That very well may be the Trojan redirecting all your DNS requests to its own dns server but the server might not be up or it might be redirecting you to an IP of its own and that IP could be down. Trojans messing with DNS are especially dangerous because even if you type www.wellsfargo.com you could be going to a phishing site. Here is a recent blog we wrote about a scam that happened to a friend of one of our researchers http://securitylabs.websense.com/content/Blogs/3184.aspx
Thanks, ------------------------------------------ Ali Mesdaq (CISSP, GIAC-GREM) Sr. Security Researcher Websense Security Labs http://www.WebsenseSecurityLabs.com ------------------------------------------ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sam Franc Sent: Tuesday, October 14, 2008 9:04 AM To: hardware@hardwaregroup.com Subject: [H] Trojan?? This am when I started up a message came on the screen from AVG. "AVG finds you have a trojan. Do you want to remove it forcefully?" I clicked yes and the message reappeared. I could not get rid of it. I restarted the computer and the message was gone. Now when I start Firefox I get a message it is taking to long no matter what URL I try to get. Is that the trojan working? What should I do now? -- Sam Franc On the Oregon Coast I must be willing to give up what I am in order to become what I will be.-Einstein Protected by Websense Hosted Email Security -- www.websense.com
