Google gives search users final DNSChanger warning

24.05.2012
Google has embarked on a final campaign to warn the remaining half million PCs it reckons could still be infected with the DNSChanger malware that they risk losing Internet connectivity on 9 July.

From this week, search users it detects redirecting to DNSChanger's now substituted domains will be "Your computer appears to be infected" with an accompanying link offering remediation advice.

"While we expect to notify over 500,000 users within a week, we realize we won't reach every affected user. Some ISPs have been taking their own actions, a few of which will prevent our warning from being displayed on affected devices," said Google's warning.

As many as half the users affected by DNSChange do not speak English and had not reacted to warnings already issued by the FBI and others, Google believed.

DNSChanger was the work of an Estonian criminal gang that recruited PCs into the bot without hindrance for several years until being busted by law enforcement .

Once infected PCs all browser visits were redirected through the gang's own DNS servers, now kept alive by court direction simply to give infected users time to unhitch themselves from these machines.