
This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc. The main objective of this trojan is to change the default DNS entries to its own preferred DNS server.
Characteristics
Characteristics -
This is a Generic Detection for DNSChanger.f trojan/rootkits.
For further details please see the DNSChanger.f VIL here:
http://vil.nai.com/vil/content/v_141841.htm
Symptoms
Symptoms -
For further details please see the DNSChanger.f VIL here:
http://vil.nai.com/vil/content/v_141841.htm
Method of Infection
Method of Infection -
For further details please see the DNSChanger.f VIL here:
http://vil.nai.com/vil/content/v_141841.htm
Removal -
Removal -
All Users:
Use current engine and DAT files for detection and removal.
Modifications made to the system Registry and/or INI files for the purposes of hooking system startup, will be successfully removed if cleaning with the recommended engine and DAT combination (or higher).
Additional Windows ME/XP removal considerations
Variants
Variants -
N/A