Facebook leads to DNS/FBI page

My wife is trying to get on facebook to play her farmville junk and when she tries to go to facebook a green DNS logo pops up and provides a link to an FBI website.

After she restarted her compouter it started working, but i've never had trouble getting on facebook. Anyone know why it does that?

she's had her dns settings hijacked ages ago by a virus called dnschanger so you'll need to alter her dns settings to either default or some other ones like opendns/google dns

The computer must be infected with the DNS Changer malware, which basically redirects her DNS requests to a criminal server. The FBI took control of that server a while back, and continued running it to give everyone time to get their computers sorted.
Are there instructions on the page?

If not, go into Internet Settings (in the Windows Control Panel), and see if you can find the DNS server settings. Change the IP address to 8:8:8:8

If not, go into Internet Settings (in the Windows Control Panel), and see if you can find the DNS server settings. Change the IP address to 8:8:8:8

edit on 2-7-2012 by XeroOne because: (no reason given)

8:8:8:8 isnt a valid IP address. Did you mean 8.8.8.8 ?

Originally posted by PhoenixOD

If not, go into Internet Settings (in the Windows Control Panel), and see if you can find the DNS server settings. Change the IP address to 8:8:8:8

edit on 2-7-2012 by XeroOne because: (no reason given)

8:8:8:8 isnt a valid IP address. Did you mean 8.8.8.8 ?

Yeah, sorry

I've been messing with IPv6 lately.

reply to post by lonewolf19792000


Heres some info in the DNS changer. It seems its a rootkit

What to Do If Your PC Is Infected by DNSChanger

If your PC is infected with DNSChanger, you'll have to do some intensive work to get rid of it. DNSChanger is a powerful rootkit that does more than just alter DNS settings; if you've been infected with DNSChanger, your safest course is to back up your important data, reformat your hard drive(s), and reinstall your operating system. For more information, consult our guide to reinstalling Windows.

If you're leery of reformatting your entire PC, you can try rooting out the DNSChanger rootkit with a free rootkit removal utility such as Kaspersky Labs' TDSSKiller. As the name implies, Kaspersky released the program to help PC owners seek and destroy the TDSS rootkit malware, but it also detects and attempts to eliminate DNSChanger and many other forms of rootkits.

If the infected PC is on a network, you'll have to check every other PC on the network for signs of infection, and then check your router's settings to ensure that it isn't affected (DNSChanger is programmed to change router DNS settings automatically, using the default usernames and passwords of most modern routers). To do this, copy down your router's DNS server IP addresses (located in your router's settings menu; read "How to Set Up a Wireless Router" for more information) and check them against the FBI's IP address database mentioned above. If your router is infected, reset the router and confirm that all network settings are restored to the manufacturer's defaults.

When you're done, repeat the steps outlined above to verify that your PC is no longer infected with DNSChanger. With all traces of this vicious malware eliminated, you should have nothing to fear when the FBI shuts down the ISC's temporary DNS servers in Ju

More info here

reply to post by lonewolf19792000

Go to this link: NPE Download Norton Power Eraser to your Desktop. Run it, and follow directions. If you have the "DNS Changer", NPE will find it and remove it.

Then go here: support.microsoft.com... and click the fixit button.

After restart, Go here: support.microsoft.com... and click the fixit button.

The last two links are assuming you are running Windows Vista or 7. If you are not, we'll go a different route.