My Anti Spyware

How to remove trojan dns/changer

Trojan DNSChanger (both Windows and Mac versions) hijacking your DNS settings and then redirecting you to malicious websites, stealing personal identities, killing your dog and even crank-calling your grandmother with naughty messages.

Read more A little bit of de-fudding on the DNS changing Trojan

The HijackThis shows trojan dns/changer:

O17 - HKLM\System\CCS\Services\Tcpip\..\{1F5A3FA3-74FB-41DD-AD5B-F8C6C8B3D0EC}: NameServer = 85.255.116.86,85.255.112.157

For remove the infection, please follow these instructions step by step:

Please download FixWareout.
Save it to your desktop and run it. Click Next, then Install, then make sure “Run fixit” is checked and click Finish. The fix will begin, follow the prompts.
You will be asked to reboot your computer, please do so. Your system may take longer than usual to load; this is normal.

At the end of the fix, you may need to restart your computer again.

Open C:\fixwareout\report.txt, if Fixwareout found infection you found some lines:
…
KEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
“nameserver”=”85.255.116.86 85.255.112.157″ value cleared.
…

It`s ok.

Also this trojan can download another malware, for check you PC and remove scam, download and run Smitfraudfix

Your computer should now be free of the infection.

If you are still having problems with spyware after completing these instructions, then please follow the steps outlined in the topic linked below Spyware removal - Read Before Posting.