[27062] in resnet
Re: Trojan DNS Changer Virus
daemon@ATHENA.MIT.EDU (Randall K. Kouns)
Fri Dec 2 08:22:54 2011
X-Barracuda-Envelope-From: kounsra@earlham.edu
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
Message-ID: <67557041-1124-4925-a957-cd2ef696aacd@esslama.earlham.edu>
Date: Fri, 2 Dec 2011 08:21:08 -0500
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Randall K. Kouns" <kounsra@earlham.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <4ED82F87.4030401@ucsc.edu>
We are seeing the same thing on ONE STUDENT MACHINE... the cleaning tool has REPORTED it works only to have the darn thing come back... this has been on a macbook pro...thankfully this is the only one we have seen.
----- Original Message -----
From: "Carla Rounds" <cjrounds@UCSC.EDU>
To: RESNET-L@LISTSERV.ND.EDU
Sent: Thursday, December 1, 2011 8:53:11 PM
Subject: Trojan DNS Changer Virus
Hi Guys,
I need some guidance. We have attempted to clean two of many systems
infected with the Trojan DNSChanger Virus only to have them show up on
the infected list again. We are using our normal arsenal of tools
(malware bytes, super anti-spyware, combo-fix,) and I also found some
instructions on line on how to remove this virus (PC:
http://www.myantispyware.com/2007/11/06/how-to-remove-trojan-dnschanger/
, MAC: http://www.macworld.com/article/60823/2007/10/trojanhorse.html )
as well as a tool
(http://www.macupdate.com/app/mac/26652/dnschanger-removal-tool ).
Unfortunately none of these methods are working. Before we start
resorting to a full system wipe and reinstall I wanted to reach out to
see if anyone has or knows of a good fix for this virus?
--
Carla Rounds
University of California, Santa Cruz
Santa Cruz, California 95064
cjrounds@ucsc.edu
(831) 459-5757
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
