Virus could knock computers offline Monday - July 9

Virus could knock computers offline Monday
http://www2.dothaneagle.com/news/2012/jul/07/virus-could-knock-computers-offline-monday-ar-4093206/

A nasty computer virus could be lurking inside your computer, keeping you from connecting to the Internet when you try to log on Monday.

However, you can find out if your computer is infected and take steps to remove it before it takes effect.

The virus is known as DNSChanger, and has infected about 4 million computers since it was created five years ago by Estonian cybercriminals. The malware causes computer users who click on legitimate Internet sites to be redirected to other sites with malicious advertisements.

This is how the virus works:

Domain names such as “dothaneagle.com” actually have numeric addresses that allow computers to communicate with each other. When users connect to dothaneagle.com, the numeric address assigned to their computer communicates with the numeric address assigned to dothaneagle.com through what is known as DNS servers.

Some cybercriminals have learned how to control the DNS servers, which means that users may think they are connecting to a specific site, but criminals have manipulated the numeric addresses at the DNS Servers to send those users to sites controlled by the criminals.

The FBI arrested the cybercriminals in November of last year and set up temporary “safety net” servers to redirect the infected users back to safe sites so the infected users would have adequate time to remove the virus. Those servers are scheduled to be taken down Monday.

With the safety net servers down, users who have the virus will probably not be able to connect to the Internet.

Users who do not know if their computers are infected can check them by visiting http://www.dns-ok.us/ and following the instructions.

Users can conduct a more thorough check by visiting http://www.fbi.gov/news/stories/2011/november/malware_110911/DNS-changer-malware.pdf.

Users who do have the virus can visit http://www.dcwg.org/fix/ for a list of tools that should remove the virus.

Mike McArdle of DothanPC Computer Repair said the DNSChanger virus is nasty, but not as debilitating as some others. McArdle said no computer is 100 percent safe, but users can take basic steps to reduce the risk of viruses.

“The only safe computer is one that is not connected to the Internet,” McArdle said.

McArdle offered these tips to reduce the risk of computer viruses:

» Use an anti-virus program. McArdle said virus programs are not “one size fits all.” He suggested researching antivirus programs – both free and at cost.

» Make sure the anti-virus program is current. McArdle said automatic virus definition updates are good, but do not offer 100 percent protection. New viruses are unleashed into cyberspace constantly.

» Backup files. McArdle suggests backing up treasured files (photos, documents, etc.) on an external hard drive, and replacing the external hard drive every two or three years.

» Keep your computer’s operating system up to date.

» Finally, McArdle said educate yourself about your computer. “If you don’t want to learn, then pay someone to do it for you,” he said.

Computer Virus Statistics

» Number of U.S. households that experience heavy spam: 24 million

» Number of households with serious virus problems in the last 2 years: 16 million

» Number of households that have had spyware problems in the last six months: 6 million

» Number of households that lost money or had accounts misused through phishing: 1 million

» Estimated cost to U.S. households for viruses, spyware and phishing: $4.55 billion

» Percent of all U.S. households that have been affected by viruses: 40

» Number of infections from the most widespread virus to date – Conficker: 8.9 million

Source: StatisticBrain.com, Consumer Reports, Microsoft Security Intelligence Report, Panda Security