Cheat Engine

the the the · Posted: Thu Jul 16, 2009 8:01 pm Post subject: DNS Changer Virus

Its pissing me off, and I don't know if its a virus or a trojan. I can't reply back to my old thread because I made the last post (I think), and now I know the problem.

Should I run combofix? (.org)
How do I solve this

pkyourface · Posted: Thu Jul 16, 2009 8:05 pm Post subject:

First thing you should always do is run Malwarebytes Anti-Malware then if that doesn't work then attempt to remove it usign other methods/programs.

the the the · Posted: Thu Jul 16, 2009 9:50 pm Post subject:

Didn't work, I'll try combo fix now
cf didnt work, now google says "I am alive!"

Kevin Rudd P.M. · Posted: Fri Jul 17, 2009 1:48 am Post subject:

ipconfig /flushdns
ipconfig /registerdns
or check your HOSTS file (system32\drivers\etc) to see if something has edited it.
Might have something like xxx.xx.xx.xxx www.google.com which could cause the problem you had.

Not sure what else you could try :S Good luck.

K, Alcohol · Posted: Fri Jul 17, 2009 6:12 am Post subject:

Hijackthis.

the the the · Posted: Fri Jul 17, 2009 8:01 pm Post subject:

Hosts

K, Alcohol · Posted: Sat Jul 18, 2009 4:45 am Post subject:

C:\WINDOWS\system32\kwcaptur.exe

You cannot find kwcaptur.exe in google O_O
This doesn't sound trustworthy, but maybe is related to KidsWatch's KWTray.exe :>
I didn't found anything other suspicious in the log. Check this site too for the log analyze.

the the the · Posted: Sat Jul 18, 2009 10:12 pm Post subject:

Trow · Posted: Tue Jul 21, 2009 7:24 am Post subject:

the the the · Posted: Tue Jul 21, 2009 11:51 am Post subject:

it still is happening now and its worse then before, now its almost every other website I go to, but the ipconfig thing helped A LOT (for about a day) then it got really bad, I can barely open a different website without it redirecting Evil or Very Mad

edit: and it doesnt happen to one site, it is random, like for a while it will be mediafire, then all of the sudden it changes to a different site I want to go on and mediafire works

EDIT: FIREFOX DOESNT DO IT, OPERA 10 DOES Evil or Very Mad

Thanks for all your help, those of you who did

R.I.P · Posted: Fri Jul 24, 2009 6:11 am Post subject:

Rip to you're. Files ps I'm on my touch so typeing is like dying

Aasaaaaaaajjsuysrwruigcj god dammit I'm so pissed off ATM this exact thing hapend to me

The only known fix is to format all your hdds at once

Don't keep anything exept data files like .doc and so on

Saifallofjmr · Posted: Fri Jul 24, 2009 7:51 am Post subject:

tbh this is super easy to fix, there is no real reason to reformat at a simple virus....

~Pineapple! · Posted: Fri Jul 24, 2009 8:21 am Post subject:

Saifallofjmr · Posted: Fri Jul 24, 2009 8:59 am Post subject:

Download the program called "HiJackThis" and post a log.

This virus is just a simple registry edit to a proxy that changes your DNS to resolve IPs to weird places.

Also while your at it do this : http://www.simpledns.com/kb.aspx?kbid=1089

and open your cmd and type in (after that link): ipconfig /flushdns

R.I.P · Posted: Fri Jul 24, 2009 7:43 pm Post subject:

he said he has allready tried HijckThis