Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

DNSChanger Detection

High

Synopsis

N/A

Description

The remote host was observed performing DNS lookups to an IP address that is included in the DNSChanger rogue servers. This indicates that the remote host is infected with DNSChanger. DNSChanger hijacks DNS settings on a system causing the host to query the DNSChanger rogue servers.

Solution

Manually inspect and clean the system.