About 300,000 computers could run out of internet in July - How can you detect if your computer has been violated and infected with DNS Changer

[Tonka]

http://www.elperiodico.com/es/noticias/sociedad/unos-300000-ordenadores-podrian-quedarse-sin-internet-julio-1701801

Spanish-English translation

About 300,000 computers could run out of internet in July

This month, the FBI shut down the servers that triggered temporary after discovering a plot of piracy
Tuesday, April 24, 2012 - 09:35 h.
Reuters / Washington
More than 300,000 computer users around the world can lose access to the internet from July 9 , the date on which the FBI shut down the temporary servers that were activated following exposure of a significant plot of piracy . The Federal Bureau of Investigation United States has created a website ( www.dcwg.org ) that will allow users to determine if their computers could be among those affected by the plot, as reported by an agency spokesman told CNN U.S. .


The outage is due to the so-called Operation Phantom Click that last November led to the arrest of six people accused of fraud Estonian infect hundreds of thousands of computers worldwide with malware called DNS Changer which facilitated the entry of virus computer in the system.

According to the FBI, the pirates used that access to redirect users to manipulate their own servers and online advertising, which won up to 14 million in illegal income. The federal agency estimates that around 350,000 computers are infected, including 85,000 in the United States, where the virus was even NASA computers.

To dismantle the plot , the FBI activated temporary servers to prevent immediate disconnection of many infected users, and give them time to clean up their files . On 9 July, the agency finally off those servers, so users urges everyone to check on your new website if yours is one of the affected computers.

[Pathfinder]

Re: About 300,000 computers could run out of internet in July - How can you detect if your computer has been violated and infected with DNS Changer

From Tonka's link:

DCWG
...
What is the DNS Changer Malware?

On November 8, the FBI, the NASA-OIG and Estonian police arrested several cyber criminals in ?Operation Ghost Click?. The criminals operated under the company name ?Rove Digital?, and distributed DNS changing viruses, variously known as TDSS, Alureon, TidServ and TDL4 viruses. You can read more about the arrest of the Rove Digital principals here, and in the FBI Press Release.

What does the DNS Changer Malware do?

The botnet operated by Rove Digital altered user DNS settings, pointing victims to malicious DNS in data centers in Estonia, New York, and Chicago. The malicious DNS servers would give fake, malicious answers, altering user searches, and promoting fake and dangerous products. Because every web search starts with DNS, the malware showed users an altered version of the Internet.

Under a court order, expiring July 9, the Internet Systems Consortium is operating replacement DNS servers for the Rove Digital network. This will allow affected networks time to identify infected hosts, and avoid sudden disruption of services to victim machines.

How Can I Protect Myself?

This page describes how you can determine if you are infected, and how you can clean infected machines. To check if you?re infected, Click Here. If you believe you are infected, here are instructions on how to clean your computer.

More...

http://www.dcwg.org/

---------------------------------------------------

How can you detect if your computer has been violated and infected with DNS Changer?

An industry wide team has developed easy ?are you infected? web sites.
They are a quick way to determine if you are infected with DNS Changer. Each site is designed for any normal computer user to browse to a link, follow the instructions, and see if they might be infected. Each site has instructions in their local languages on the next steps to clean up possible infections.

For example, the http://www.dns-ok.us/ will state if you are or are not infected (see below).

• No Software is Downloaded! The tools do not need to to load any software on your computer to perform the check.
• No changes are performed on your computer! Nothing is changed on your computer when you use sites like http://www.dns-ok.us/.
• No scanning! The ?are you infected with DNS Changer? tool does not need to scan your computer.

If you think your computer is infected with DNS Changer or any other malware, please refer to the security guides from your operating system or the self -help references from our fix page (http://www.dcwg.org/fix).

More...

http://www.dcwg.org/detect/

[gsgs]

Re: About 300,000 computers could run out of internet in July - How can you detect if your computer has been violated and infected with DNS Changer

http://www.dns-ok.us/

replies:

DNS Resolution = GREEN

Your computer appears to be looking up IP addresses correctly!

Had your computer been infected with DNS changer malware you would have
seen a red background. Please note, however, that if your ISP is redirecting
DNS traffic for its customers you would have reached this site even though
you are infected. For additional information regarding the DNS changer malware,
please visit the FBI's website at:

http://www.fbi.gov/news/stories/2011/november/malware_110911

[Laidback Al]

Re: About 300,000 computers could run out of internet in July - How can you detect if your computer has been violated and infected with DNS Changer

DNS Changer: FBI Updates Net Access Shutoff Plans

The FBI called: Your malware-infected PC or router needs to get clean, or lose Internet access.

By Mathew J. Schwartz InformationWeek
April 24, 2012 02:30 PM

In a little more than two months, the FBI plans to pull the plug on DNS servers that are currently providing PCs infected with the DNS Changer malware with the ability to translate domain names into IP addresses.
Accordingly, the FBI has launched a public appeal, urging consumers and businesses to scan their machines--including some routers--for signs of infection. . . .

more at- http://www.informationweek.com/news/...ment/232900868