"Poisoned" Router DNS Settings

[PcTek9]

is this through a routers firmware through the web? or is it from a program executed on the localhost?

[Wheelie]

Originally Posted by PcTek9

is this through a routers firmware through the web? or is it from a program executed on the localhost?

I don't know for sure how it happened but I do know the PC had viruses. I guess the virus could have executed a script that tests for default router passwords and then changes the DNS if it actually gets into one?

All I know for sure is my customer had a PC with viruses and a router with the DNS settings changed to 213.109.64.xxx (and the router had default ID and Password).