Nuke the box: Push underway to clean up 300,000 PCs with DNS virus

24.04.2012

It also resulted in the arrest of six men who have face charges in the U.S. related to the botnet.

Subsequent to the takedown, special DNS servers managed by Internet Systems Consortium have been put in place to properly handle DNS requests from infected machines. Without these servers, those machines would not be able to connect to sites on the Internet.

The court order allowing these servers to adopt the IP addresses of the ones used by Rove Digital expires July 9, when they will be taken offline. A that point, machines infected with DNSChanger won't be able to reach DNS servers and so won't be able to reach websites.

The public relations push started this week by members of the DNSChanger Working Group urges computer users to check their machines for infection and remediate the problem before July 9. The group has set up a where users can find out if their machines are infected, remove the viruses and protect the machines from future infection.

The process sounds simple, but it's unclear how effective the dcwg.org-recommended diagnostics are.