DNS Changer

What is the DNS Changer?  Basically it’s another virus – call it malware if you want. What DNS Changer does is change the Domain Name System (DNS) settings on your pc enabling criminals to direct you to fraudulent websites and otherwise interfere with your access to the Internet.  DNS Changer has been associated with ‘click fraud’ the installation of malware and malware activities.

The FBI in November 2011 closed down a ring of cyber-criminals believed to be responsible for the DNS Changer.

How does all of this affect you?  Firstly you need to check your system to see if you are infected. Virus protection companies have worked on this and a quick search through your favourite search engine will find a site to check your pc, otherwise link to the Australian Government website http://www.dns-ok.gov.au/ and see if your pc is ok.

Up to four million users could be affected worldwide. To avoid losing access to internet services, the FBI and the Internet Systems Consortium (ISC) set up and operate a temporary but correct DNS solution, while giving ISPs the opportunity to assist their customers to remove their potential infection.

This temporary solution will be switched off on 9 July 2012. Users infected by DNSChanger will be unable to access internet services when the temporary DNS solution is switched off.

Potential ‘false negatives’

It’s possible your network administrator or Internet Service Provider is transparently rerouting your DNS traffic. This action may have been taken to negate the effects of DNSChanger, providing you with ongoing access the Internet after 9 July 2012.

If you are being rerouted then,  it may be possible that one or more of your pc’s is infected by the DNS Changer.

You can perform a manual check on your pc If your DNS is being rerouted,. For more information on how to do this, refer to the FBI DNSChanger document (PDF).