DNSChanger Malware Set to Knock Thousands Off Internet on Monday

PC World ^ | July 5, 2012 | Ian Paul

[yorkie]

Thousands of PCs worldwide may be unable to access the Internet beginning July 9 unless those machines are rid of the pernicious DNSChanger malware that first surfaced in 2007. The Federal Bureau of Investigation helped shut down the criminal ring responsible for DNSChanger in late 2011. The federal agency then briefly handled the Internet Domain Name System routing for all infected Mac and Windows systems.

[BlueLancer]

bookmarked

[yorkie]

"Can I catch the virus if I’m not logged in? I’m pretty sure I’m not"

Are you series?

[mountainlion]

Looks good. Thanks. Ain’t Vista Great!/s...

[martin_fierro]

"HEY! I BEEN THROWN OUTTA BETTER PLACES THAN THIS!"

[Cyman]

“Well I haven’t been able to get on the internet since that y2k thing”

Me too. But I haven’t complained because my microwave works so much better than it used to.

[joe fonebone]

Yeah, but, taking a line from Jaws..

I think I’m gonna need a bigger generator.....

I was not as prepared as I would have liked to be, but was far more prepared than most...

[oh8eleven]

Malware Set to Knock Thousands Off Internet on Monday
When it comes to anti-malware SW, there are few better than Malwarebytes Anti-Malware ... and it's free.
In fact, it just found and deleted two files on my PC that were infected with RootKit.ZeroAccess.

[BenLurkin]

If it redirects DNS then why wouldn’t it re-direct DNS away from the government website?

[RayChuang88]

If you have a Windows XP or later, download and install the current version of Microsoft Security Essentials, patch it with the latest malware definitions, and run a full system scan. This should remove the damage that DNSChanger has done to your system and ensure you won't be knocked off on July 9, 2012.

[BenLurkin]

Once the FBI shut down the operation, it built a safety net of new servers to redirect traffic from those infected with the virus.

Why would they do that? Is the FBI in the business of running Internet servers?

I guess I'm slow but I don't understand why anti-virus programs were just simply updated. If the problem is that you can't update definitions on line why hasn't the fix been on sale at Best Buy for the last 5 years?

[rarestia]

The men running this scam have been arrested, but many of the zombie computers are acting as DNS relays for the network they setup. No one is updating the DNS database any longer, so the new .org website isn’t in the catch list for them. As such, any one who has this should be able to go to this website without being re-directed.

Keep in mind, DNS is not all-inclusive. Corporations, governments, even the international registers can manipulate their DNS however they way. That’s all these scammers did. Once the malware was installed, all DNS was redirected to their servers by the malware, regardless of the DNS servers specified for the adapter.

It’s important to note this transcends operating system. This could be PC, Mac, or even Linux under the right conditions.

[yorkie]

WOW! You sure DID have a storm! (I wasn’t aware of it!)

http://www.wxyz.com/dpp/news/region/macomb_county/macomb-and-oakland-county-suffered-the-most-damage-after-bearing-the-brunt-of-the-storms

[rarestia]

MOST viruses come out of Russia and China nowadays. They're usually created to defraud individuals, re-route money from corporations, and generally bring down or infect anyone dumb enough to be running machines directly-connected to the Internet with no firewall or virus protection.

Unpatched PCs compromised in 20 minutes

You reformat your hard disk and install the OS with a direct connection to the Internet (no hardware firewall), and you're likely to be infected before you can even patch your machine. This is becoming more prevalent on PCs running Windows XP.

"Script kiddies" are those pimple-faced kids who run scripts they find on an anonymous FTP or IRC chat room. They're usually responsible for DDoS (Distributed Denial of Service), but the actual high-level, newer viruses are created by very devious, intelligent individuals.

[joe fonebone]

this is right where I live, I was in the middle of it.... i did not get flooded out, but by the time I got my generator running, the sump was filled right to the top... my neighbor was not so lucky... I gave him one of the outlets on my generator and he got his pumped out....

my power came back on late yesterday afternoon. but the fuses had blown out on my air conditioning. when I got into my car to go buy some, the outside temperature was 108 degrees....

[steve86]

. but the fuses had blown out on my air conditioning.

Because of low voltage initially I would suspect.

[joe fonebone]

low voltage... slow voltage... no voltage.... hell, it is so damn old that all I have to do is stare at it real hard and the fuses blow..

It is so old that it uses freon, the real stuff...

22 years old and still pumping out more cold air than any of the new ones..

when I bought it, the expert told me I needed a 2 ton unit for my house, I told him to install a 5 ton unit.

I hardly has to work to turn my house into a refrigerator..

[zeugma]

This would have been easily fixable quite some time ago by either the ISP or FBI. At the ISP level, all they’d have to do is have a NAT in place so that any request for the known bad DNS servers would go to a DNS server that would serve whatever the ISP wanted. The ISP could then direct all traffic from infected computers to a website that tells them they are infected, and how to fix it. This isn’t rocket science folks, and could have been put in place years ago at almost no cost to the ISP. Of course, they’d actually have to give a damn about their customers.

[Zetman]

ping....

(Or, perhaps more appropriately - nslookup....).

[onedoug]

What does M say about this?

007

[freebird5850]

bump for later!