FBI: Computers Infected With DNSChanger Virus May Lose Internet on July 9th

[ surprised there was no thread on this already so if there was and I just missed it please direct me to it and I will merge them @__@ ]
I know, it sounds like a bad chain letter. But apparently this is actually happening, and could leave thousands of people without an internet connection.
Basically, the FBI has issued a statement that on July 9th, they are taking down safe servers they started up as a response to the DNSChanger virus. Anyone still infected with this virus may lose their internet connection.

Source: http://www.snopes.com/computer/virus/dnschanger.asp
& FBI Statement here: http://www.fbi.gov/news/stories/2011/november/malware_110911

 

That's a just try from FBI to show that they can resolve some issues. There are thousands of viruses, far more dangerous. Internet will go off until you remove the virus? Really, think about it and think if it sounds so original. You think there are no viruses that prevent you from being online, one way or another? FBI is trying to show off.

 

Or maybe they could just be solving a problem. Imagine that.

 

Whoever believes that has the logic of a 5-year-old kid who doesn't want to believe other facts than what he's been told.

 

Hey guys, guess what? I just found out I was infected like two days ago. At first it started with a message from Google telling me to check my laptop since it detected it was infected. I ignored it and thought maybe it was some virus, so I did a quick scan and got nothing. But now it turns out my computer really is connected to the DNSChanger. Already checked my IP and it fits with the address of the harmful DNS.


I've already ran a lot of the programs they have in the site to help me, but they keep telling me Im not infected, but when I go to the site that tells you if you're infected or not, it tells me Im infected. T_________T


Sorry for crying about it on here, but if anyone haves an ideas no prob Im open for any suggestions. I got two days left. Reinstalling everything might be my only option.





But yeah, scary thing that this is happening..... I feel so weak not being able to do something about it, especially since Im no specialist when it comes to these things. I NEED MY INTERNETS I JUST FOUND OUT BATTLE ROYALE AND BATTLE ROYALE 2 ARE ON NETFLIX. ;-; Oh well, I'll watch em once I get my internets back somehow.

 

Right. "Facts". Everything else you read on the internet is completely true and the FBI is nothing but a prick waving dick fest. Whatever you say, buddy.

 

Hey guys, let's not start an argument in here. The reason I posted the thread was to warn people about it so that if they found they were infected, they would know about & could hopefully do something before the cutoff date.

For those curious, you can check if you are infected here: http://www.dns-ok.us/
If the background on the image is green, you're most likely in the clear. If it's red, you're infected.

@rat -- which tools have you tried so far to remove it?

 

Just did the test, and mine seems to be ok.

I did not know anything about this, and it kinda scared me for a sec. I don't remember hearing anything about a DNSChanger virus, so glad I know about it now.

 

Thank you, Star, for taking the time to post this.

I just performed the test, and mine is green, too, so my mom and I are a-okay! :smile:

 

You know that page the DNSChanger group haves with a list of programs to use and get rid of it? I've already tried all of em. I scanned my computer with them, and every time the anti-virus program tells me Im clean. I think I might've have taken it off my laptop, but maybe Im in a way still infected because my network is connected to the DNSChanger?

I also tried this Avira DNSChanger Repair, which fixes my DNS settings. Whenever I pop it up, it tells me my DNS system settings have been manipulated by the DNSChanger. It then asks if I would like to repair my system and reset my DNS record to the Windows standard settings, which I accept.
After doing that, I have to reboot my laptop, but whenever I do, it starts beeping and it won't load the screen. I have to turn it off and turn it on again until it starts working normally. Then I check my DNS settings by going to the Search programs and files, typing in cmd, then I type in ipconfig /all, and then it shows that my network is still connected to the corrupted DNSChanger system.
I wish my laptop would stop spazzing whenever I have to reboot.



Also, a little message to anyone going in that link provided by Star to see if you're infected: If you haven't gotten a message from Google or Facebook telling you your computer may be infected, then you're fine.

I look at the DNSChanger group site and it showed the harmful DNS servers, and mine is 213.109.68.8

Mine matches them, except for the 68.8 part.

 

Have you tried to reboot in safe mode ?

 

Did you change your DNS settings afterwards? Apart from letting the program do it for you automatically.

 

Hmmmm...I think I might have. In safe mode I think I ran that Avira program, but even after rebooting in safe mode, it kept going?


I'll try again some other time.

 

Luckily I'm fine, just did a full scan and quarantine so I should be all right.

 

Just checked all five of the family's computers, including my two laptops. We're all clean.

I was especially worried about my old Dell and the desktop...those two are older than dirt and couldn't been exposed. But they weren't. Still didn't stop my mother from laughing at me.

 

Im using wireless connection, so I don't think I can change it permanently? I gotta be plugged directly to the computer and change the DNS?


At least that's what I think cause I've tried changing the DNS, and it gets back to the infected network.

Sigh.... Im gonna miss you guys.

 

It is possible that if you had the default username and password for your router's page the settings have been changed from there, so you might have to change them back from within the router too. Go your router's page by entering the approprite IP in the URL bar, enter the details to login, and for the rest you can use google to find out because navigation there is different depending on the router.
Now that I mentioned google, it offers some open DNS addresses for "victims". You could try to see if changing it to google's addresses fixes the problem.

In the worst case you backup your important files (make sure they're clean!) and format the partition.
And make sure that you install Malwarebytes Anti-Malware this time and regularyl scan your computer with it. In fact, I'd suggest you do the same before formatting.

 

All you need to do is to back up your important files and format the HDD. Yeah, it's annoying, but isn't a problem, really. Unless the virus goes into the BIOS, which I don't think any "common," if any virus can. (Basically, what I'm saying is it's not a big deal) :]


Didnt notice that this was said already -.-

 

Checked my laptop, and I'm all good (I didn't get the virus).
But yeah, I do kinda find it interesting that the FBI was (if they were) showing off. My former laptop (my Vista, I use Windows7) had a much deadlier virus, that wiped clean about 78% of my data, then eventually crashed a week after. (But I don't blame the no-solution thing a bit, I had that computer for about 4 years before it crashed).
Still, though. I can't really believe that the FBI was showing off, nor can I believe that they weren't...

 

Not sure what this means but I got this when going to that site:
This site can no longer determine if your system is infected with the DNSchanger malware.

The DNS-OK.US site relied on the government provided DNS servers to determine if a system was or was not infected. Those servers were deactivated on July 9, 2012 in accordance with the expiration of the court order that authorized those servers.

Many Internet service providers modified their networks in such a manner as to allow infected systems to continue to operate. If those systems access this website, they would receive the "You are not infected" message, which would be inaccurate.