Win32:DNSChanger-VT [Trj]

Please help…
Have been struggling now for a week, trying to get rid of this Malware Trojan Horse using program
Avast Home 4.8. Avast cannot move the detected file to chest & will not delete either. Everytime I choose delete it pops up with a new file…:

  1. file name: C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Temporary Internet
    Files\Content.IE5\WA8OKTMT\w[1].bin
    -action delete-
  2. file name: C:\WINDOWS\system32\tmp0_574238642846.bk
    -action delete-
  3. file name: C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Temporary Internet Files\Content.IE5\99HQQBS3\w[1].bin
    etc…etc…

When I choose option Move to Chest Avast tells me that it cannot access file and so cannot process file!

Malware: Win32:DNSChanger-VT [trj]
VPS version: 080620-0, 20-06-2008

I have done about 5 or 6 scheduled boot time scans. The computer seems to be fine for an hour, then starts again with the same thing… >:(
During the scheduled boot time scan, the file cannot be moved to chest either…only option that works is
“delete all”.

Please help, someone…I don’t know how to get rid of this. Should I use any Spyware?
Or maybe the Avast Antirootkit?
Thanks in advance…
Bennito

Hi Bennito,

Yes, running a few anti-spyware scans would be a good idea:

Ad-Aware Free
Spybot Search & Destroy
SUPERAntiSpyware Free

If still having problems, post a HijackThis! log.

Hi Bennito,

For removal see this threat report:
http://www.threatexpert.com/report.aspx?uid=0e0ae14f-e6d0-4ea5-8d9e-997eceac17c5

polonus