{"id":419,"date":"2014-04-12T14:31:56","date_gmt":"2014-04-12T13:31:56","guid":{"rendered":"http:\/\/www.cbits.co.uk\/ourblog\/?p=419"},"modified":"2014-06-06T12:06:41","modified_gmt":"2014-06-06T11:06:41","slug":"fake-flash","status":"publish","type":"post","link":"https:\/\/cbits.co.uk\/ourblog\/index.php\/news\/fake-flash\/","title":{"rendered":"fake flash – Our Recommendations"},"content":{"rendered":"

If you read around the items here you will get a reasonable handle on the problem, we wrote about it here:
\nhttp:\/\/www.cbits.co.uk\/ourblog\/news\/fake-flash-player-update-virus-routers-tp-link\/<\/a>
\nIn essence Malware based on Conduit Search infects a machine<\/strong>, this is then able to alter the search settings in certain routers, on TP-Link<\/strong> (TD-W8901, being common- It’s a huge seller so lots around) but also Linksys<\/strong>, and Edimax<\/strong> models. Replacing the routers is a short-sighted (and expensive\/wasteful)\u00a0answer – we know of one customer who bought a newer version of the TP Link model ! – they didn’t ask for advice, and didn’t solve the problem.<\/p>\n

\"Conduit<\/a>
Conduit looks little different from Google\u00a0\u00a0<\/a><\/figcaption><\/figure>\n

We have spoken to Edimax, who it seem’s really aren’t interested (its affected older products… – so far!) so guess how much we’ll recommend them in future? TP-Link after a couple of kick’s at least got back and knew about the problem, they promised a firmware upgrade, but as yet have not come back to us with it – Wake up TP-Link great products and prices alone won’t do
\nWith the TP-Link, it comes allowing remote admin by default, if you don’t need this turn it off (but IT IS VERY USEFUL so consider carefully!).
\nDisconnect everything from the network, and using a clean (Malwarebytes is good, but do a final check with hitmanPro – needs to be on-line though) PC. then change the DNS servers being used to either those of your ISP or perhaps Google’s (8.8.8.8 & 8.8.4.4,), I suggest you update the firmware on your router to the latest available from the manufacturer involved – careful here it might be worth going to you local PC store flashing a router incorrectly can kill it!)<\/p>\n

Run scans to clean all PC’s and Mac’s – final check on PC’s with Hitman Pro<\/strong><\/a> – don’t register (unless you want to buy it!) – by the way install Hitman Alert<\/strong> on any PCs its Free and a great protection. (Get these via our support pages<\/a>)<\/p>\n

All Android, phones, Tablets, iPads and iPhones need their browser settings reset back to default – then you should be good to go (until the next “Conduit Malware” (we are about to post about these guys to our blog) variant, no doubt clobbers your Belkin, Netgear, D-Link et al.)<\/p>\n

FBI’s take on DNS Changer malware:<\/span>
\nhttp:\/\/www.fbi.gov\/news\/stories\/2011\/november\/malware_110911\/DNS-changer-malware.pdf<\/h5>\n","protected":false},"excerpt":{"rendered":"

If you read around the items here you will get a reasonable handle on the problem, we wrote about it here: http:\/\/www.cbits.co.uk\/ourblog\/news\/fake-flash-player-update-virus-routers-tp-link\/ In essence Malware based on Conduit Search infects a machine, this is then able to alter the search settings in certain routers, on TP-Link (TD-W8901, being common- It’s a huge seller so lots […] Read more »<\/a><\/p>\n","protected":false},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"twitterCardType":"","cardImageID":0,"cardImage":"","cardTitle":"","cardDesc":"","cardImageAlt":"","cardPlayer":"","cardPlayerWidth":0,"cardPlayerHeight":0,"cardPlayerStream":"","cardPlayerCodec":"","_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[13,74,60],"tags":[117,7,114,36],"class_list":["post-419","post","type-post","status-publish","format-standard","hentry","category-news","category-suppliers","category-virusmalware","tag-edimax","tag-router","tag-tp-link","tag-virus"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4tvbq-6L","jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/cbits.co.uk\/ourblog\/index.php\/wp-json\/wp\/v2\/posts\/419","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cbits.co.uk\/ourblog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cbits.co.uk\/ourblog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cbits.co.uk\/ourblog\/index.php\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/cbits.co.uk\/ourblog\/index.php\/wp-json\/wp\/v2\/comments?post=419"}],"version-history":[{"count":7,"href":"https:\/\/cbits.co.uk\/ourblog\/index.php\/wp-json\/wp\/v2\/posts\/419\/revisions"}],"predecessor-version":[{"id":434,"href":"https:\/\/cbits.co.uk\/ourblog\/index.php\/wp-json\/wp\/v2\/posts\/419\/revisions\/434"}],"wp:attachment":[{"href":"https:\/\/cbits.co.uk\/ourblog\/index.php\/wp-json\/wp\/v2\/media?parent=419"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cbits.co.uk\/ourblog\/index.php\/wp-json\/wp\/v2\/categories?post=419"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cbits.co.uk\/ourblog\/index.php\/wp-json\/wp\/v2\/tags?post=419"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}