Jump to content

Possible DNS Hijack

Recommended Posts

One of my other computers had several infection that I cleaned using a BartPE disk, then MB when I could get onto the desktop and run it. Things seem ok to me, but I have to be missing something somewhere as I can not browse the web with it. It seems to be related to DNS as when I do a nslookup I get the following:

Server: resolver1.opendns.com


Name: www.google.com.hsd1.pa.comcast.net

Address: 67.215.xx.xxx

I am using opendns on all the computers on my network and this is the only one that does this. I substituted the XXs because this is my IP address.

Now, if I do an nslookup www.google.com. it works fine.

Anyhow, I am attaching the logs from the programs that I have run including HijackThis and MB.

The one line in HijackThis that looks odd to me is the noon.dll.

Thanks in advance for the help.




Link to post
Share on other sites

Wow, I feel really stupid now. After two days of fighting with this I decided to try an ipconfig /flushdns and now it seems to be working fine. I would still appreciate it if someone would check my logs and see if I missed anything.

Link to post
Share on other sites

Hello JDH! Welcome to Malwarebytes' Anti-Malware Forums!

My name is Borislav and I will be glad to help you solve your problems with malware. Before we begin, please note the following:

  • The process of cleaning your system may take some time, so please be patient.
  • Follow my instructions step by step if there is a problem somewhere, stop and tell me.
  • Stay with the thread until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  • Instructions that I give are for your system only!
  • If you don't know or can't understand something please ask.
  • Do not install or uninstall any software or hardware, while work on.
  • Keep me informed about any changes.

Don't play with ComboFix! It's not a toy! More information here:


Please post a new fresh DDS log with Attach.txt .

Link to post
Share on other sites

  • Root Admin

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.

Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.