?
Solved

DUN Settings keep changing after a virus attack

Posted on 2004-04-19
3
Medium Priority
?
324 Views
Last Modified: 2010-04-11
I have just cleaned up virus Trojan.ByteVerify from a client after a great deal of digging and rebooted. Subsequent scans using Norton show no virus. However, his DUN Settings keep replicating and replacing the proper number/login with a premium rate one. The Original one then appears as _OLD

How do I find and kill the payload the virus has left behind? I am planning to run a spyware killer as well as soon as I get back to his desk.

I'm no expert on Windows 2000 SP4 so any help would be good.
0
Comment
Question by:asparak
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 5

Accepted Solution

by:
makana earned 375 total points
ID: 10866802
This is very simple and easy. Forget Norton(!). Run any online scan:
download this CWshredder and Run it. Update it regularly.

http://www.spywareinfo.com/~merijn/downloads.html

makana
A+ MCP Cisco Acad Sem-1
0
 
LVL 1

Author Comment

by:asparak
ID: 10867573
Ran Ad-Aware and it picked it up. The payload of the variant G Trojan seems to be coulomb Dialer
0
 
LVL 5

Expert Comment

by:makana
ID: 10871599
Thank you very much ! I hope my suggestions helped you.

makana
A+ MCP Cisco Acad Sem-1
0

Featured Post

Will your db performance match your db growth?

In Percona’s white paper “Performance at Scale: Keeping Your Database on Its Toes,” we take a high-level approach to what you need to think about when planning for database scalability.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
This program is used to assist in finding and resolving common problems with wireless connections.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question