Jump to content

Removal of m55.dnsqa.me


Recommended Posts

Hi.

Today I found my computer infected with something called DNSUnlocker and m55.dnsqa.me. Wepages became slow and was filled with all sorts of adds.

 

Currently after following manye online guides the problem seems gone, but with Malwarebytes installed I still get a warning poping up regarding m55.dnsqa.me . This probably mean thr problem is still there just blocket. Malwarebytes does not seem to be able to remove the problem, only block it.

 

Is there a way to totally remove this problem?

I've found similar posts under your site, as follows -

https://forums.malwarebytes.org/index.php?/topic/179042-help-in-removing-m55dnsqame/

Should I follow the same procedure that you recommended and send you the files for resolution?

 

Link to post
Share on other sites

Hello and :welcome:

They call me TwinHeadedEagle around here, and I'll try to help your with your issue.

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

 

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
    x5o4gh.png
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

Link to post
Share on other sites

[IMG] Fix with Farbar Recovery Scan Tool
 

[IMG] This fix was created for this user for use on that particular machine. [IMG]
[IMG] Running it on another one may cause damage and render the system unstable. [IMG]


Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
 

  • Right-click on [IMG] icon and select [IMG] Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.


Please attach it to your reply.

fixlist.txt

Link to post
Share on other sites

I received messages from Malwarebytes blocking ssi.gstatic.com (216.58.220.131 port 63780) earlier today and previously received messages from Malwarebytes blocking M55.dnsqa.me (Port 54700 82.163.143.92/171) .  But all has been good since applying the fix - no messages from Malwarebytes - all seems to be clear.

 
I noticed that this extension was removed from chrome - chrome-extension://hdokiejnpimakedhajhdlcegeplioahd/vault.html removed
 
Was this part of the Malware or something else?
 
Thank you for your help so far.  I'll monitor over the next 24 hours and I'll get back to you with another update.
Link to post
Share on other sites

  • 2 weeks later...
  • Root Admin

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.