Archive for the 'O17' Category

What is 93.188.161.182, How to remove 93.188.161.182

Monday, June 28th, 2010

93.188.161.182 is a malicious DNS server

remove If your browser is hijacked or Google, Yahoo, MSN search results are redirected to non related sites, then you should immediately check your PC using an antivirus and antispyware program.
If that does not help, then ask us for help in the Spyware removal forum.

IP Address: 93.188.161.182
HijackThis Category: O17
HijackThis Line:

O17 – HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 93.188.161.182
O17 – HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 93.188.161.182

Description: 93.188.161.182 uses as DNS server to redirect browser to non related sites

How to remove: use HijackThis + Malwarebytes` Anti-malware

What is 93.188.162.52, How to remove 93.188.162.52

Monday, June 28th, 2010

93.188.162.52 is a malicious DNS server

remove If your browser is hijacked or Google, Yahoo, MSN search results are redirected to non related sites, then you should immediately check your PC using an antivirus and antispyware program.
If that does not help, then ask us for help in the Spyware removal forum.

IP Address: 93.188.162.52
HijackThis Category: O17
HijackThis Line:

O17 – HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 93.188.162.52

Description: 93.188.162.52 uses as DNS server to redirect browser to non related sites

How to remove: use HijackThis + Malwarebytes` Anti-malware

What is 193.104.110.38, How to remove 193.104.110.38

Saturday, December 26th, 2009

193.104.110.38 is a malicious DNS server

remove If your browser is hijacked or Google, Yahoo, MSN search results are redirected to non related sites, then you should immediately check your PC using an antivirus and antispyware program.
If that does not help, then ask us for help in the Spyware removal forum.

IP Address: 193.104.110.38
HijackThis Category: O17
HijackThis Line:

O17 – HKLM\System\CCS\Services\Tcpip\..\{1C45AC7D-FB10-4D86-9C82-ABC6221372F6}: NameServer = 193.104.110.38,4.2.2.1,192.168.1.254
O17 – HKLM\System\CS1\Services\Tcpip\..\{1C45AC7D-FB10-4D86-9C82-ABC6221372F6}: NameServer = 193.104.110.38,4.2.2.1,192.168.1.254

MalwareBytes` Anti-malware shows infection:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{1C45AC7D-FB10-4D86-9C82-ABC6221372F6}\NameServer (Trojan.DNSChanger) -> Data: 193.104.110.38

Description: 193.104.110.38 used as DNS server to redirect browser to non related sites

How to remove: use HijackThis + Malwarebytes` Anti-malware

85.255.112.117, 85.255.112.121 – trojan DNSChanger

Saturday, June 27th, 2009

These ip addresses that uses DNSChanger trojan.

remove It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program.
If that does not help, then ask us for help in the Spyware removal forum.

HijackThis Category: O17
HijackThis Line:

O17 – HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.117,85.255.112.121

Description: 85.255.112.117 and 85.255.112.121 are ip addresses that uses trojan DNSChanger

How to remove: use these trojan DNSChanger removal instructions