Threat Database Trojans Troj/DNSChan-A

Troj/DNSChan-A

By Sumo3000 in Trojans

Threat Scorecard

Ranking: 14,319
Threat Level: 20 % (Normal)
Infected Computers: 185
First Seen: April 26, 2012
Last Seen: September 6, 2023
OS(es) Affected: Windows

The Troj/DNSChan-A Trojan is a malware infection with numerous aliases that are designed to change the infected computer's DNS (Domain Name Server) settings. These changes can be used to direct the infected computer system towards malicious web pages or to steal the victim's personal information. Most of the servers that have been associated with Troj/DNSChan-A redirects have been inactive, shut down by the FBI and other authorities. Nevetheless, this does not signify that the presence of Troj/DNSChan-A on your computer system is not dangerous.

It seems that the remaining servers associated with Troj/DNSChan-A will be shut down on July 9th of 2012, which indicates that computer systems infected with Troj/DNSChan-A will lose access to the Internet until this problem is fixed. It seems that this event has been exaggerated greatly by the news media. While more than three hundred thousand computer systems are still under the effects of Troj/DNSChan-A, this is hardly a world-wide Internet apocalypse, as some sensationalist media publications are predicting.

Is Your Computer System Infected with Troj/DNSChan-A?

The main way in which Troj/DNSChan-A can harm a computer user is by directing their web browser to malicious websites. Often, this will occur without the victim's knowledge. This is because these are often phishing domains, which are web pages that are planned to look identical to a popular website in order to trick the victim into entering their account name and password. Because of this and if you suspect that Troj/DNSChan-A is infecting your computer system, it is important to ensure that your online accounts and sensitive information are secured.

Basically, Troj/DNSChan-A does not display obvious symptoms. However, infected computer users may notice that there are some minor, abnormal problems with network activity on the infected computer system. Apart from this, often the first sign of infection is a notification from anti-virus software. However, your security software may be compromised, since Troj/DNSChan-A will often include a component designed to thwart common anti-virus programs. To ensure that your computer system is not infected with Troj/DNSChan-A, ESG security analysts recommend starting up your computer from an external drive (for example, a network-shared drive or a CD). Then, you can scan the suspected hard drive with a reliable, fully-updated, anti-malware application.

File System Details

Troj/DNSChan-A may create the following file(s):
# File Name Detections
1. \.exe

Registry Details

Troj/DNSChan-A may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

URLs

Troj/DNSChan-A may call the following URLs:

advanced-checker.com

Trending

Most Viewed

Loading...