W32/DNSChanger.CHG Trojan

 Virus Information - W32/DNSChanger.CHG Trojan:

W32/DNSChanger.CHG is a trojan. The trojan will infect Windows systems.

The trojan will arrive as a dropped file of another malware or may be downloaded from the Internet.

Upon execution the trojan tries to download and install SwiftPorn malware.

The trojan modifies the registry at the following locations:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\System
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\NameServer

It also modifies the DNS Server address.