Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: NGNIX DNS changer virus is in my system

17 Oct 2019   #1
loninappleton

Windows 7 x64 Ultimate
 
 
NGNIX DNS changer virus is in my system

A DNS changer has started to effect a news site I use regularly. I understand that reinstalling Firefox (which I tried) is useless as in System Restore (did that too) since the DNS changer is out on
the ethernet itself and is redirecting traffic even through my ATT router. I don't know how my ISP
could help with this.

And I don't know if the DNS problem is isloated on one machine. I have a small homenet:
I went to another PC and saw that it was the only one on the network workgroup. I reset the
worlgroup and the new site which was being blocked came back on.

Before leaving this post I will try that on the initial problem PC:


Nope. The problem PC still displays NGNIX browser or whatevs. It tells to go to this url or that
URL perhaps for ransome, who knows?

Regardless I can still communicate on this system. What can Sevenforums tell me to
clear out my DNS entries? Reset the Router?

One help place said run Hitman Pro and that site was down or some such.

Is there a direct tool by now to tackle this?


My System SpecsSystem Spec
.
18 Oct 2019   #2
samuria

win 8 32 bit
 
 

Open a CMD prompt type


Ipconfig /all


Post results


Set your DNS on the PC to 1.1.1.1 & 1.0.0.1
My System SpecsSystem Spec
18 Oct 2019   #3
loninappleton

Windows 7 x64 Ultimate
 
 

Thanks for the prompt response.

Please advise for the path to get to the settings in Admin. for DNS

I see IPv6 has some weird numbers in it from a normal ipconfig printout.

Why does this affect a backup HD?


ipconfig attached


Attached Thumbnails
NGNIX DNS changer virus is in my system-ipconfig.png  
My System SpecsSystem Spec
.

18 Oct 2019   #4
samuria

win 8 32 bit
 
 

Your using the router as DNS which is slow and may be comprised set all devices



Windows 7 Configuration – OpenDNS
My System SpecsSystem Spec
18 Oct 2019   #5
loninappleton

Windows 7 x64 Ultimate
 
 

Thanks. I was really spinning on this late last night. Will make a paper copy I can follow.
Your DNS inputs then, follow line one and line two?


With the usual old fart fear of making changes I even read this on a different PC.
Will report back when I've made the changes.
My System SpecsSystem Spec
19 Oct 2019   #6
loninappleton

Windows 7 x64 Ultimate
 
 

No success. I did the procedure exactly including flushdns. A really pesky problem.

In between replies on the same HD I'm going to run the cleaning procedures given in another
thread.

I recall from an earlier question a DOS program called traceroute was mentioned. Could that be of any help with this?

Also If I am using a bookmark to load the KPFA site, is there something in Firefox to Clear entry?

You mentioned I was on the slow lane. Indeed in the DNS dialog the image showed 1G where mine is 100mps. Is that just the difference of my ISP connection speed?
My System SpecsSystem Spec
19 Oct 2019   #7
samuria

win 8 32 bit
 
 

Can you check all browsers that none are set to use a proxy


From a CMD prompt type


Tracert adobe.com

Post results
My System SpecsSystem Spec
.
19 Oct 2019   #8
loninappleton

Windows 7 x64 Ultimate
 
 

Is Adobe then some sort of test example? I don't know if it's on the problem HD as I don't use ot much.


Can I run the problem site?


I will follow the instruction and see what happens.
My System SpecsSystem Spec
19 Oct 2019   #9
loninappleton

Windows 7 x64 Ultimate
 
 

Here is the adobe tracert attached


Attached Thumbnails
NGNIX DNS changer virus is in my system-tracert-adobe.png  
My System SpecsSystem Spec
19 Oct 2019   #10
samuria

win 8 32 bit
 
 

Lets see whats going on



Please download and save FRST 64bit or FRST 32 bit to your Desktop.

Downloading MiniToolBox

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
Make sure that Addition option is checked.
Press Scan button.
It will produce a log called FRST.txt in the same directory the tool is run from.
Please copy and paste log back here.
The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
My System SpecsSystem Spec
Reply

 NGNIX DNS changer virus is in my system




Thread Tools




Similar help and support threads
Thread Forum
Windows 10 Logon Changer changed my system icons
Hello, so today I installed Windows 10 Logon Changer and it started to get some of my icons black. Does anyone know how to restore the system icons? http://i.imgur.com/EmElPsS.png
Customization
Do I have a worm or virus in my system? What to do about it?
3 contacts have forwarded me emails that have my name as the sender, although not my email address. The contact of the email is a link. In the emails forwarded to me I can also see a list from my contact list -i.e. that this mail from not my address was sent to various contacts and will appear as...
System Security
Partition Virus/Non-system Drive Virus
I don't think much about virii because I image my system, and can always put it back to before the virus hit. Always worked perfectly. I use Win firewall and MSE. But I've heard there are virii that partition the HD or SSD. And virii that go to non-system drives. Anybody actually run across one...
System Security
Can't Clear System Restore Files. System Check Virus the Cause?
About a month ago I managed to get the infamous System Check virus on my computer. I was shocked that it happened, I was at the time doing a google image search. Anyway I managed to remove the virus, unhide my files, and restore all my start menu shortcuts. During the removal process, I...
General Discussion
Virus! No system restore available
System restore error? When i try to restore i get "System restore does not appear to be functioning correctly on this system. A volume shadow copy service component encontered an unexpected error. Check the application event log for more information (0x80042302). Im trying to do this because I...
Backup and Restore


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 16:50.
Twitter Facebook