Trojan.DNSChanger.ACMB2

Trojan.DNSChanger.ACMB2 is Malwarebytes’ generic detection name for changes made by a type of Trojanon users’ DNS settings on affected Windows systems.

The changes made by the DNS-changing malware can be found in the registry values called NameServer under the keys:

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersInterfaces{GUID of the interface}

and

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParameters

Malwarebytes blocks Trojan.DNSChanger

You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints.

Nebula endpoint tasks menu

Choose the Scan + Quarantine option. Afterwards you can check the Detections pageto see which threats were found.

On the Quarantine pageyou can see which threats were quarantined and restore them if necessary.