<- Back

DNS Changer Malware Information

June 15, 2012

DNSChanger Malware is NOT a big threat. Major media outlets have taken a warning from the FBI about the DNSChanger malware and are running stories titled 'Don't lose the Internet in July" or "The Internet may stop working in July!". We think these stories are doing a better job of scaring people than of informing them and want to re-assure you that this issue is not one for you to be concerned about at work. You may want to read the rest of this message and check your home PCs, especially any without recent anti-virus or anti-malware programs. DNS is the system which translates domain names into IP addresses so your computers know where to ask for information from the Internet. When you type "Google.com" into your browser, it asks a DNS server for an address, and gets back. "". (If you copy those numbers into your address bar you will get the Google homepage.) Last November, the FBI arrested an Estonian malware gang who were infecting PCs with malware called DNSChanger or DNS Trojan. They had about a 100 fake DNS servers scattered around the US and once infected, your PC would only ask those fake servers for addresses. That control let them send you to any pages they wanted. When the FBI arrested the gang, they realized that turning off the fake DNS servers would mean that anyone infected would not get answers to DNS requests, and trying to go anywhere on the Internet would result in a "Page Not Found" error. Replacement DNS servers were set up to run until March to give time for people to clean the DNSChanger malware off their machines. In March scans showed that about 500,000 PCs in the US were still infected, so a judge ordered the replacement DNS servers to be run until July. Now the FBI is publicizing the issue to encourage people to remove the malware before July. All of the major antivirus and antimalware programs for both Windows and Mac correctly identify and clean the DNSChanger malware so we think your risk of "Losing the Internet" is extremely small. If you would like to check a home or neighbor's PC, you can go to http://dns-ok.us/ and the page will tell you if you are infected. If you need to clean a PC, please download the free version of Malwarebytes Anti-malware software at http://www.malwarebytes.org/. We hope this email alleviates any concerns about this issue but please feel free to email us at support@prosperait.com if you still have questions or need any help. Thank You, The Prospera Service Team