Linux Format forums

Re: This looks very serious...for some.

PCNetSpec — Tue May 01, 2012 12:46 am

Author: PCNetSpec

Posted: Tue May 01, 2012 12:46 am

I gather DNSchanger is usually installed by the TDSS rootkit, so I doubt if it will be as simple as using the ISP's CD.

There's also the issue that the sites that the users were redirected to have probably installed a ton of other malware that will need to be dealt with.

See here:
http://threatpost.com/en_us/blogs/tdss-rootkit-and-dnschanger-unholy-alliance-111411

Good News Then

Nuke — Mon Apr 30, 2012 8:26 pm

Author: Nuke

Posted: Mon Apr 30, 2012 8:26 pm

Sounds like these victims had their DNS server address changed to that of the scammers' server, then changed again by the FBI to a server the FBI ran themselves and which is presumably a "straight" one. Now these people need to be restored to their original ISPs' DNS.

Can't see much problem with that. Their Intertubes will stop working, so they will just have to put their ISP's CD back in so that its Windows Wizard will set them up again. I suggest the larger ISP's set up an automated message on their help lines to advise that.

It is time the authorities became more pro-active about scammers, even if it means that some lazy users are forced into doing something more than gaze at YouTube clips. Asking them nicely does not work.

This looks very serious...for some.

catgate — Thu Apr 26, 2012 10:35 pm

Author: catgate

Posted: Thu Apr 26, 2012 10:35 pm

http://www.thetruthseeker.co.uk/?p=47629

This site has some very odd content from time to time, but this one looks as quaint as I have so far seen.