The FBI back in November managed to close down a botnet that was created with the help of a malware called DNSChanger. In operation since 2007 it grew to a size of nearly 4 million infected computer systems of which about 500,000 were located in the United States. The operators manipulated the DNS system of local computer systems to redirect users to other web pages or to replace page elements such as advertisement with their own.
The configured DNS server basically tells the web browser where to look for when a web address such as www.ghacks.net is entered into the browser's address bar. If that lookup is manipulated part or all of the page elements of the website can be replaced by the operators of the rogue DNS server.
The FBI back then replaced the DNS servers that the cyber criminals used with working servers to avoid interruption of service for users affected by the DNS server change.
These DNS servers will however be shut down on March 8th, 2012. Affected users from that day on may not be able to connect to Internet addresses anymore until they replace the DNS server with working ones.
Security company Avira, famous for their antivirus solution, has released the Avira DNS Repair-tool.
You can run the portable program on your system to see if your computer's DNS server has been manipulated by DNSChanger.
The program will reset the DNS servers to Windows default values if it finds out that they have been manipulated by the malware.
It is alternatively possible to check for manipulation manually.
Use the shortcut Windows-r to bring up the run box. Enter cmd in there and tap on the enter key to open the command prompt. Now run the command ipconfig /all and locate the DNS Servers entry. Compare what you see there with the list of rogue DNS servers below
If your DNS server IPs differ from the ones above then congratulations, you are not infected. You otherwise need to change the DNS server. While you could do that manually, you may prefer to use a program for that. You can use the Avira tool to reset the DNS Server, or a program like DNS Jumper to select a public DNS server instead.
You can download the Avira DNS Repair-Tool from the official Avira website
Advertising revenue is falling fast across the Internet, and independently-run sites like Ghacks are hit hardest by it. The advertising model in its current form is coming to an end, and we have to find other ways to continue operating this site.
We are committed to keeping our content free and independent, which means no paywalls, no sponsored posts, no annoying ad formats or subscription fees.
If you like our content, and would like to help, please consider making a contribution:
Ghacks is a technology news blog that was founded in 2005 by Martin Brinkmann. It has since then become one of the most popular tech news sites on the Internet with five authors and regular contributions from freelance writers.