Windows Error Code & Zlob.DNSChanger

When ever I try to get into Windows Update I get the error code

[Error number: 0x80072EE7]

I have tried everything on the website and nothings worked however when I
run Spybot (which I see a few people do on this site) it finds the following

Zlob.DNSChanger: [SBI $041D1396] TCP/IP Settings #1 (Undefined) (Registry
change, fixed)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip\Parameters\DhcpNameServer=208.67.220.220, 208.67.222.222

Zlob.DNSChanger: [SBI $041D1396] TCP/IP Settings #2 (Undefined) (Registry
change, fixed)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip\Parameters\Interfaces\{F085D028-A677-479B-B356-CB7CCA345C02}\DhcpNameServer=208.67.220.220,208.67 .222.222

When you look in the registry I can see the two IPs

85.255.114.13 , 85.255.112.91

I'm not sure if they are relevant to my issue or not, everything else on my
system is working fine but I am very worried whats going on in the background
?

Spybot finds it and gets rid but everytime I reboot my system its back again

I have run Windows One Care for ages and its never found anything even to now

Any clues anyone ?

Thank you

You've got a Wareout infection. Spybot can't fix it nor can any other
anti-spyware application. You need help from an expert in such matters.
Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

KF_U2 wrote:
> When ever I try to get into Windows Update I get the error code
>
> [Error number: 0x80072EE7]
>
> I have tried everything on the website and nothings worked however when I
> run Spybot (which I see a few people do on this site) it finds the
> following
>
> Zlob.DNSChanger: [SBI $041D1396] TCP/IP Settings #1 (Undefined) (Registry
> change, fixed)
>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip\Parameters\DhcpNameServer=208.67.220.220, 208.67.222.222
>
> Zlob.DNSChanger: [SBI $041D1396] TCP/IP Settings #2 (Undefined) (Registry
> change, fixed)
>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip\Parameters\Interfaces\{F085D028-A677-479B-B356-CB7CCA345C02}\DhcpNameServer=208.67.220.220,208.67 .222.222
>
> When you look in the registry I can see the two IPs
>
> 85.255.114.13 , 85.255.112.91
>
> I'm not sure if they are relevant to my issue or not, everything else on
> my
> system is working fine but I am very worried whats going on in the
> background ?
>
> Spybot finds it and gets rid but everytime I reboot my system its back
> again
>
> I have run Windows One Care for ages and its never found anything even to
> now
>
> Any clues anyone ?
>
> Thank you