Log in or Sign up

Hundreds of thousands may lose Internet in July

Discussion in 'Trucking Electronics, Gadgets and Software Forum' started by lovesthedrive, Apr 21, 2012.

Page 1 of 4

lovesthedrive R.I.P.

Joined:

Nov 11, 2008

Messages:

15,953

Thanks Received:

54,484

Location:

Sorrento Maine

0

http://bangordailynews.com/2012/04/20/business/hundreds-of-thousands-may-lose-internet-in-july/

WASHINGTON Hundreds of thousands of computers worldwide may have been infected by hackers in an online advertising scam and may lose their ability to connect to the Internet on July 9.
Click to expand...

Easiest way to find out if your computer and internet systems are ok is to click on this link.

http://dns-ok.us/

If your green, you have nothing to worry about. If you are red, there is a link there to help you.

No joke, please check your machines. Thankyou.

lovesthedrive, Apr 21, 2012

#1
Pmracing Road Train Member

Joined:

Jan 28, 2011

Messages:

6,354

Thanks Received:

3,178

Location:

Arlington Heights, IL

0

I saw this on facebook...

But I don't click links on facebook. Especially ones that mention hacking virus and scams right in the context!!!!

I'll wait to follow someone braver than I!

And if they know enough about it to be able to test for it, why can't they stop it before it happens?

Mikeeee

Pmracing, Apr 21, 2012

#2
windsmith Road Train Member

Joined:

Sep 2, 2011

Messages:

7,296

Thanks Received:

6,031

Location:

NEPA

0

Don't click on the link above, use THESE INSTRUCTIONS from the FBI website to determine if you're at risk.

windsmith, Apr 21, 2012

#3
Pmracing Road Train Member

Joined:

Jan 28, 2011

Messages:

6,354

Thanks Received:

3,178

Location:

Arlington Heights, IL

0

windsmith said: ↑

Don't click on the link above, use THESE INSTRUCTIONS from the FBI website to determine if you're at risk.
Click to expand...

Hahahahaa, another link! hehehehe

Mikeeee

Pmracing, Apr 21, 2012

#4
walstib Darkstar

Joined:

Sep 25, 2010

Messages:

4,678

Thanks Received:

35,436

Location:

Since you aren't there, your house!

0

windsmith said: ↑

Don't click on the link above, use THESE INSTRUCTIONS from the FBI website to determine if you're at risk.
Click to expand...

This link is safe as it only opens a pdf file from FBI...I scanned it first and found it safe then followed instructions to check my machine...It's a non-invasive method to check your computer and takes less than 2 minutes...Nothing is downloaded, you only check "rogue" server numbers against the ones you're using...

walstib, Apr 21, 2012

#5

windsmith Thanks this.
Pmracing Road Train Member

Joined:

Jan 28, 2011

Messages:

6,354

Thanks Received:

3,178

Location:

Arlington Heights, IL

0

walstib said: ↑

This link is safe as it only opens a pdf file from FBI...I scanned it first and found it safe then followed instructions to check my machine...It's a non-invasive method to check your computer and takes less than 2 minutes...Nothing is downloaded, you only check "rogue" server numbers against the ones you're using...
Click to expand...

Thanks for doing that work.

But PDF files can be infected also, just FYI.

Mikeeee

Pmracing, Apr 21, 2012

#6
Pmracing Road Train Member

Joined:

Jan 28, 2011

Messages:

6,354

Thanks Received:

3,178

Location:

Arlington Heights, IL

0

this is from the pdf file

What Does DNSChanger Do to My Computer?

DNSChanger malware causes a computer to use rogue DNS servers in one of two ways.
First, it changes the computer's DNS server settings to replace the ISP's good DNS servers
with rogue DNS servers operated by the criminal. Second, it attempts to access devices on
the victim's small office/home office (SOHO) network that run a dynamic host configuration
protocol (DHCP) server (eg. a router or home gateway). The malware attempts to access
these devices using common default usernames and passwords and, if successful, changes
the DNS servers these devices use from the ISP's good DNS servers to rogue DNS servers
operated by the criminals. This is a change that may impact all computers on the SOHO
network, even if those computers are not infected with the malware.

Am I Infected?

The best way to determine if your computer or SOHO router has been affected by
DNSChanger is to have them evaluated by a computer professional. However, the following
steps can help you gather information before consulting a computer professional.
To determine if a computer is using rogue DNS servers, it is necessary to check the DNS
server settings on the computer. If the computer is connected to a wireless access point or
router, the settings on those devices should be checked as well.

Checking the Computer:

If you are using a Windows computer, open a command prompt. This can be done by
selecting Run from the Start Menu and entering cmd.exe or starting the command prompt
application, typically located in the Accessories folder within Programs on your Start Menu,
as shown below:

At the command prompt, enter:
ipconfig /all

Look for the entry that reads "DNS Servers.........."

The numbers on this line and the line(s) below it are the IP addresses for your DNS servers. These numbers are in the format of nnn.nnn.nnn.nnn, where nnn is a number in the range of 0 to 255. Make note of the IP addresses for the DNS servers and compare them to the table of known rogue DNS servers listed later in this document. If the IP addresses of your DNS server appear in the table below, then the computer is using rogue DNS.

You can also look for your DNS servers without using the command prompt.
For windows XP machines, click on Start and select My Network Places. Then select Network Connections. In this example, the wireless connection is used.
Click to expand...

Rogue DNS Servers
To make the comparison between the computer's DNS servers and this table easier, start by comparing the first number before the first dot. For example, if your DNS servers do not start with 85, 67, 93, 77, 213, or 64, you can move on to the next step. If your servers start with any of those numbers, continue the comparison.
85.255.112.0 through 85.255.127.255
67.210.0.0 through 67.210.15.255
93.188.160.0 through 93.188.167.255
77.67.83.0 through 77.67.83.255
213.109.64.0 through 213.109.79.255
64.28.176.0 through 64.28.191.255
If your computer is configured to use one or more of the rogue DNS servers, it may be infected with DNSChanger malware.
Home computers with high-speed Internet connections and office computers typically obtain their IP settings via DHCP from a device on the network. In these cases, the computers are provided with an IP address, default gateway, and DNS server settings. The IP addresses usually fall into one of three ranges of private addresses'192.168.0.0 to 192.168.255.255; 172.16.0.0 to 172.31.255.255; and 10.0.0.0 to 10.255.255.255. In most homes, computers are assigned an IP address in the range 192.168.1.2 to 192.168.1.254, and the default gateway and DNS servers are set to 192.168.1.1. To determine if your computer is utilizing the rogue DNS servers, read the next section, Che
Click to expand...

Checking the Router
Small office/home office routers connect your network of computers and devices to your Internet service provider. The SOHO router may have been purchased and installed by you or installed by your ISP. Linksys, D-Link, Netgear, and Cisco are common SOHO router brands, but there are many others.
The DNSChanger malware is capable of changing the DNS server settings within SOHO routers that have the default username and password provided by the manufacturer. If you did not change the default password at the time the SOHO router was installed, you must check the SOHO router settings.
The procedure to access your SOHO router setting varies by manufacturer, so consult your product documentation. Once you have access to the SOHO router configuration, compare the DNS servers listed to those in the rogue DNS servers table above. If your SOHO router is configured to use one or more of the rogue DNS servers, a computer on your network may be infected with DNSChanger malware.

What Should I Do?
In addition to directing your computer to utilize rogue DNS servers, the DNSChanger malware may have prevented your computer from obtaining operating system and anti-malware updates, both critical to protecting your computer from online threats. This behavior increases the likelihood of your computer being infected by additional malware. The criminals who conspired to infect computers with this malware utilized various methods to spread the infections. At this time, there is no single patch or fix that can be downloaded and installed to remove this malware. Individuals who believe their computer may be infected should consult a computer professional.
Individuals who do not have a recent back-up of their important documents, photos, music, and other files should complete a back-up before attempting to clean the malware or utilize the restore procedures that may have been packaged with your computer.

Information regarding malicious software removal can be found at the website of the United States Computer Emergency Readiness Team: https://www.us-cert.gov/reading_room/trojan-recovery.pdf.
Click to expand...

Pmracing, Apr 21, 2012

#7
CondoCruiser The Legend

Joined:

Apr 18, 2010

Messages:

19,726

Thanks Received:

18,734

Location:

Tennessee

0

I'm in no hurry. This just started spreading the scare on the news yesterday.

I checked the websites with Norton Safe Web and they say they are okay, but there is no feedback yet. Sites with traffic usually have feedback.

There's still plenty of time. I wouldn't jump the gun until there is more feedback.

One way to get you to download malicious software is to trick you.

CondoCruiser, Apr 21, 2012

#8

123456 Thanks this.
walstib Darkstar

Joined:

Sep 25, 2010

Messages:

4,678

Thanks Received:

35,436

Location:

Since you aren't there, your house!

0

Pmracing said: ↑

Thanks for doing that work.

But PDF files can be infected also, just FYI.

Mikeeee
Click to expand...

If you read what I wrote, I scanned the file first...

walstib, Apr 21, 2012

#9
Pmracing Road Train Member

Joined:

Jan 28, 2011

Messages:

6,354

Thanks Received:

3,178

Location:

Arlington Heights, IL

0

walstib said: ↑

If you read what I wrote, I scanned the file first...
Click to expand...

I did read what you wrote, but you also wrote this:

This link is safe as it only opens a pdf file from FBI.
Click to expand...

It sounds like you know what you are doing. My comment was for anyone that might not know that PDFs can be infected.

Mikeeee

Pmracing, Apr 21, 2012

#10

(You must log in or sign up to reply here.)

Page 1 of 4

Search