InterviewSolution
Saved Bookmarks
| 1. |
Solve : New trojan in mass DNS hijack? |
|
Answer» Researchers have identified a new trojan that can tamper with a wide array of devices on a local network, an exploit that sends them to impostor websites even if they are hardened MACHINES that are fully patched or run non-Windows operating systems. LinkI dealt with this exact rootkit a few days ago. It's a nasty bugger!! I'm HIGHLY suspicious it is a new variation of the TDSSSERV rootkit which is wrecking MANY a PC. Here is a shortened version of what to do. Note I had to use The Avenger to finally delete the driver. c:\windows\system32\drivers\ndisprot.sys <- Delete bad driver Then use the IPCONFIG /flushdns command and possibly even reset your router. Now use malwarebytes and then your antivirus to remove the REMAINING infections. |
|