Solved

DUN Settings keep changing after a virus attack

Posted on 2004-04-19
3
309 Views
Last Modified: 2010-04-11
I have just cleaned up virus Trojan.ByteVerify from a client after a great deal of digging and rebooted. Subsequent scans using Norton show no virus. However, his DUN Settings keep replicating and replacing the proper number/login with a premium rate one. The Original one then appears as _OLD

How do I find and kill the payload the virus has left behind? I am planning to run a spyware killer as well as soon as I get back to his desk.

I'm no expert on Windows 2000 SP4 so any help would be good.
0
Comment
Question by:asparak
  • 2
3 Comments
 
LVL 5

Accepted Solution

by:
makana earned 125 total points
ID: 10866802
This is very simple and easy. Forget Norton(!). Run any online scan:
download this CWshredder and Run it. Update it regularly.

http://www.spywareinfo.com/~merijn/downloads.html

makana
A+ MCP Cisco Acad Sem-1
0
 
LVL 1

Author Comment

by:asparak
ID: 10867573
Ran Ad-Aware and it picked it up. The payload of the variant G Trojan seems to be coulomb Dialer
0
 
LVL 5

Expert Comment

by:makana
ID: 10871599
Thank you very much ! I hope my suggestions helped you.

makana
A+ MCP Cisco Acad Sem-1
0

Featured Post

Don't miss ATEN at NAB Show April 24-27!

Visit ATEN at NAB Show to learn how our "Seamlessly Entertaining" solutions deliver fast, precise video streaming without delays for the broadcasting and media environment. ATEN will showcase its 16x16 Modular Matrix Switch (VM1600) and KVM Over IP Solution (KE6900 series).

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Telepresence on backup 3 54
Diagnosing Ethernet network problems on Windows 2012 R2? 3 87
tamper proof asset tags - benefits 4 56
Can't access router with user and pass 10 74
Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question