Wednesday, 23 May 2012

Have you been infected with DNS Changer virus?

News of an interesting development from the world of computer viruses. For some time a virus known as "DNS Changer" has been infecting computers around the world. The point of the virus was to mischievously re-direct the internet browser of infected PCs to sites which were linked to "pay per click" adverts. The virus writers would then make money from users clicking on those adverts.

When you access the internet your computer goes to a "DNS Server" for information on where to point your browser. This virus pointed you to rogue DNS Servers in a simple scam.

The FBI seized the DNS Servers which were running these web sites back in November 2011, and converted them into honest DNS servers.

However, they now wish to close them down, as running such servers costs money and it isn't really what the FBI do. The servers are to be closed down on July 9th 2012.

But, after that date, infected computers won't be able to access the internet at all. The computer will attempt to find a DNS Server which no longer exists. 


Still, all is not lost. To see whether or not your computer is infected visit http://www.dns-ok.us

If you get the message "Your computer appears to be looking up IP addresses correctly!" all well and good. If you get a warning you should contact your IT Support company for guidance.


If you know how to check your own DNS Settings you need to do so on all computers, tablets, smartphones etc as well as your router. 

If your router configuration can be accessed using the default password you should change this to a more secure password - and write it on the router.

The following is a list of rogue DNS Servers. If your equipment is using any of the DNS Servers listed you should change these, or set the equipment to get a DNS Server automatically.


64.28.176.0 - 64.28.191.255
67.210.0.0 - 67.210.15.255
77.67.83.0 - 77.67.83.255
85.255.112.0 - 85.255.127.255
93.188.160.0 - 93.188.167.255
213.109.64.0 - 213.109.79.255


 ____________________________________________________
Sign up for our Monthly Newsletter
The IT Dept offers computer support services in Lancashire, including Monthly On-Site or Remote Support Contracts; Secure Online Data Backup; Domain Hosting; Server and Desktop Sales; Software Supply & Installation. We cover all of Lancashire, including Chorley, Preston, Blackburn, Darwen, Bolton, Wigan, Blackpool, etc.
© Michael Donkin 2012