Possible DNS Hijack

[JDH]

One of my other computers had several infection that I cleaned using a BartPE disk, then MB when I could get onto the desktop and run it. Things seem ok to me, but I have to be missing something somewhere as I can not browse the web with it. It seems to be related to DNS as when I do a nslookup I get the following:

Server: resolver1.opendns.com

Address: 208.67.222.222

Name: www.google.com.hsd1.pa.comcast.net

Address: 67.215.xx.xxx

I am using opendns on all the computers on my network and this is the only one that does this. I substituted the XXs because this is my IP address.

Now, if I do an nslookup www.google.com. it works fine.

Anyhow, I am attaching the logs from the programs that I have run including HijackThis and MB.

The one line in HijackThis that looks odd to me is the noon.dll.

Thanks in advance for the help.

mbam_log_2010_07_07__06_57_44_.txt

hijackthis.txt

ComboFix.txt

[JDH]

Wow, I feel really stupid now. After two days of fighting with this I decided to try an ipconfig /flushdns and now it seems to be working fine. I would still appreciate it if someone would check my logs and see if I missed anything.

[Maniac]

Hello JDH! Welcome to Malwarebytes' Anti-Malware Forums!

My name is Borislav and I will be glad to help you solve your problems with malware. Before we begin, please note the following:

• The process of cleaning your system may take some time, so please be patient.
  
• Follow my instructions step by step if there is a problem somewhere, stop and tell me.
  
• Stay with the thread until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  
• Instructions that I give are for your system only!
  
• If you don't know or can't understand something please ask.
  
• Do not install or uninstall any software or hardware, while work on.
  
• Keep me informed about any changes.
  

Don't play with ComboFix! It's not a toy! More information here:

http://kdiamondkenny.blogspot.com/2009/07/combofix.html

Please post a new fresh DDS log with Attach.txt .

[JDH]

I hate to ask this, but I'm drawing a total blank, what is DDS?

[Maniac]

Follow these instructions and post all logs if you can:

http://forums.malwarebytes.org/index.php?showtopic=9573

[AdvancedSetup]

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.