~ RepairDNS v2015.12.6.30 Nicolas Coolman (2015/12/06)
~ Run by fff (Administrator)  (2015/12/21 16:54:23)
~ Site : http://www.nicolascoolman.fr
~ Windows 8.1 Connected,X64  (Build 9600)

=======[ Microsoft Windows Defender Service ]
The service is running

=======[ Search DNS Dynamic Link Library 32/64bits (DLL) ]
FOUND: C:\Windows\System32\dnsapi.dll [657920]   =>Not infected
FOUND: C:\Windows\SysWOW64\dnsapi.dll [498688]   =>Hijacker.DNS.Hosts

=======[ Search copy of resource ]
FOUND: C:\Windows\winsxs\wow64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.17415_none_90eb58f92b43cedd\dnsapi.dll [498688]   =>Not infected
FOUND: C:\Windows\winsxs\wow64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.17039_none_90d9b2b12b50777f\dnsapi.dll [106819]   =>Hijacker.DNS.Hosts
FOUND: C:\Windows\winsxs\wow64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.16423_none_90de9f412b4d9e7f\dnsapi.dll [111448]   =>Hijacker.DNS.Hosts
FOUND: C:\Windows\winsxs\amd64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.17415_none_8696aea6f6e30ce2\dnsapi.dll [657920]   =>Not infected
FOUND: C:\Windows\winsxs\amd64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.17039_none_8685085ef6efb584\dnsapi.dll [150063]   =>Hijacker.DNS.Hosts
FOUND: C:\Windows\winsxs\amd64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.16423_none_8689f4eef6ecdc84\dnsapi.dll [116405]   =>Hijacker.DNS.Hosts

=======[ Select copy of resource  (Good ---> Infected) ]
EQUIV: [498688] C:\Windows\winsxs\wow64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.17415_none_90eb58f92b43cedd\dnsapi.dll --> C:\Windows\SysWOW64\dnsapi.dll

=======[ Unregistered Resource ]
DESENREGISTERED: C:\Windows\SysWOW64\dnsapi.dll

=======[ infected Dynamic Link Library Repair ]
REPAIRED: C:\Windows\SysWOW64\dnsapi.dll WITH C:\Windows\winsxs\wow64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.17415_none_90eb58f92b43cedd\dnsapi.dll

=======[ Registered Resource ]
ENREGISTERED: C:\Windows\SysWOW64\dnsapi.dll

=======[ Verify new Dynamic Link Library (DLL) (32/64Bits) ]
FOUND: C:\Windows\System32\dnsapi.dll [657920]   =>Disinfected
FOUND: C:\Windows\SysWOW64\dnsapi.dll [498688]   =>Disinfected

=======[ You must reboot your system ]

=======[ End Of Treatment ]


~ RepairDNS v2015.12.6.30 Nicolas Coolman (2015/12/06)
~ Run by fff (Administrator)  (2015/12/21 16:54:23)
~ Site : http://www.nicolascoolman.fr
~ Windows 8.1 Connected,X64  (Build 9600)

=======[ Microsoft Windows Defender Service ]
The service is running

=======[ Search DNS Dynamic Link Library 32/64bits (DLL) ]
FOUND: C:\Windows\System32\dnsapi.dll [657920]   =>Not infected
FOUND: C:\Windows\SysWOW64\dnsapi.dll [498688]   =>Hijacker.DNS.Hosts

=======[ Search copy of resource ]
FOUND: C:\Windows\winsxs\wow64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.17415_none_90eb58f92b43cedd\dnsapi.dll [498688]   =>Not infected
FOUND: C:\Windows\winsxs\wow64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.17039_none_90d9b2b12b50777f\dnsapi.dll [106819]   =>Hijacker.DNS.Hosts
FOUND: C:\Windows\winsxs\wow64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.16423_none_90de9f412b4d9e7f\dnsapi.dll [111448]   =>Hijacker.DNS.Hosts
FOUND: C:\Windows\winsxs\amd64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.17415_none_8696aea6f6e30ce2\dnsapi.dll [657920]   =>Not infected
FOUND: C:\Windows\winsxs\amd64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.17039_none_8685085ef6efb584\dnsapi.dll [150063]   =>Hijacker.DNS.Hosts
FOUND: C:\Windows\winsxs\amd64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.16423_none_8689f4eef6ecdc84\dnsapi.dll [116405]   =>Hijacker.DNS.Hosts

=======[ Select copy of resource  (Good ---> Infected) ]
EQUIV: [498688] C:\Windows\winsxs\wow64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.17415_none_90eb58f92b43cedd\dnsapi.dll --> C:\Windows\SysWOW64\dnsapi.dll

=======[ Unregistered Resource ]
DESENREGISTERED: C:\Windows\SysWOW64\dnsapi.dll

=======[ infected Dynamic Link Library Repair ]
REPAIRED: C:\Windows\SysWOW64\dnsapi.dll WITH C:\Windows\winsxs\wow64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_6.3.9600.17415_none_90eb58f92b43cedd\dnsapi.dll

=======[ Registered Resource ]
ENREGISTERED: C:\Windows\SysWOW64\dnsapi.dll

=======[ Verify new Dynamic Link Library (DLL) (32/64Bits) ]
FOUND: C:\Windows\System32\dnsapi.dll [657920]   =>Disinfected
FOUND: C:\Windows\SysWOW64\dnsapi.dll [498688]   =>Disinfected

=======[ You must reboot your system ]

=======[ End Of Treatment ]


~ RepairDNS v2015.12.6.30 Nicolas Coolman (2015/12/06)
~ Run by fff (Administrator)  (2015/12/21 16:57:57)
~ Site : http://www.nicolascoolman.fr
~ Windows 8.1 Connected,X64  (Build 9600)

=======[ Microsoft Windows Defender Service ]
The service is running

=======[ Search DNS Dynamic Link Library 32/64bits (DLL) ]
FOUND: C:\Windows\System32\dnsapi.dll [657920]   =>Not infected
FOUND: C:\Windows\SysWOW64\dnsapi.dll [498688]   =>Not infected

=======[ You must reboot your system ]

=======[ End Of Treatment ]