What exactly to do about the Internet malware threat Monday

You may have seen stories in the news recently regarding a computer virus that is reported to threaten your access to the internet beginning July 9. This virus has a name: "DNS Changer."

The DNS (Domain Name Services) Changer is a trojan virus that modifies your PC settings without your knowledge in order to divert you to a malicious website. The fake websites increase the number of web-hits which translates to trumped-up advertising revenue for the malicious website. Sneaky, ingenious, but very illegal.

This virus isn't much different than any other; the exception in this case is that the FBI caught and arrested those responsible. The FBI is now in control of the hacker's website and will shut down the hacker site on July 9, 2012. For those computers that have been infected with the virus, the computer will show an error message when trying to access the internet starting on July 9.

The number of computers worldwide that are actually infected is very small, yet this case is drawing lots of attention and a somewhat panicked reaction. Since it is drawing so much media attention, we thought it would be helpful to clear up any misconceptions, and provide helpful information for you to check the computer systems you use.

Some Reassurance

For starters, there are very few computers, compared to the number in use world-wide, that will actually be infected. It is possible that if anti-virus files are not or were not updated on a timely basis, that a small number of computers at a specific location could be affected. Most of the vulnerability will involve home PCs that are not regularly using or updating anti-virus software.

What does all this mean in English? I am not a techie!

OK, you try to use your computer (a Windows PC, a Macintosh, etc.) on July 9 and you can't get to the internet. Everything else with your computer seems to work, but you can no longer browse websites on the internet! You might be infected with this virus.

What do I do?

You can take action now to check your system. It is highly recommend that you be proactive and go to the link listed below. It's supported by the FBI and is legitimate. It will help you identify if you have been infected. Be forewarned, if you wait until July 9 and you have an issue, you will not be able to access these sites listed on this page.

Click here to access this site (or copy and paste into your browser): http://www.dns-ok.us/. It is a very busy site as you can imagine, so you may need to try it a few times. If the background turns up green, then you do not have this virus and you are fine.

OMG! The background is red. Now what?

First and foremost, don't panic. Everyone hates viruses but they happen to the best of us; it'll be OK. Here's what you do: it is recommended to install a reputable anti-virus software and attempt to clean the system. The link listed below will provide you with access to numerous reputable sites with tested remedies to this virus. Select the link that your anti-virus provider uses (you do have anti-virus software, right?) and follow the instructions. If you're not a do-it yourselfer, there are quite a few good companies that will do this for you. http://www.dcwg.org/fix/

What about my smartphone or tablet (e.g., iPhone, iPad, Droid, etc.)?

These devices are not expected to be impacted by this threat.

The internet is a great place to work and play, but we need to be careful. The most effective protection is YOU. By making sound decisions and taking a few precautions, you can make your professional and personal internet experience both safe and enjoyable.

Jim Bundy is the manager of Information Security, E.W. Scripps company.

© 2012 Knoxville News Sentinel. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

  • Discuss
  • Print

Related Topics

Related Stories

Comments » 19

smcspad writes:

This is a very good follow-up article to the terrible one on the same subject that appeared in the Friday News Sentinel. In addition to providing a confusing explanation of the problem and no useful information, the Friday article gave the wrong URL (web address) for the help site. The "reporter" should have verified that the web address (that described how to check for and fix the problem) was correct, even if everything else in the article was wrong.

lail#204076 (staff) writes:

in response to smcspad:

This is a very good follow-up article to the terrible one on the same subject that appeared in the Friday News Sentinel. In addition to providing a confusing explanation of the problem and no useful information, the Friday article gave the wrong URL (web address) for the help site. The "reporter" should have verified that the web address (that described how to check for and fix the problem) was correct, even if everything else in the article was wrong.

Not sure if this is the article you are referring to, but all the links seem to be correct?

http://www.knoxnews.com/news/2012/jul...

-- jack lail
Knoxville News Sentinel

velocipede writes:

How do we know someone didn't hack the KNS and put this article on there giving the URL to take us to the website and infecting us with the virus? Inquiring minds want to know....

SouthKnoxGirl writes:

I used the link on Friday and it worked for me! Thanks for the info KNS!

rayt435 writes:

in response to NOT_4_LONG_KNS:

(This comment was removed by the site staff.)

The site says this: "DNS Resolution = GREEN".

Being color blind does not mean you cannot read.

SmixonNack writes:

in response to velocipede:

How do we know someone didn't hack the KNS and put this article on there giving the URL to take us to the website and infecting us with the virus? Inquiring minds want to know....

Actually...

I had absolutely zero issues with this malware until I went to the website given here, which showed green. Within fifteen minutes of visiting that site, my browser was hijacked in the exact manner described above. I fixed it, but it was a nuisance.

What I want to know is why did I get infected after visiting an FBI supported website meant to combat this malware?

EaTn writes:

in response to SmixonNack:

Actually...

I had absolutely zero issues with this malware until I went to the website given here, which showed green. Within fifteen minutes of visiting that site, my browser was hijacked in the exact manner described above. I fixed it, but it was a nuisance.

What I want to know is why did I get infected after visiting an FBI supported website meant to combat this malware?

If this being true I suggest you contact the authorities to report this case. I did the check a few $##$$#$#$$$#$$#$#$#$#$#$$##$$##$ and have not had any issues with my computer.

JblowRepublican writes:

in response to SmixonNack:

Actually...

I had absolutely zero issues with this malware until I went to the website given here, which showed green. Within fifteen minutes of visiting that site, my browser was hijacked in the exact manner described above. I fixed it, but it was a nuisance.

What I want to know is why did I get infected after visiting an FBI supported website meant to combat this malware?

I tried it lets see what happens.

trat writes:

Do you want the FBI scanning your computer?

CynthiaCanter writes:

Here's a way to check your computer that I found on that website: Click on Control Panel, Go into your network and sharing center, click on wireless network connection if your connection is wireless. (My computer is Windows 7, but if you know how to get in to your Control panel settings on another system, it should be fairly similar. I do not know what to do with it if it is hard wired but there would have to be a way to check that in there.)
Ok, You'll have a little box that says Wireless Network Connection Status. At the bottom of this box click on Properties. In the box that comes up look for Internet Protocol Version 4 (TCP/ipv4). Click on that to highlight it then click properties. Make sure the circles saying Obtain an IP Address Automatically and Obtain DNS Server Address Automatically are ticked. If they are, you are fine. If the DNS circle is not ticked and you have a list of several DNS addresses listed, go to that website and find the list of problem addresses. There might be trouble with your computer.

DoctorWho writes:

in response to trat:

Do you want the FBI scanning your computer?

Depends on what you have to hide I guess. Your ISP already monitors the sites you visit and the files you download.

MotherNature writes:

in response to CynthiaCanter:

Here's a way to check your computer that I found on that website: Click on Control Panel, Go into your network and sharing center, click on wireless network connection if your connection is wireless. (My computer is Windows 7, but if you know how to get in to your Control panel settings on another system, it should be fairly similar. I do not know what to do with it if it is hard wired but there would have to be a way to check that in there.)
Ok, You'll have a little box that says Wireless Network Connection Status. At the bottom of this box click on Properties. In the box that comes up look for Internet Protocol Version 4 (TCP/ipv4). Click on that to highlight it then click properties. Make sure the circles saying Obtain an IP Address Automatically and Obtain DNS Server Address Automatically are ticked. If they are, you are fine. If the DNS circle is not ticked and you have a list of several DNS addresses listed, go to that website and find the list of problem addresses. There might be trouble with your computer.

Thank you!

hystericalsociety writes:

in response to trat:

Do you want the FBI scanning your computer?

Not really, but I'll bet they are doing it anyway...

Esau writes:

in response to trat:

Do you want the FBI scanning your computer?

I've worked it the IT security field for many years. Believe me if the FBI wants to know whats on your computer they will know.

GOJO writes:

in response to groundkeeper:

(This comment was removed by the site staff.)

&&&&&&&&&&&&&&&&&&

See if it tells you where to meet them - - then go - - OMG

Urban_jj writes:

Thanks

bretticus25#294810 writes:

in response to trat:

Do you want the FBI scanning your computer?

If the government would take my opinions to heart, then it might save them. Scan away.

Urban_jj writes:

BTW, there is no scanning of your computer. The site checks the DNS listing that was requested by your computer and shows red if it has been "re-directed."

Olaf writes:

Only Windows PCs are vulnerable per FBI announcement. You can sit back an relax if you use Mac OSX, Linux or Unix PCs:

http://it.slashdot.org/story/12/07/08...

Share your thoughts

Comments are the sole responsibility of the person posting them. You agree not to post comments that are off topic, defamatory, obscene, abusive, threatening or an invasion of privacy. Violators may be banned. Click here for our full user agreement.

Comments can be shared on Facebook and Yahoo!. Add both options by connecting your profiles.

Business Profiles

Best Lawyers

Contact Us

Features