C:\WINDOWS\virtualDNS.DLL infected with Trojan horse?

Question

Ran the Symantec Security Check Virus detection from the Yahoo Security site and the virus detecttion results came back showing 3 files infected. I then ran the AT&T Yahoo online protection anti-virus program and it came back no viruses found. How do I remove the C:\WINDOWS\virtualDNS.DLL infected with Trojan horse?

Answer 1

download the avg anti spyware from grisoft.com update nd scan

Answer 2

VIRTUALDNS.DLLDetermination: Bad

VIRTUALDNS.DLL has been determined by the Prevx database as Bad. Therefore this file is unsafe to run and should be removed using Prevx1.

We Recommend you do not delete the files listed above manually. As Malware can use the same name as a genuine file, you could inadvertantly delete a file which is genuine. Prevx1 can analyze the actual malware file on your computer so it can identify and clean up malware and protect your computer from future malware infections.

It's very easy to remove these infections just click the button below to download and run Prevx1



http://fileinfo.prevx.com/QQ120a13525467-VIRT11161465/VIRTUALDNS.DLL.html

Answer 3

Buy yourself some proper virus protection. You cannot use Microsoft Windows without it.

You can clean up the infection you have now by using SuperAntiSpyware:

http://www.SuperAntiSpyware.com

Once you're happy that the software works and has helped you, then purchase the full version to ensure continuous protection.

Answer 4

I suggest that you try to carryout system restore to a day previous to the day when there was no virus or any problems. It may be a few weeks or months back. You have to decide the date. Detailed instructions are posted at http://fixit.in/systemrestore.html
The problem is likely to be solved. Then,You insatll a standard antivirus soft ware such as Norton, AVG , Avast ( free antivirus software and Ad-aware, Ewido ( free spyware removers). You can download free softwares at
http://fixit.in/antivirus.html and http://fixit.in/spywareremover.html

Answer 5

This procedure works for all Malware. Use any AntiVirus or AntiSpy program you choose.

Ewido is the best Trojan removing programs available. The AdAware SE is also good since most adware is installed by Trojans. You do not need to use it for this infection but, it wouldn't hurt.

Download and Update Ewido (now called the AVG Antispyware). Do not run:

http://www.ewido.net/en/download/...

Download AdAware SE and update. Do the setup. Do not run:

http://www.filehippo.com/download_ad-aware/

AdAware SE Setup:

1. Select "use custom scanning options" then select "customize". Make sure the following options are enabled: "scan within archives," "scan active processes," "scan registry," "deep scan registry," "scan my IE favorites for banned URLs," "scan my Hosts file."

2. Select the "tweak" option. Under "scanning engine," make sure "unload recognized processes and modules during scan" is enabled. Enable "scan registry for all users instead of current users."

3. Under "cleaning engine" turn on "always try to unload modules…," "during removal unload explorer and IE if necessary," "let windows remove files in use at next restart," and "delete quarantined items after restoring."

4. Use the "select drives and folders to scan" option to ensure that your entire hard drive is scanned (if you have more than one hard drive, scan all of them (of course, do not include floppy and CD/DVD).


TEMPORARILY SHOW HIDDEN FILES AND FOLDERS.

1. Click Start, and then click Control Panel.

2. Click Appearance and Themes, and then click Folder Options.

3. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.

IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


EMPTY INTERNET EXPLORER BROWSER CACHE:

1. On the Internet Explorer Tools menu, click Internet Options.

2. On the General tab, in the Temporary Internet Files section, click the Delete Files button. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK. Click OK again.

RESTART IN SAFE MODE:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



START THE SCAN WITH YOUR ANTI-VIRUS OR ANTI-SPYWARE PROGRAM.


When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode. DON'T FORGET TO RESET HIDDEN FILES AND FOLDERS.


NEW RESTORE POINT.

The RESTORE POINTS may be infected with the Malware and cannot be used.

HERE'S HOW:

1. Click Start, and then click Control Panel.

2. Click Performance and Maintenance, click System, and then click on the System Restore tab.

3. Select the Turn Off System Restore check box, click Apply, then restart your computer.

4. Return to the System Restore Tab and turn System Restore back on.


TO SET A NEW RESTORE POINT:

1. Click the Start button.

2. Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3. Choose Create a restore point, and then click Next.

4. In the Restore point description box, type a name for your restore point, and then click Next.

5. Click OK.

NOTE: If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the box. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.


ADDITION INFORMATION ABOUT TROJANS:

There are Trojans that fall into the Smitfraud family. These require the use of a specialized program for removal. Here are two sites that specialize in removing these:

http://www.internetinspiration.co.uk/roguefix.htm

http://siri.urz.free.fr/Fix/SmitfraudFix_En.php

Answer 6

you recognize what? It amazes me what number of human beings purchase some thing those valueless turds in D.C. tells them. My get at the same time's more beneficial than yours. stupid severe college drama. at the same time as your bickering they are pushing their agenda and they are all following it. Ever heard of the North American Union? Our cutting-edge president were on condition that ball rolling. actual identity act is going into result next 3 hundred and sixty 5 days until eventually all of us step up and do some thing. until eventually you basically like the conception of having an rfid chip on your drivers licenses. And Hillary Clinton is the nearest element to a Communist i have seen in a lengthy time period. interior the right this will be a Fascist u . s . until eventually all and sundry take a stand and end being a divided u . s .. that's exactly what all of you're taking section in everytime this kind of stupid questions comes up in this website.