DNS changed by itself?

[Herdo]

Tonight I went to lay down in bed and decided to start up the Wii for some Netflix. About 30 minutes into watching my program, my connection suddenly cut out. I got up and checked my modem, and sure enough the "online" light was blinking.

I did the usual power cycle thing with no luck. The whole time I am thinking to myself "I swear I just paid that thing a week ago!". After power cycling 3 times, I decided to check the router settings by going to my router manager page (192.168.1.1).

I look through my basic settings when I noticed my DNS address was no longer set to "Get automatically for ISP". Well, that's not right. It now had a new primary and secondary DNS listed. I couldn't remember if either of those addresses were always there. I switched it back and like magic my modem connected again.

Should I be concerned by this? I remembered the big "DNSChanger" thing going around a while ago, so I checked the two numbers against the FBI database and both numbers came up clean. What could have caused this?

 

[RealBeast]

Just to be on the safe side -- download the free Kaspersky Rescue Disk 10 image ( http://rescuedisk.kaspersky-labs.com/rescuedisk/updatable/kav_rescue_10.iso ) and burn it to a CD. Then boot your computer from it, update the database, and then run it on your C drive and the two things that are already selected. If there is any malware involved, Kaspersky will find and eliminate it from your machine.

 

[Herdo]

Just to be on the safe side -- download the free Kaspersky Rescue Disk 10 image ( http://rescuedisk.kaspersky-labs.com/rescuedisk/updatable/kav_rescue_10.iso ) and burn it to a CD. Then boot your computer from it, update the database, and then run it on your C drive and the two things that are already selected. If there is any malware involved, Kaspersky will find and eliminate it from your machine.

Hey, thanks so much for your reply. I will definitely do this tonight and let you know how it goes. I asked a friend who is an IT specialist about it, and he said I shouldn't worry too much, because he has never heard of a virus changing the DNS directly through the router. He did a lookup for me on the two DNS addresses and they both came up as "Cox Communications", which is my ISP.

You are right though, just to be safe I will follow your advice. Thanks again!

 

[RealBeast]

I agree that it is very unlikely and it was just an assignment from Cox, but I am paranoid by nature and run Kaspersky RD 10 fairly often.

 

[RustyNailz]

Maybe a weird guess...
Is your router setup with the default username and password? If yes, then you might have a mischievous neighbor connecting to your network (router) and making changes. Also, you should change that asap.

Did you do a WHIOS IP lookup on the 2 new DNS IPs?