DNS changes automatically

Moderators: Divesh, Gurdip Singh

DNS changes automatically

Postby Apurv » Tue Dec 23, 2008 8:32 am

I faced problem where DNS IP in Network card properties was automatically changing to 85.*.*.* ( Ukrain IP)

It is a rootkit problem. It creates superhidden file

%systemroot%\system32\drivers\msqpdxpaxloeqh.sys

It also creates entry at

KEY=HKLM\Software|msqpdx\injector

Name= services.exe Data=msqpdxdfswfh35g2.dll
Apurv
 
Posts: 6
Joined: Fri Dec 28, 2007 7:14 pm

Postby axel » Tue Dec 23, 2008 1:47 pm

This seems to be a Packed.Win32.krap.d
Please see at
http://forum.kaspersky.com/index.php?showtopic=95680

Download the stated combofix.exe and run it.
After the run, download latest MWAV and start it, check all options and run it.

This should remove the issue.
Regards,
Axel

DA&S Technology, Germany
axel
 
Posts: 58
Joined: Wed Jan 30, 2008 4:24 pm
Location: Germany


Return to Virus-related Issues

Who is online

Users browsing this forum: No registered users and 11 guests

cron