Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday

J

J. P. Gilliver (John)

David H. said:
No. There ios no "trigger date". The DNSChanger trojan changes the
DNS Table of computers and SOHO Routers. That change was in effect
subsequent to a reboot upon infection.

The ONLY concept about Monday is that the the DNS Servers tied to the
IP addresses of were the malicious DNS Servers will be taken down.
I don't understand the above "sentence" (-:.
 
J

John Williamson

J. P. Gilliver (John) said:
I don't understand the above "sentence" (-:.
The trojan works by redirecting DNS requests by infected computers and
routers to a server which is currently controlled by the FBI, having
been removed from the control of the bad guys some months ago. This
server directed certain address requests to malware or advertising
sites, effectively hiding the correct websites from the user.

This nameserver will be disconnected from the internet on Monday 9th
July. As a result, all computers and routers that are using it as their
default or only nameserver will be unable to look up the IP addresses
for websites.

If you have sites which you access by typing in the IP address directly,
you won't be affected, If you have made sure that you use your ISP's
nameserver, you won't be affected. If you are deliberately using
something like 8.8.8.8 or one of the other public nameservers, you won't
be affected.

If your security programs are up to date, you won't be affected, as this
exploit has been fixed by all of them a long time ago.

 
J

J. P. Gilliver (John)

John Williamson said:
The trojan works by redirecting DNS requests by infected computers and
routers to a server which is currently controlled by the FBI, having
been removed from the control of the bad guys some months ago. This
Thanks - a most clear explanation.
server directed certain address requests to malware or advertising
sites, effectively hiding the correct websites from the user.

This nameserver will be disconnected from the internet on Monday 9th
July. As a result, all computers and routers that are using it as their
default or only nameserver will be unable to look up the IP addresses
for websites.
Kind of the FBI to help out for as long as they did!
If you have sites which you access by typing in the IP address
directly, you won't be affected, If you have made sure that you use
your ISP's nameserver, you won't be affected. If you are deliberately
using something like 8.8.8.8 or one of the other public nameservers,
you won't be affected.

If your security programs are up to date, you won't be affected, as
this exploit has been fixed by all of them a long time ago.
--
J. P. Gilliver. UMRA: 1960/<1985 MB++G.5AL-IS-P--Ch++(p)Ar@T0H+Sh0!:`)DNAf

The sun, with all those planets revolving around it and dependent upon it, can
still ripen a bunch of grapes as it if had nothing else in the universe to do.
-Galileo Galilei, physicist and astronomer (1564-1642)
 
J

J. P. Gilliver (John)

Ken Blake said:
I'll add my vote for TeamViewer to yours.
And mine. I've used it (from this XP netbook) to sort out friends on XP,
Vista, and 7. (The XP and 7 users are blind, to boot.)
 
A

Adam

J. P. Gilliver (John) said:
Thanks - a most clear explanation.


Kind of the FBI to help out for as long as they did!
--
J. P. Gilliver. UMRA: 1960/<1985 MB++G.5AL-IS-P--Ch++(p)Ar@T0H+Sh0!:`)DNAf

The sun, with all those planets revolving around it and dependent upon it,
can
still ripen a bunch of grapes as it if had nothing else in the universe to
do.
-Galileo Galilei, physicist and astronomer (1564-1642)

Also, for those with a router, it's safer to "not" use the factory password
provided by
the manufacturer. Change the password to something more secure to
prevent malware from breaking into your router/network.

Routers probably should ship with a more unique password instead of
one factory password for all routers of the same make/model.

That's one way the malware was breaking in and changing the DNS settings.
 
B

Big Steel

On 7/8/2012 2:28 PM, Adam wrote:

Also, for those with a router, it's safer to "not" use the factory password
provided by
the manufacturer. Change the password to something more secure to
prevent malware from breaking into your router/network.

Routers probably should ship with a more unique password instead of
one factory password for all routers of the same make/model.
The dumb user should know to change it.
 
S

SC Tom

Big Steel said:
Monday will come and pass. It's just another doomsday that will not amount
to much.
Kinda like the Y2K scare; my boss made me come back early from vacation for
that one. But that was all right- I got triple time for eight hours, plus
two extra vacation days for that one :)
 
B

Big Steel

Kinda like the Y2K scare; my boss made me come back early from vacation
for that one. But that was all right- I got triple time for eight hours,
plus two extra vacation days for that one :)
Maybe you can convince your boss that the activation period is wrong,
and it will happen next Saturday so you can collect again. :)
 
W

Warren Oates

"Adam" <adam@no_thanks.com> said:
Also, for those with a router, it's safer to "not" use the factory password
provided by
the manufacturer.
Really? I had no idea.
 
G

Gene E. Bloch

Kinda like the Y2K scare; my boss made me come back early from vacation for
that one. But that was all right- I got triple time for eight hours, plus
two extra vacation days for that one :)
Part of why the Y2K problem wasn't so bad is that a lot of people,
including me, worked hard to fix a lot of systems beforehand.

They ended up getting scorn instead of credit for their work.

I guess that's better than a world-wide collapse :)
 
G

glee

Gene E. Bloch said:
Part of why the Y2K problem wasn't so bad is that a lot of people,
including me, worked hard to fix a lot of systems beforehand.

They ended up getting scorn instead of credit for their work.

I guess that's better than a world-wide collapse :)
Exactly...
 
A

Adam

Adam said:
Well, that's one way the crooks got millions of $$$$.

Tech support even told me not to change the factory password when
I was on the phone with them once. Change it anyways.
 
S

SC Tom

Gene E. Bloch said:
Part of why the Y2K problem wasn't so bad is that a lot of people,
including me, worked hard to fix a lot of systems beforehand.

They ended up getting scorn instead of credit for their work.

I guess that's better than a world-wide collapse :)
I think that was part of the reason I got that nice bonus for cutting my
vacation short. I put in many a night before 1/1/2000 getting all the
systems updated with the necessary Windows updates, etc., etc. The main
reason they had me come in on the first was to make sure it *wasn't* a
company-wide collapse, that everything was still running as it should. But
hey, if they want to give me extra time and money for it, who am I to
refuse? Besides, I felt I earned it anyhow. They were a good company to work
for; had a real "family" atmosphere throughout the organization.
 
S

SC Tom

Big Steel said:
Maybe you can convince your boss that the activation period is wrong, and
it will happen next Saturday so you can collect again. :)
I'm retired now, and they closed their local plant about a year ago, but
with the popularity of Facebook and some of the other communities among the
engineers and office personnel, I sure I could have. They wouldn't have
needed to know that it was probably all good anyhow with the protection we
ran ;-)
 
B

Big Steel

I'm retired now, and they closed their local plant about a year ago, but
with the popularity of Facebook and some of the other communities among
the engineers and office personnel, I sure I could have. They wouldn't
have needed to know that it was probably all good anyhow with the
protection we ran ;-)

I just got back from the grocery store, I still have Internet access,
and it's a big fizzle on doomsday so far. :)
 
B

BobbyM

I just got back from the grocery store, I still have Internet access,
and it's a big fizzle on doomsday so far. :)
The likelihood of any person being infected by this malware is less than
1/2 of 1 percent.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top