What Does DNSChanger Do to My Computer?

What Does DNSChanger Do to My Computer?

DNSChanger malware causes a computer to use rogue DNS servers in one of two ways.
First, it changes the computer’s DNS server settings to replace the ISP’s good DNS servers with rogue DNS servers operated by the criminal.
Second, it attempts to access devices on the victim’s small office/home office (SOHO) network that run a dynamic host configuration protocol (DHCP) server (eg. a router or home gateway). The malware attempts to access these devices using common default usernames and passwords and, if successful, changes the DNS servers these devices use from the ISP’s good DNS servers to rogue DNS servers operated by the criminals. This is a change that may impact all computers on the SOHO network, even if those computers are not infected with the malware.

Source : http://www.fbi.gov/news/stories/2011/november/malware_110911/DNS-changer-malware.pdf

continue reading

DNS Changer Check-Up

To find out if your computer is infected by DNS Changer malware. You can use the antivirus which has vitur to eliminate DNS Changer (DNS Changer Removal). In addition, you can also check online through:

• dns-changer.eu

DNS-Check in 3 Steps

This wizard guides you step by step through the test. To perform the test you have to agree to the transmission of the data indicated below by enabling the checkbox. In the second step, we check both dns-ok.de and a database operated by us with the DNS data provided by FBI. On the result page you'll be shown if there is a likely manipulation of your DNS settings and in that case additionally a link with further instructions for your operating system.

• dns-ok.us

DNS Changer Check-Up

DNS Resolution = GREEN  Your computer appears to be looking up IP addresses correctly! Had your computer been infected with DNS changer malware you would have seen a red background.  Please note, however, that if your ISP is redirecting DNS traffic for its customers you would have reached this site even though you are infected. For additional information regarding the DNS changer malware, please visit the FBI's website at: http://www.fbi.gov/news/stories/2011/november/malware_110911

continue reading