Business

Winnipeg Free Press - PRINT EDITION

Hidden malware could shut off your Internet

By: Lolita C. Baldor

Posted: 07/6/2012 1:00 AM | Comments: 0

WASHINGTON -- The warnings about the Internet problem have been splashed across Facebook and Google. Internet service providers have sent notices, and the FBI set up a special website.

But hundreds of thousands of people around the world may still lose their Internet service Monday unless they do a quick check of their computers for malware that could have taken over their machines more than a year ago.

Despite repeated alerts, the number of computers that probably are infected is more than 277,000 worldwide, down from about 360,000 in April.

Users whose computers are still infected Monday will lose their ability to go online, and they will have to call their service providers for help deleting the malware and reconnecting to the Internet.

The problem began when international hackers ran an online advertising scam to take control of more than 570,000 infected computers around the world. When the FBI went in to take down the hackers late last year, agents realized if they turned off the malicious servers being used to control the computers, victims would lose their Internet service.

In a highly unusual move, the FBI set up a safety net. They brought in a private company to install two clean Internet servers to take over for the malicious servers so people would not suddenly lose their Internet.

But that temporary system will be shut down Monday at 1:01 a.m.

Most victims don't even know their computers have been infected, although the malicious software probably has slowed their web surfing and disabled their antivirus software, making their machines vulnerable to other problems.

According to Tom Grasso, an FBI supervisory special agent, many Internet providers are ready for the problem and have plans to try to help their customers. Some, such as Comcast, already have reached out.

The company sent out notices and posted information on its website. Because the company can tell whether there is a problem with a customer's Internet server, Comcast sent an email, letter or Internet notice to customers whose computers appeared to be affected.

Grasso said other Internet providers may come up with technical solutions they will put in place Monday that will either correct the problem or provide information to customers when they call to say their Internet isn't working. If the Internet providers correct the server problem, the Internet will work, but the malware will remain on victims' computers and could pose future problems.

Both Facebook and Google created their own warning messages that showed up if someone using either site appeared to have an infected computer. Facebook users would get a message that says, "Your computer or network might be infected," along with a link that provides more information.

Google users got a similar message, displayed at the top of a Google search results page. It also provides information on correcting the problem.

To check if a computer is infected, users can visit the website www.dcwg.org . The site includes links to respected commercial sites that will run a quick check on the computer and it lays out detailed instructions if users want to check the computer themselves.

-- The Associated Press

Republished from the Winnipeg Free Press print edition July 6, 2012 B4

Factual inaccuracy? Something missing? Help improve our journalism.

Know about news? Share your story suggestions, photos and video.

Spelling error? Punctuation problem? Send us an email if you’ve found a typo.

More Business

Undock

You can comment on most stories on winnipegfreepress.com. You can also agree or disagree with other comments. All you need to do is register and/or login and you can join the conversation and give your feedback.

Have Your Say

New to commenting? Check out our Frequently Asked Questions.

The Winnipeg Free Press does not necessarily endorse any of the views posted. By submitting your comment, you agree to our Terms and Conditions. These terms were revised effective April 16, 2010.