W32/DNSChanger.CHG Trojan

 Information about the W32/DNSChanger.CHG Trojan:

W32/DNSChanger.CHG is a trojan. The trojan will infect Windows systems.

The trojan will arrive as a dropped file of another malware or may be downloaded from the Internet.

Upon execution the trojan tries to download and install SwiftPorn malware.

The trojan modifies the registry at the following locations:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\System
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\NameServer

It also modifies the DNS Server address.

This trojan first appeared on April 22, 2008.

 Other names of W32/DNSChanger.CHG Trojan:

This trojan is also known as DR/Dldr.DNSChanger.Gen, W32/Zlob.LMS!tr.dldr, Trojan.Win32.DNSChanger.chg.