On Nov 28, 11:34*pm, CelloBob <CelloBob.3jl...@DoNotSpam.com> wrote:
> Hi, All,
>
> I have *been banging my head against the wall with this problem for
> days. I was able to remove the trojan DNS changes - but as soon as I
> would reboot the computer, the registry lines that had the offending DNS
> data would already be back. The cleaner program I was using was removing
> the bad entries - I finally checked in the registry before the reboot to
> make sure. I was getting re-infected.
>
> Here's what the problem turned out to be for me. The bad DNS entries
> had been written into my Linksys wireless router, and as a result as
> soon as my machine would connect to the internet, the bad DNS settings
> were back.
>
> If you have a Linksys router and you have not changed the router
> password from the default password ("admin") you probably have this
> problem. Log onto your router using the IP address that is in your
> instructions - it's probablyhttp://192.168.1.1/. Login will be "admin"
> user ID with a password of "admin". Once you are in, go change your
> password first. Then go into the "settings" screen and scroll down to
> the bottom. There are three lines for "static DNS". Change all of the
> numbers in those lines (on the right side of the page) to "0" and then
> save the settings. Exit the router setup and then re-try windows update.
> If it doesn't work, run the Malware remover program one more time, and
> then you should be OK.
>
> I found this in an article - it's a trojan from Ukraine that searches
> for routers with the default password, and then installs it's own DNS to
> force you through their servers. The infection isn't really on the PC -
> it's on the router.
>
> --
> CelloBob
> ------------------------------------------------------------------------
> CelloBob's Profile:http://forums.techarena.in/members/cellobob.htm
> View this thread:http://forums.techarena.in/windows-update/1061436.htm
>
> http://forums.techarena.in
Hello Cello Bob!
192. is Midlle East! is it Constant Ip or just Mask IP?
First! go to your internet Options! Change Security Levels!
second! Manage your Add-Ons! look For the Script of instaled Adds!
Probably There instaled ActiveX !!! --- Then Remove IT! Manually! it
is Malware or Adware nor Trojan!
or callme +971501422004