TROJ_DNSCHANG.XT
TROJ_DNSCHANG.XT is a dangerous Trojan that spreads via malicious websites. On infiltrating a system, TROJ_DNSCHANG.XT will connect to a remote URL and obtain the IP addresses that it will later set as the new DNS server addresses. This action will allow a remote hacker to monitor the internet activities of the victim. TROJ_DNSCHANG.XT is a privacy threat that should not remain on an infected PC. Remove TROJ_DNSCHANG.XT will a reliable anti-spyware program upon detection.
File System Details
TROJ_DNSCHANG.XT may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Program Files%\Common Files\{random filename}.exe |
Registry Details
TROJ_DNSCHANG.XT may create the following registry entry or registry entries:
Uninstall\DnsUpdater1
NoModify=1
Uninstall\DnsUpdater1\if1
DnsRecords={hex values}
Uninstall\DnsUpdater1 DisplayName=DNS Changer (remove only)
UninstallString=%Program Files%\Common Files{malware filename}.exe
DnsFile={BLOCKED}.{BLOCKED}.97.20 {BLOCKED}.{BLOCKED}.97.21
DhcpEnabled=1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Size=
NoRepair=1
(Default)={Ethernet Adapter}
