HT Logs. Tips, FAQs, Analyze. » O17

What is 93.188.161.182, How to remove 93.188.161.182

admin — Tue, 29 Jun 2010 04:54:28 +0000

93.188.161.182 is a malicious DNS server

If your browser is hijacked or Google, Yahoo, MSN search results are redirected to non related sites, then you should immediately check your PC using an antivirus and antispyware program.
If that does not help, then ask us for help in the Spyware removal forum.

IP Address: 93.188.161.182
HijackThis Category: O17
HijackThis Line:

O17 – HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 93.188.161.182
O17 – HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 93.188.161.182

Description: 93.188.161.182 uses as DNS server to redirect browser to non related sites

How to remove: use HijackThis + Malwarebytes` Anti-malware

What is 93.188.162.52, How to remove 93.188.162.52

admin — Tue, 29 Jun 2010 04:51:50 +0000

93.188.162.52 is a malicious DNS server

IP Address: 93.188.162.52
HijackThis Category: O17
HijackThis Line:

O17 – HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 93.188.162.52

Description: 93.188.162.52 uses as DNS server to redirect browser to non related sites

How to remove: use HijackThis + Malwarebytes` Anti-malware

What is 193.104.110.38, How to remove 193.104.110.38

admin — Sat, 26 Dec 2009 15:37:42 +0000

193.104.110.38 is a malicious DNS server

IP Address: 193.104.110.38
HijackThis Category: O17
HijackThis Line:

O17 – HKLM\System\CCS\Services\Tcpip\..\{1C45AC7D-FB10-4D86-9C82-ABC6221372F6}: NameServer = 193.104.110.38,4.2.2.1,192.168.1.254
O17 – HKLM\System\CS1\Services\Tcpip\..\{1C45AC7D-FB10-4D86-9C82-ABC6221372F6}: NameServer = 193.104.110.38,4.2.2.1,192.168.1.254

MalwareBytes` Anti-malware shows infection:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{1C45AC7D-FB10-4D86-9C82-ABC6221372F6}\NameServer (Trojan.DNSChanger) -> Data: 193.104.110.38

Description: 193.104.110.38 used as DNS server to redirect browser to non related sites

How to remove: use HijackThis + Malwarebytes` Anti-malware

85.255.112.117, 85.255.112.121 – trojan DNSChanger

admin — Sun, 28 Jun 2009 03:30:39 +0000

These ip addresses that uses DNSChanger trojan.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program.
If that does not help, then ask us for help in the Spyware removal forum.

HijackThis Category: O17
HijackThis Line:

O17 – HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.117,85.255.112.121

Description: 85.255.112.117 and 85.255.112.121 are ip addresses that uses trojan DNSChanger

How to remove: use these trojan DNSChanger removal instructions