Win32.DNSChanger and Zlob.DNSChanger won't go away.

[Jonas Oldacre]

Oops! I just looked back over your last instructions, and realized that I was supposed to reboot first, then do the Java, then reboot again. I forgot the first reboot! Sorry, beynac, I messed up. Lemme know if you need me to redo that whole thing. Sorry.

[beynac]

The Java is now showing correctly in the HijackThis log which confirms that we've fixed that registry key. The lack of the first reboot shouldn't matter. I wanted that to give me a trail if things didn't work out. Rebooting before running the batch was important because it shows me that the permissions didn't revert during a reboot. It looks as if we've done it.

-------------------------------------------------

We need to clear out the programmes we've been using to clean up your computer. They are not suitable for general malware removal and could cause damage if used inappropriately.

• Double click OTMoveIt.exe to launch the program.
• Click on the CleanUp! button.
• OTMoveIt will download a list from the Internet, if your firewall or other defensive programmes alerts you, allow it access.
• You will be prompted to the allow clean up procedure, click Yes
• When finished exit out of OTMoveIt
• Now delete OTMoveIt.exe

You also need to delete IceSword and runperm.bat.

-----------------------------------------------

Flush System Restore

Now that the computer is clean, we need to 'flush' your System Restore points and create a new clean one.

Turn OFF System Restore.

• Click on Start
• Right-click My Computer
• Click Properties
• Click the System Restore tab
• Check Turn off System Restore
• Click Apply, and then click OK

Restart your computer

Turn ON System Restore.

• Click on Start
• Right-click My Computer
• Click Properties
• Click the System Restore tab
• Uncheck Turn off System Restore
• Click Apply, and then click OK

--------------------------------------

Have a look at this article, How to prevent Malware by miekiemoes, which gives some very good advice.

Please let me know whether you have any questions.

[Jonas Oldacre]

Did as requested. All done!
Ahhhhhhhhhhhhhhhhhhhhhh...
Thank you beynac. I certainly couldn't have done any of this without you and your friends' help. So thank you, one and all.
And no, you answered the only question I had -- was going to ask a good reference on Malware prevention, and you beat me to the punch!
So thanks again, all of you and thank you most especially beynac for talking me through this whole snafu. Take care, all!

[beynac]

You're welcome. I'm glad that we could help.

[Elrond]

This topic is now closed. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.