It appears I have Win32:DNSChanger-VJ [Trj] and it's clinging like no tomarrow

Viruses and worms
1

As stated, somehow I picked up this virus and it’s sticking like glue. It seems to be common enough, but not enough to be able to fix on my own. Oh… Apparently there is something called Win64:ZAccess-E [Rtk] now as well… Isn’t that nice? I’ve ran malwarebytes but it doesn’t seem to be interested in dealing with that.

Is there something that can be done? Not too sure where else to turn to deal with this mess

2

HiJackThis is pretty much useless for modern malware as it hasn’t been updated in years.

  • This needs further analysis by a malware removal specialist:
    Go to this topic http://forum.avast.com/index.php?topic=53253.0 for information on Logs to assist in cleaning malware. Use the information about getting and using the tools and attach the logs here, not in the LOGS topic.
3

Apologies, I appear to have missed that topic somehow.

4

looks like you have zero access rootkit :-\

malware remover is notified…

5

Once this aswMBR run is complete could you give me a fresh OTL scan with the same parameters as previously

Re-Run aswMBR

Click Scan

On completion of the scan

Click the Fix Button

http://dl.dropbox.com/u/73555776/aswMBR_Zero.png

Save the log as before and post in your next reply

6

I ran the scan, hit the fix and the system essentially rebooted. Once it got to the login screen I was unable to put in the password until I restarted again ( pressing letter keys only brought up the menu for restart/shutdown etcetera.)

Ran another scan once it came back up, nothing found now ( yay!) but it seems for some reason there are other problems now ( task manager stops responding IE won’t work. ) Was not an issue until after this but of course I can not say these are related. Additionally MB comes up with nothing.

Thanks for all the help overall, these things are so unpleasant!

7

Could I have a fresh OTL scan now as there will be hangers on to kill

Also I need to check out some registry keys

run farbar service scanner

http://i1224.photobucket.com/albums/ee362/Essexboy3/Farbar/FSS-1.jpg

Tick “All” options.
Press “Scan”.
It will create a log (FSS.txt) in the same directory the tool is run.

Please copy and paste the log to your reply.

8

As requested

9

OK repair time

First go to my Skydrive by clicking the globe under my avatar
Once there you will find a Zip folder with your name on it
Download to your desktop
Extract the Five reg files to the desktop
Right click each one in turn and select Merge
Accept the warnings

Then go to the MS site here and click the Fixit button about halfway down the page http://support.microsoft.com/kb/299357

Once done could you check the system out and ensure all is working please