Did you get a message with a link to dcwg.org? There was a malicious group that redirected infected computers to “their” DNS websites. They were caught and the FBI directed dcwg.org to manage the DNS servers.
What is DNS? A Domain Name Server (DNS) links the IP address (4 sets of numbers separated by periods) to the name of the website. Could you remember 220.127.116.11 or is Google.com easier to remember? Try opening your browser (i.e. Internet Explorer, Mozilla Firefox, Apple Safari, Opera, Google Chrome) and typing in 18.104.22.168 where you would normally type in a website address. Yep, you end up at Google.com. When you type in a website address, such as http://www.opendns.com, the DNS has a list of what IP address(es) are linked to what websites and you arrive at the expected website. The authors of these DNS servers and the associated virus had plans to redirect the infected websites for some criminal purpose. So, you type in the website name and possibly end up at a spoof website.
These next steps will show you how to check if you are a victim and either way you might consider changing the assigned DNS. One reason to change is a slight increase in surfing speed, and the other is to protect against phishing websites.
For Windows XP; Open a command Window, left-click START > run > type in “cmd” and press the ENTER key. In the command window (black with white letters) type in netsh interface ip show dns and then press the Enter key.
For Windows 7; Open a command Window, left-click START > type in cmd (cmd.exe should appear and be highlighted) press the ENTER key. In the command window (black with white letters) type in netsh interface ip show dnsservers and then press the Enter key.
Is there are any “statically Configured DNS Server” matching one of these DNS servers that will be deactivated in July 2012 (?):
Starting IP Ending IP CIDR
22.214.171.124 126.96.36.199 188.8.131.52/20
184.108.40.206 220.127.116.11 18.104.22.168/20
22.214.171.124 126.96.36.199 188.8.131.52/21
184.108.40.206 220.127.116.11 18.104.22.168/24
22.214.171.124 126.96.36.199 188.8.131.52/20
184.108.40.206 220.127.116.11 18.104.22.168/20
What would happen if yours are set to one of these and you did not make a change. Well, in July when you typed in the name of a website it will not be accessible.
Most users use the DNS provided by their Internet Service Provider (ISP). However, you can choose to use another DNS by changing the DNS setting. Among many DNS there are:
Google‘s DNS (Preferred 22.214.171.124 & Alternate 126.96.36.199) that may increase your surfing speed.
And there is:
Opendns DNS (Preferred 188.8.131.52, Alternate 184.108.40.206) that may increase surfing speed and that blocks phishing websites. This service (free for Home Users) can be further configured by creating a free Opendns account.
To Change the DNS setting:
Open the Network Card Control Panel (ncpa.cpl);
Windows XP users (Windows XP instructions with images): click START -> Click Run -> Type in ncpa.cpl (wait until window opens)
Windows Vista (Windows Vista instructions with images) or Windows 7 users (Windows 7 instructions with images): click START -> type in ncpa.cpl (wait until window opens)
Next, for Windows XP, VISTA and Windows 7;
Look for the Local Area Connection and the Wireless Network Connection Icon and Right-Click on one of these and left-click on the Properties Window. In the window that opens Left-Click the Networking Tab (Windows XP: General Tab) -> Left-Click on the (Windows XP) “Internet Protocol (TCP/IP)” (Vista/Windows 7) “Internet Protocol Version 4 (TCP/IPv4)” to highlight it and Left-Click on the Properties button-> on the General Tab check if “Use the following DNS server addresses” is selected. If one of the soon to be “turned off” DNS IP addresses are listed (see previous list of DNS IP addresses to be deactivated in July, 2012) either click “Obtain DNS server address automatically” to use the one provided by your ISP or click “Use the following DNS server addresses” and type in the DNS service you would like such as the Google DNS (Preferred 220.127.116.11 & Alternate 18.104.22.168) or Opendns DNS (Preferred 22.214.171.124, Alternate 126.96.36.199) When typing them in first type the number, press the PERIOD key, type next number set, press the PERIOD key until done. Double check the numbers are correct. Click OK all the way out to set the new DNS. Now, to see they are active use the “To Check” instructions above.
If you followed all this then more power to you!