dnstrojan

<?xml version="1.0" encoding="UTF-16" ?>
<mbam-log>
<header>
<date>2015/02/11 18:53:03 +0100</date>
<logfile>mbam-log-2015-02-11 (18-52-55).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.00.4.1028</version>
<malware-database>v2015.02.08.04</malware-database>
<rootkit-database>v2015.02.03.01</rootkit-database>
<license>free</license>
<file-protection>disabled</file-protection>
<web-protection>disabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<osversion>Windows 7</osversion>
<arch>x86</arch>
<username>Pc</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>292206</objects>
<time>593</time>
<processes>0</processes>
<modules>0</modules>
<keys>0</keys>
<values>0</values>
<datas>2</datas>
<folders>0</folders>
<files>0</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<data><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS</path><valuename>DhcpNameServer</valuename><vendor>Trojan.DNSChanger</vendor><action>replaced</action><valuedata>91.212.124.159 8.8.8.8</valuedata><baddata>91.212.124.159</baddata><gooddata></gooddata><hash>986c0c1053370a2c27e943764fb6cf31</hash></data>
<data><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{CB266D08-B5F2-4B52-BBDA-FA118C37C0B5}</path><valuename>DhcpNameServer</valuename><vendor>Trojan.DNSChanger</vendor><action>replaced</action><valuedata>91.212.124.159 8.8.8.8</valuedata><baddata>91.212.124.159</baddata><gooddata></gooddata><hash>7a8ae834dab072c441cf51685ca9f50b</hash></data>
</items>
</mbam-log>