{"id":14237,"date":"2012-07-07T22:08:08","date_gmt":"2012-07-07T14:08:08","guid":{"rendered":"https:\/\/www.hongkiat.com\/blog\/?p=14237"},"modified":"2024-08-16T18:29:26","modified_gmt":"2024-08-16T10:29:26","slug":"preventing-dnschanger-malware","status":"publish","type":"post","link":"https:\/\/www.hongkiat.com\/blog\/preventing-dnschanger-malware\/","title":{"rendered":"Protect Your System from Internet Threats Now!"},"content":{"rendered":"

You probably have not heard of DNSChanger malware<\/strong>. If this is true, you have probably less than 48 hours to know what it\u2019s about and how it could affect you. Come to think of it, we know what it could do to you: it could keep you off the Internet from the 9th of July onwards. You will experience firsthand what the death of the Internet feels like.<\/p>\n

We hope we got your attention already because time is of the essence. Let\u2019s cover the basics real quick.<\/p>\n

Understanding DNSChanger Malware<\/h2>\n

DNSChanger is malware discovered in 2007 that infected millions of computer systems worldwide. Cybercriminals released it to take control of your web server. The malware intercepts websites visited by your web browser and redirects you to other sites they prepared, so you will then use the server under their control. Once you are infected, you are set to use only their server every time you go online. This DNS server will alter every user search, giving fake and malicious answers as well as promoting fake and dangerous products. It is showing users an altered version of the Internet.<\/p>\n

\"Representation<\/figure>\n

The main idea of this server is to easily push web ads to you, earning themselves millions of dollars. You can still surf the Internet like normal if the server keeps running.<\/p>\n

Why You Should Remove DNSChanger Malware<\/h2>\n

When the FBI and the Estonian Police seized these controlled servers sometime in 2011, they cleaned up all the crime operations. However, the servers were kept running to serve all infected systems. If they had shut the server down, the web activities of these infected systems would be disrupted. This means that if your system is one of the infected ones, you can no longer go online.<\/p>\n

\"Illustration<\/figure>\n

Since the seizure, a special group called DNSChanger Working Group (DCWG) was assigned to maintain the servers, but as it was a costly operation to maintain, a final decision was made to turn these DNS servers off.<\/p>\n

This will happen on July 9th, 2012<\/strong>.<\/p>\n

Earlier this year, there were about 450,000 computer systems still infected, but it has now been reduced to about 277,000. With the downtime on these servers, if your system is among the 277,000 infected, you will not be able to go online after July 9th \u2013 unless you remember every IP address of the websites you want to visit.<\/p>\n

How to Find Out if Your System is Infected<\/h2>\n

Firstly, you must find out if your system is among the still affected 277,000 systems. Since May 2012, Google has taken the initiative to inform you if they found the DNSChanger Malware in your system, by giving you an alert on their website. When you see the alert, click on the link \u2018Learn how to remove this software\u2019 and Google will guide you on the steps to remove the malware.<\/p>\n

\"Google<\/figure>\n

If you don\u2019t see the warning on Google\u2019s site, you can also visit DCWG\u2019s official website to find out if your system is one of the victims, and if it is, follow the guide to removing it.<\/p>\n

\"DNSChanger<\/figure>\n

How to Remove DNSChanger Malware<\/h2>\n

If you have been affected by the DNSChanger Malware, you need to fix your computer system. Researchers suggest that the only way to fix your computer is to reformat your hard drive and reinstall the Operating System from scratch. Reverting your OS to a prior backup is not enough since the malware will be able to reclaim your system.<\/p>\n

\"Steps<\/figure>\n

As suggested by DCWG, there are a few steps to follow if you are infected:<\/p>\n

    \n
  1. \n

    Backup<\/strong> all your important files.<\/p>\n<\/li>\n

  2. Follow the self-help guide<\/strong> as provided by the \u2018free tools\u2019 in the list below.<\/li>\n
  3. \n

    Once your computer is clean, follow instructions to ensure your DNS settings are correct<\/strong>.<\/p>\n<\/li>\n

  4. After fixing your computer, make sure your router<\/strong> (if you are using one) uses the DNS settings provided by your ISP<\/strong>.<\/li>\n
  5. Changing DNS is only one of the functions of the malware kit. The malware could have captured some of your important information, so it is a good idea to check your bank statements and credit reports<\/strong> and take precautions by changing your passwords<\/strong> on any online accounts.<\/li>\n<\/ol>\n

    There are several free tools with self-help guides available to help you remove DNSChanger and related threats:<\/p>\n