Breaking News:

DNS Changer Malware: What to Do If Your Computer's Hit

ABC News
DNS Changer Malware: Internet Firms Expect Few People Hit
.

View photo

DNS Changer Malware: Internet Firms Expect Few People Hit (ABC News)

Planning on using the Internet Monday? You might want to join the thousands of people who are checking their computers to make sure they won't lose connection.

The FBI's temporary Internet servers will go dark Monday, leaving thousands of unsuspecting malware-infected individuals without online access.

What temporary Internet servers, you ask? They might have been connecting you to Facebook, YouTube, and -- ahem! -- ABCNews.com for the last month, and you didn't even know it. Really.

Why is this happening? It all has to do with a piece of computer malware called DNS Changer.

It started in 2007, when a group of hackers -- six Estonians and one Russian -- allegedly started masquerading as Internet advertisers who were paid by the click, according to an 2011 indictment from the U.S. Attorney General's Office in the Southern District of New York. In other words, if an ad got more clicks, they pocketed more cash.

So they figured out a way to beat the system, according to the indictment. They created a piece of malware, called DNS Changer, that tampered with the DNS -- the thing that takes a website address and finds the numerical IP address to connect you to that website -- redirecting millions of Internet users to sites they didn't search for.

For instance, if your computer was infected and you clicked a link to go to Netflix, you would wind up at "BudgetMatch," according to the FBI. The practice is called "click hijacking."

Once the FBI got around to fixing the problem in 2011, it realized it couldn't simply shut down the rogue servers because infected computers would be left without a functioning DNS, leaving them virtually Internet-less. So it set up temporary servers to give malware-infected Internet users time to fix their computers.

And time runs out on Monday, July 9.

(There isn't a planned attack this Monday that will shut down the Internet; those whose computers are already infected will lose the Band-Aid the FBI put on the problem more than a year ago.)

Who Is Affected?

Initially, there were more than 4 million infected computers in 100 countries, including 500,000 in the United States, according to the indictment.

As of July 4, there were only about 46,000 in the United States, FBI spokeswoman Jenny Shearer told ABCNews.com today. (That's out of nearly 300,000 worldwide.)

PCs and Apple Macs have been infected. Routers and iPads were hit, too.

As of June, the United States had more infected computers than any other country, according to data from the DNS Changer Working Group, or DCWG, a group working on cleanup resulting from the malware.

How Do I Know if My Computer Is Infected?

You can check to see whether your computer is infected by clicking on this link, which is run by DCWG.

If the page is green, you're in the clear. If it's red, your computer is infected.

On Thursday the site got 2 million hits, but very few of those computers were infected, DCWG volunteer Barry Greene told ABCNews.com.

Google and Facebook say they have also set up notifications for infected users. If you type in a search term and see a message that says, "Your computer appears to be infected" at the top of your screen, guess what. Your computer is infected.

Comcast, AT&T and Verizon are among the other organizations notifying customers if they have infected machines.

Important: According to DCWG, you should not need to scan, make changes or download anything to tell whether your computer is infected.

My Computer Is Infected. Now What?

The good news is DCWG has put together a page of trusted tools and a step-by-step guide for how to fix your computer.

The bad news is it can take a day or two actually to fix the problem, Greene told ABCNews.com. That's because the malware is in a deep section of the hard drive called the "boot sector."

"The malware problem out there is nasty, and it's impacted society on multiple levels," Greene said. "It's extremely hard to get rid of. In most companies, if they get infected with it, they throw away the hard drive."

If you can't do that, follow the instructions. They include backing up your files and reinstalling your operating system.

What Do I Do if I Lose Internet on Monday?

The FBI and DCWG recommend contacting your Internet service provider. They'll be able to give you instructions on what to do next.

View Comments (29)

Recommended for You

  • British grandmother prepares for execution in Indonesia

    A British grandmother on death row in Indonesia is writing goodbye letters to her family and believes she could be executed at any time, she wrote in an article on Sunday. Lindsay Sandiford, 58, said she was expecting to die shortly, after seven foreign drug convicts were executed last week,…

    AFP
  • Vonn says relationship with Woods is over

    SAN FRANCISCO (AP) — Tiger Woods and Lindsey Vonn are no longer a power couple in American sports.

    Associated Press
  • With rescue near, Boko Haram stoned Nigerian girls to death

    YOLA, Nigeria (AP) — Even with the crackle of gunfire signaling rescuers were near, the horrors did not end: Boko Haram fighters stoned captives to death, some girls and women were crushed by an armored car and three died when a land mine exploded as they walked to freedom.

    Associated Press
  • World kept guessing over name of Britain's baby princess

    Royal watchers around the world waited to discover the name of the two-day-old British princess born to Prince William and his wife Kate, which could be announced on Monday. The couple left hospital with their newborn daughter on Sunday -- and when their toddler son George was born in 2013 his name…

    AFP
  • ‘It Was Never a Dress’ Ingeniously Updates Women’s Room Symbol

    Flipping the dress idea on its head, an Arizona tech company, Axosoft, debuted its newly designed bathroom symbol at Arizona’s Girls in Tech Conference this week. Girls and women interested in science, technology, engineering, and math are an underrepresented minority, with women making up less…

    Takepart.com
  • Philippine rebels kill most wanted Islamist militant in south

    The Philippines' most wanted Islamist militant, who escaped after a raid in January that killed 44 police commandos, was killed on Sunday in firefight with Muslim rebels, officials said. Protracted police operations to arrest three Islamist high-value targets had become the biggest political crisis…

    Reuters
  • Baltimore cops charged in Freddie Gray death: What do police think?

    The police officer had just shot and killed an unarmed minority suspect who had been trying to flee. Officer Grant Morrison walks away from the scene of the shooting, his head in his hand, reaches the side of his colleague's cruiser, and collapses, sobbing uncontrollably. The actions of a Billings,…

    Christian Science Monitor
  • Husband of Facebook's Sheryl Sandberg dies suddenly

    David Goldberg, the husband of Facebook's chief operating officer Sheryl Sandberg, has died suddenly, his brother said Saturday. Robert Goldberg said his brother, the chief executive of online polling firm SurveyMonkey, had died late Friday. "It's with incredible shock and sadness that I'm letting…

    AFP
  • Quakes hit California, but no damage or injuries reported

    SAN FRANCISCO (AP) — Two separate quakes at or near magnitude-4.0 hit Northern and Southern California on Sunday, with no immediate reports of damage or injuries.

    Associated Press38 mins ago
  • Cable, pay-per-view problems leave viewers fighting mad

    NEW YORK (AP) — For some boxing fans, the big fight Saturday night turned out to be between them and their cable companies.

    Associated Press
  • William and Kate eschew crowns for life with nappies

    The eyes of the world have again turned on Queen Elizabeth's grandson and his wife, officially known as the Duke and Duchess of Cambridge, with the birth of their second child, a girl. Millions of people across the world tuned in to watch their sumptuous wedding in 2011 while the birth of Prince…

    Reuters
  • Play

    Nebraska Baby Born After Mother`s Fatal Stroke

    Doctors in Nebraska delivered a baby boy via cesarean section after his mother suffered a fatal stroke. Nicole Goodrich reports on Saturday, May 2, 2015.

    KTLA - Los Angeles
  • For a Day, ‘Dad Bods’ Made Us Obsess Over Men’s Bodies Like We Do Women’s

    Victoria’s Secret even went so far as to propose the “perfect body,” which it retracted after protests. The phrase has long circulated on college campuses, but Clemson University sophomore Mackenzie Pearson took it mainstream when she wrote in a recent essay for The Odyssey: “The dad bod is a nice…

    Takepart.com
  • Shadow of Saddam lives on in Iraq

    Dozens of Iraqis crowding a Baghdad street fought to glimpse the red-haired man in a glass coffin, hoping to witness the end of a long-feared member of Saddam Hussein's regime. The furore over the dead man -- who might be Saddam's deputy Izzat al-Duri, though his identity has still not been…

    AFP
  • NYPD officer 'fighting for his life'; suspect denied bail

    NEW YORK (AP) — A man who officials say boasted of being a street "hellraiser" and who served prison time for attempted murder was arraigned on charges that he shot a New York City police officer in the head.

    Associated Press
  • Ukrainian soldier and civilian killed in intensifying clashes

    A Ukrainian soldier and a civilian were killed in the past 24 hours in Ukraine's separatist-held east amid a marked increase in fighting despite a fragile ceasefire, authorities said Sunday. "A Ukrainian soldier was killed and six others wounded over the last 24 hours," Ukraine military spokesman…

    AFP
  • Play

    Drunk Driver Drives Wrong Way On I-15, Kills Two

    A 22-year old drunk driver driving the wrong way in the HOV lane on I-15 kills two in Mira Mesa in a head on crash. The man was severly injured and arrested at the hospital.

    KSWB - San Diego