Mohammad

ahhh Since nobody is willing to respond all i can say is: Thanks to Malwarebytes for being generous.

Hello Today after i saw the update sugestion i installed the new version 2.1.8.1057 eventhough i have never paid for a license key after the update in the top right corner of the program (my account) i can see a license key with lifetime duration(!) How is that possible? i've never been a premium user. Did they misplaced some one else's license key for me???

hello Excuse me i know this isn't the rightway to report my issue but since i found Emjay's problem exactly the reverse case of my condition i've decided to report it here. Today after i saw the update sugestion i installed the new version 2.1.8.1057 eventhough i have never paid for a license key after the update in the top right corner of the program (my account) i can see a license key with lifetime duration(!) How is that possible? i've never been a premium user. Did they misplaced some one else's license key for me???

You can close this topic, i'm done. thank you.

Hi kevin i did a firmware update with the same version i had ( at least it's better than nothing). and i think i'm done with this,nothing further can be done. Thanks for your help and assistance.

I've checked d-link's website to download the latest firmware of my device but unfortunately it wasn't any newer version than the one i'm using currently (which is last modified on 2013/8/11) and therefore i couldn't update the firmware. Fixlog.txt

Hi kevin, today i checked the setting and saw it has changed again to this DNS server : 104.236.2.237 But this time i don't receive any kind of warnings or block messages by MBAM. If i update the firmware of my router is it gonna be ok? Thanks.

Hi therajs, if you have any kind of infection you must first report your problem by creating a new topic a bout it and then wait patiently for the advisors to help you. For more infomation go to this page: https://forums.malwarebytes.org/index.php?/topic/9573-im-infected-what-do-i-do-now/

Kevin i did the above instructions carefuly to completly reset my router with new passwords. I will tell you if the DNS got infected again.... Thanks.

Hi Kevin, today I checked my router's configuration page DNS section and I saw it's changed again to 146.185.239.240 the malicious IP. even though I've changed the default password as you have told me but still the infection continues. Take a look at this : Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 4/1/2015 Scan Time: 9:43:30 AM Logfile: Administrator: Yes Version: 2.00.4.1028 Malware Database: v2015.04.01.03 Rootkit Database: v2015.03.31.01 License: Premium Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Enabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: M Scan Type: Threat Scan Result: Completed Objects Scanned: 329880 Time Elapsed: 11 min, 35 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end) see MBAM found nothing.

Paypal website denies me accessing it's website to consider a donation. (That's what i mean)

Thank you very much kevin for assisting me all the way with clear instructions and i think it's now ok to close this out. And the only thing i am not satisfied with, is the paypal access matter...... Thank you and all the other forum staffs. Mohammad.

Nothing Malicious found. log.txt

As far as i can see there is no suspicious activity or sign. Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 3/30/2015 Scan Time: 10:23:27 AM Logfile: Administrator: Yes Version: 2.00.4.1028 Malware Database: v2015.03.30.03 Rootkit Database: v2015.03.26.01 License: Premium Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Enabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: M Scan Type: Threat Scan Result: Completed Objects Scanned: 329065 Time Elapsed: 11 min, 0 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end) Thanks a lot. Fixlog.txt RKreport_SCN_03302015_110151.log

The previous time i changed my DNS setting i thought the default password is trusted but apparently something or some one was able to pass and change it to a malicious one so this time i first changed the default password to a long and secure one and then set the right DNS. Is it needed to request my ISP for a tollay new connection parameters? I should probably wait for some days to see what the outcome would be... FRST.txt Addition.txt