Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Help, how do i delete DNSchanger?

Yesterday while i was using google to find something i came upon their warning saying that my computer might be infected, it looked like this:

User uploaded file


i followed the instructions it gave me to get rid of this malware called "DNSchanger", went to the page http://www.dns-ok.us/ to check if in fact my computer was infected, and this is what it showed:

User uploaded file

i downloaded the DNSchanger removal tool, and scanned the computer, but it says that i don't have the trojan:

User uploaded file


i ran Macscan and it deleted all the cookies that it found, but i keep getting the "your computer is infected" warning on the google page and on the other page, i don't know what else to do, do you have any idea how can i fix this?


right now i'm running ClamXav and it hasn't found anything yet...


help!

MacBook Pro, Mac OS X (10.5.8)

Posted on May 24, 2012 7:11 AM

Reply
33 replies

Jul 5, 2012 1:29 PM in response to MadMacs0

I'm glad to have been able to give a little help after all the help I got here from eveyone.


Just a note on why trying to type wq may not have worked. Was the cursor at the beginning of the line? When I first did it, it was at the beginning of the line and it wouldn't work, just kept getting the annoying ping. I scrolled to the end of the line, typed wq and it worked.

Actually, I think what I did was scroll to the end to delete it with dd and then when I typed wq, it worked.

Jul 5, 2012 3:26 PM in response to wjrcbrown

wjrcbrown wrote:


I am still concerned as to why the wq business did not work

Welcome to the weird, wacky and nerdy world of Unix in general and the VI editor in particular. When you did the sudo crontab -e command, you invoked root's crontab configuration file, to be edited with the default editor, vi. Once in there and after the dd command which erases the offending lines, in order to write the changes and quit, the command begins with a colon, that Feisty did not include in the recipe, that is :wq


The alternate command sudo crontab -r doesn't bother to edit the file at all, just zaps it and begone.


But it's good that you're peachy now and won't be affected next Monday when the FBI shuts down the servers.

Help, how do i delete DNSchanger?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.