Home / Spyware Encyclopedia / Trojan.DNSChanger << Back

Recommendation to Automatically remove Trojan.DNSChanger


Our products can remove Trojan.DNSChanger and thousands of other Virus and Spyware automatically and instantly.

Trojan.DNSChanger Details


  • Category Trojan
  • Discovered 2/22/2008 3:07:00 PM
  • Modified 10/18/2024 11:19:11 AM
  • Threat Level Critical
  • Category Description
    A destructive program that masquerades as a benign application. Unlike viruses, Trojan horses do not replicate themselves but they can be just as destructive. One of the most insidious types of Trojan horse is a program that claims to rid your computer of viruses but instead introduces viruses onto your computer.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
3b73758f.exe 121182 3.1.1.0b3ea5401a71042b8284590555f368b18 
58502344.EXE 276992 2.0.1.1102e7f0260ac76b90309a6f5d28b913d41 
55425795.EXE 262144 2.0.1.11019b7f36e167b552047bc92524b273bc9 
6BF73D26.EXE 262144 2.0.1.110035db6b253c61d3f163957043c2fb2ea 
10A4281D.EXE 274944 2.0.1.105c5967557f83f5a4c091c1011531ff25d 
fc642921.dll 10752 1.0.0.1ff9d771247db6a44580516e15a5aeaf8 
CB83DDB3.DLL 11264 1.0.0.1c666c18cd3a03723673839d62586b2e8 
A32A50DF.EXE 18432 1.0.0.1bc0602c513bb87b54bfb2c24852b51e5 
D03BFA49.DLL 11264 1.0.0.10ab7f01df4a242467bc905f8750b69e5 
5AF8413B.DLL 15872 1, 0, 0, 1fbfeef25f9b5f1c1b5dc57e26671361f 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\\"kdird.exe"
..\Software\Microsoft\Windows\CurrentVersion\\"kdfpd.exe"
..\Software\Microsoft\Windows\CurrentVersion\\"kdaac.exe"
..\Software\Microsoft\Windows\CurrentVersion\\"kdzic.exe"
..\Software\Microsoft\Windows\CurrentVersion\\"kdeju.exe"
..\Software\Microsoft\Windows\CurrentVersion\\"kdzac.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"%WIN.SYS32%\kdzac.exe"\"%WIN.SYS32%\kdzac.exe"
..\Software\Microsoft\Windows\CurrentVersion\\"kdknz.exe"
..\Software\Microsoft\Windows\CurrentVersion\\"kdycz.exe"
..\Software\Microsoft\Windows\CurrentVersion\\"dpid"

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware