I have a DNS changer that MacScan can't find

I have discovered that I have a DNS changer hidden away somewhere on my Powerbook G4
I've run MacScan several times and it can't find it. Some of the other virus checkers only work on system 10.5 and up.
I've been trying to learn how to eradicate this manually through various on line advice, but most of it is for newer machines and systems. I'm on 10.4.11.
I followed some instructions to list my router in the Terminal App and see that my router keeps being changed to a server 85.255.116.83 in the Ukraine...rats) When I renew my DHCP lease in my Network preferences my server returns to 192.168.1.254 but within 5 seconds its been changed back.
I don't have a script named plugins.settings in my /Library/Internet Plug-ins (something that was suggested to look for)
Given that this seems to be running constantly, there must be something to look for, something to delete (like a preference file maybe), or something to re-install to eliminate this trojan.
Any of you brilliant Mac minds have a suggestion for me

Significant Rogue DNS Activity To 85.255.112.0/22 (thanks to the "FreeVideo Player" Trojan)
http://lists.sans.org/pipermail/unisog/2006-November/026937.html
DNSHijacker-85.255
http://www.spynomore.com/dnshijacker-85-255.htm

Similar Messages

Maybe you are looking for