I'm using the Ubuntu GNOME Linux distribution as my desktop. Recently, it became impossible for me to connect to the Internet with it. When I checked its network settings, I saw that the DNS address was 46.161.40.29
.
When I searched this IP address on my other desktop (a Windows 7 machine), I found the article http://anti-hacker-alliance.com/index.php?details=46.161.40.29.
On my Linux machine, I set the DNS nameserver in /etc/resolv.conf
to 8.8.8.8
and 8.8.4.4
, and was able to access the Internet.
Note that every time I reboot my machine, I'm unable to connect to the Internet, and the DNS file (/etc/resolv.conf
) is blank. My wired connection is also not showing in the network manager.
I still see 46.161.40.29
in my wired connection's settings:
Is my computer compromised? If so, what can an attacker do?
Note: I'm using the D-Link DSL-2520u home modem, and the firmware version is v1.08. When I checked my DNS settings in the modem interface (192.168.1.1) it was pointing the primary DNS address to 188.42.254.137, and the secondary to 8.8.8.8.
/etc/resolv.conf
s on all of my Ubuntu systems sayDynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
andDO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
at the top.