[coastie65]

Well, I just ran across this and thought I'd put it up. It appears there is a new trojan out there that will cut off your internet access as of 9 July. http://www.dcwg.org/detect/ Nothing is downloaded to your computer with this check.

This post has been edited by coastie65: 14 May 2012 - 10:12 AM

[LincolnSpector]

coastie65, on 13 May 2012 - 02:52 PM, said:

Well, I just ran across this and thought I'd put it up. It appears there is a new trojan out there that will cut off your internet connection as of 9 July. http://www.dcwg.org/detect/ Nothing is downloaded to your computer with this check.

Hi, Coastie.


It's not new, and it won't cut off your Internet connection. But if you're infected with it, you will lose your Internet access on that date.

What DNSchanger (a rootkit, I believe) does is redirect your DNS to the bad guys' server, so they can direct you to whatever sites they want you to visit.

The good news is that the these bad guys have been caught and the servers taken over by the FBI. The bad news is: What should the FBI do with them? Close them down, and everyone who's infected loses their Internet connection.

So the FBI is running the DNS server, and hopefully running it honestly. But only until July. When they shut it down, people with infected PCs will lose their Internet access.

Lincoln

[coastie65]

LincolnSpector, on 14 May 2012 - 08:19 AM, said:

coastie65, on 13 May 2012 - 02:52 PM, said:

Well, I just ran across this and thought I'd put it up. It appears there is a new trojan out there that will cut off your internet connection as of 9 July. http://www.dcwg.org/detect/ Nothing is downloaded to your computer with this check.

Hi, Coastie.


It's not new, and it won't cut off your Internet connection. But if you're infected with it, you will lose your Internet access on that date.

What DNSchanger (a rootkit, I believe) does is redirect your DNS to the bad guys' server, so they can direct you to whatever sites they want you to visit.

The good news is that the these bad guys have been caught and the servers taken over by the FBI. The bad news is: What should the FBI do with them? Close them down, and everyone who's infected loses their Internet connection.

So the FBI is running the DNS server, and hopefully running it honestly. But only until July. When they shut it down, people with infected PCs will lose their Internet access.

Lincoln

Hey Lincoln, yeah, I misworded that I should have said it would misdirect you to the bad guys site. Thanks for clarifying that. People need to run the check and get the fix if needed, for sure.

This post has been edited by coastie65: 14 May 2012 - 10:15 AM

[LincolnSpector]

Jared Newman wrote a good article on this a few weeks ago: http://www.pcworld.c...e_campaign.html.

Too good, from my point of view. I was going to use your question for an Answer Line blog post, but there was nothing I could say that Jared hadn't already taken care of.

Lincoln

[coastie65]

Yeah, that was a pretty thorough article alright.

[SpiritWind]

The May 2 Issue of Windows Secrets Newsletter has an article
titled "DNSChanger is not the end of the world" available at
http://WindowsSecret...nd-of-the-world .

This post has been edited by SpiritWind: 14 May 2012 - 09:58 PM

[gaylordsecury36]

LincolnSpector, on 14 May 2012 - 11:54 AM, said:

Jared Newman wrote a good article on this a few weeks ago: http://www.pcworld.c...e_campaign.html.

Too good, from my point of view. I was going to use your question for an Answer Line blog post, but there was nothing I could say that Jared hadn't already taken care of.

Lincoln

Interesting and informative article.
Thanks for sharing this one.