Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

DUN Settings keep changing after a virus attack

Posted on 2004-04-19
3
Medium Priority
?
330 Views
Last Modified: 2010-04-11
I have just cleaned up virus Trojan.ByteVerify from a client after a great deal of digging and rebooted. Subsequent scans using Norton show no virus. However, his DUN Settings keep replicating and replacing the proper number/login with a premium rate one. The Original one then appears as _OLD

How do I find and kill the payload the virus has left behind? I am planning to run a spyware killer as well as soon as I get back to his desk.

I'm no expert on Windows 2000 SP4 so any help would be good.
0
Comment
Question by:asparak
  • 2
3 Comments
 
LVL 5

Accepted Solution

by:
makana earned 375 total points
ID: 10866802
This is very simple and easy. Forget Norton(!). Run any online scan:
download this CWshredder and Run it. Update it regularly.

http://www.spywareinfo.com/~merijn/downloads.html

makana
A+ MCP Cisco Acad Sem-1
0
 
LVL 1

Author Comment

by:asparak
ID: 10867573
Ran Ad-Aware and it picked it up. The payload of the variant G Trojan seems to be coulomb Dialer
0
 
LVL 5

Expert Comment

by:makana
ID: 10871599
Thank you very much ! I hope my suggestions helped you.

makana
A+ MCP Cisco Acad Sem-1
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question