Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Help I have a DNSCHANGER TROJAN


  • Please log in to reply

#16
Javamonkey

Javamonkey

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 120 posts
OK I removed the files. I also ran another report let me know if you want me to post it.
  • 0

Advertisements


#17
Javamonkey

Javamonkey

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 120 posts
OK I removed the files. I also ran another report let me know if you want me to post it.
  • 0

#18
Javamonkey

Javamonkey

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 120 posts
OK I removed the files. I also ran another report let me know if you want me to post it.
  • 0

#19
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

No need.  How is it running now?  Do we need to run more scans?


  • 0

#20
Javamonkey

Javamonkey

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 120 posts
Still seeing Ralinklinuxclient and Samsung TV pop up in the network in the file manager. I think we should run some more things
  • 0

#21
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

OK.

 

Open an elevated command prompt (admin)

 

and type:

 

arp -a

 

Do you see any dynamic entries other than your router?


  • 0

#22
Javamonkey

Javamonkey

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 120 posts
Ok I get only one dynamic and the rest static
  • 0

#23
Javamonkey

Javamonkey

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 120 posts
I reset my router with the CD and renamed the wifi network. I have not connected any thing but I am still seeing Ralinklinuxclient, Full - Ford and Samsung-TV show up on the network in file explorer. I read this blog could this be the answer? What are your thoughts?

https://answers.micr...f0-96bba84ae896
  • 0

#24
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

That's probably it.  Can you turn off the WCNCSVC service?

 

You can do it from your elevated command prompt (admin) by typing:

sc  stop  WCNCSVC

hit Enter

sc  config  WCNCSVC  start=  manual

then hit Enter.


  • 0

#25
Javamonkey

Javamonkey

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 120 posts
Ok I did that
  • 0

Advertisements


#26
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

Does it still show the strangers in Network Neighborhood?


  • 0

#27
Javamonkey

Javamonkey

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 120 posts
I am still seeing the Ralinklinuxclient
  • 0

#28
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

Did you reboot?


  • 0

#29
Javamonkey

Javamonkey

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 120 posts
Shoot I'll have to do that later when I get home.
  • 0

#30
Javamonkey

Javamonkey

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 120 posts
Ok rebooted and saw Samsung-TV in devices. Re-entered your commands and received an Invalid start= field error. Not sure what I did wrong?
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP