Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday. Discuss Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday, on Wireless Forums.
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
"Adam" <adam@no_thanks.com> wrote in message
news:jt9mbb$r3t$1@dont-email.me...
>
> Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet
> Access Monday ...
> http://medford.patch.com/articles/fb...-access-monday
Re: Computers Infected By 'DNS Changer' Trojan Malware Will LoseInternet Access Monday
On 7/7/2012 11:02 AM, Adam wrote:
> "Adam" <adam@no_thanks.com> wrote in message
> news:jt9mbb$r3t$1@dont-email.me...
>>
>> Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet
>> Access Monday ...
>> http://medford.patch.com/articles/fb...-access-monday
>
>
> Internet blackout for thousands coming Monday ...
> http://money.cnn.com/2012/07/06/tech...nger/index.htm
>
>
We can only hope that those stupid enough to get or rather allow their
computer to remain infected after all the notifications are down for at
least a week.
With luck those that remain online will have sense enough to ignore the
phone calls asking for help from those stupid twits... ;)
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
On Sat, 7 Jul 2012 12:12:56 -0400, GlowingBlueMist wrote
(in article <jt9n79$th$1@dont-email.me>):
> On 7/7/2012 11:02 AM, Adam wrote:
>> "Adam" <adam@no_thanks.com> wrote in message
>> news:jt9mbb$r3t$1@dont-email.me...
>>>
>>> Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet
>>> Access Monday ...
>>> http://medford.patch.com/articles/fb...rojan-malware-
>>> will-lose-internet-access-monday
>>
>>
>> Internet blackout for thousands coming Monday ...
>> http://money.cnn.com/2012/07/06/tech...nger/index.htm
>>
>>
> We can only hope that those stupid enough to get or rather allow their
> computer to remain infected after all the notifications are down for at
> least a week.
>
> With luck those that remain online will have sense enough to ignore the
> phone calls asking for help from those stupid twits... ;)
Where's the damn 'like' button here... :)
--
Joey from New York
Among those whom I like or admire, I can find*no common denominator,
but among those*whom I love, I can: all of them make me laugh.
* *-- WH Auden
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
"Evan Platt" <evan@theobvious.espphotography.com.invalid> wrote in
message news:b4qgv7t4johs9pu898su1lk6cne7005u1t@4ax.com...
> On Sat, 07 Jul 2012 11:12:56 -0500, GlowingBlueMist
> <GlowingBlueMist@truly.invalid> wrote:
>
>>We can only hope that those stupid enough to get or rather allow their
>>computer to remain infected after all the notifications are down for
>>at
>>least a week.
>>
>>With luck those that remain online will have sense enough to ignore
>>the
>>phone calls asking for help from those stupid twits... ;)
>
> I have a feeling there will be 0 posts to google groups Monday... :)
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
"GlowingBlueMist" <GlowingBlueMist@truly.invalid> wrote in message
news:jt9n79$th$1@dont-email.me...
> On 7/7/2012 11:02 AM, Adam wrote:
>> "Adam" <adam@no_thanks.com> wrote in message
>> news:jt9mbb$r3t$1@dont-email.me...
>>>
>>> Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet
>>> Access Monday ...
>>> http://medford.patch.com/articles/fb...-access-monday
>>
>>
>> Internet blackout for thousands coming Monday ...
>> http://money.cnn.com/2012/07/06/tech...nger/index.htm
>>
>
> We can only hope that those stupid enough to get or rather allow their
> computer to remain infected after all the notifications are down for at
> least a week.
>
> With luck those that remain online will have sense enough to ignore the
> phone calls asking for help from those stupid twits... ;)
Oh, that's harsh! There's such thing as internet withdrawal, ya know.
:-)
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
On Sat, 07 Jul 2012 11:12:56 -0500, GlowingBlueMist
<GlowingBlueMist@truly.invalid> wrote:
>We can only hope that those stupid enough to get or rather allow their
>computer to remain infected after all the notifications are down for at
>least a week.
Nope. People like me will more than happily rescue the clueless, for
a price. If it weren't for malware, spyware, phishing, buggy apps,
buggy operating systems, defective hardware, and FUD, I would be out
of business[1]. If I were unethical, unscrupulous, evil, dastardly,
greedy, etc, I would probably write malware for distribution.
Unfortunately, I'm a lousy programmer, so that's not going to make me
wealthy.
Maybe I should write a book... "The Zen of Computer Repair, or how I
learned to deal with computah users and still remain sane".
>With luck those that remain online will have sense enough to ignore the
>phone calls asking for help from those stupid twits... ;)
Good idea. I don't need any competition.
Every time there's media attention to a virus set to explode on some
specific date, my phone rings. My purpose in fixing computahs is to
keep the phone from ringing. If someone calls, it's often about
something that I did wrong or missed. I don't like phone calls.
Before the day of impending doom, my email is filled with customers
asking "Do I have the DNS Changer trojan"? On Monday, I expect to get
calls such as "My computer won't turn on. Is it the DNS Redirector
trojan"? Eventually, they remember to flip the switch on the power
strip or UPS. It's dumb, but I like the easy stuff.
[1] Company motto: If this stuff worked, you wouldn't need me.
Nay, Art thou decideth playeth ye simpleton games. *Some* of us know proper manners
Very few. I used to take calls from *rank* noobs but got fired the first day on the job for potty mouth,
Bur-ring, i'll get this one: WHAT'S YOUR PROBLEM JERK!!? We're here to help you dickweed, ok, ok give the power
cord the jiggily piggily wiggily all the while pushing the power button repeatedly now take everything out of
your computer except the power supply and *one* stick of ram. Ok get the next sucker on the phone.
Deirdre Straughan (Roxio) is a LIAR (Deirdre McFibber)
There's the employer and the employee and the FROGGER and the FROGEE, which one are you?
Hamster isn't a newsreader it's a mistake!
El-Gonzo Jackson FROGS both me and Chuckcar (I just got EL-FROG-OED!!)
All hail Chuckcar the CZAR!! Or in F-R-O-Gland Chuckcar laFROG laCZAR, ChuckZar!!
I hate them both, With useless bogus ******** you need at least *three* fulltime jobs to afford either one of
them
I'm a fulltime text *only* man on usenet now. The rest of the world downloads the binary files not me i can't
afford thousands of dollars a month
VBB = Volume based billing. How many bytes can we shove down your throat and out your arse sir?
The only "fix" for the CellPig modem is a sledgehammer.
UBB = User based bullFROGGING
Master Juba was a black man imitating a white man imitating a black man
Always do incremental backups of your data or you'll end up like the A-Holes at DSL Reports. Justin says i made
a boo-boo. Yeah boo-who.
Updates are for idiots. As long as the thing works there's no reason to turn
schizophrenic and develop a lifelong complex over such a silly issue.
Adrian "jackpot" Lewis is a mama's boy!
Jimmy Fricke is good for the game of poker
Using my technical prowess and computer abilities to answer questions beyond the realm of understandability
Regards Tony... Making usenet better for everyone everyday
This sig file was compiled via my journeys through usenet
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
In message <Zd6dndzXubRfU2XSnZ2dnUVZ_tednZ2d@giganews.com>, David H.
Lipman <DLipman~nospam~@Verizon.Net> writes:
>From: "Tony" <Tony@TheDeli.Sandwich>
>
>> What if you turn your clock or calendar back? Does that buy you more time?
>>
>
>LOL - No. It's irrelevant to the DNS Protocol and what servers you use.
>
Yes, but if this "DNS Changer" Trojan (is it a trojan?) triggers on
Monday, then it must find out from somewhere that it _is_ Monday.
Presumably it uses an online timeserver, but this is only a presumption:
the question is valid!
--
J. P. Gilliver. UMRA: 1960/<1985 MB++G.5AL-IS-P--Ch++(p)Ar@T0H+Sh0!:`)DNAf
I believe the cake has got to be sliced up to help those who are needy and
you've got to keep someone there who's going to make the cake. Here we always
destroy the people who make the cake. - Michael Caine (MM), RT, 7-13 Nov 2009.
Re: Computers Infected By 'DNS Changer' Trojan Malware Will LoseInternet Access Monday
J. P. Gilliver (John) wrote:
> David H. Lipman writes:
>>From: "Tony" <Tony@TheMeatless.Sandwich>
>>
>>> What if you turn your clock or calendar back? Does that buy you more
>>> time?
>>>
>>LOL - No. It's irrelevant to the DNS Protocol and what servers you use.
>>
> Yes, but if this "DNS Changer" Trojan (is it a trojan?) triggers on
> Monday, then it must find out from somewhere that it _is_ Monday.
> Presumably it uses an online timeserver, but this is only a presumption:
> the question is valid!
No, on Monday morning the FBI technician is going to lean over and pull
the power plug from the wall outlet. No timeserver is needed.
If he calls in sick on Monday, your computer may last for another day.
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
On Sat, 07 Jul 2012 19:47:00 -0400, Tony wrote:
> What if you turn your clock or calendar back? Does that buy you more time?
>
> Adam wrote:
>
>> Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access
>> Monday ...
>> http://medford.patch.com/articles/fb...-access-monday
Read Sam Hill's reply in the subthread. It is both correct and clever.
The DNS redirection is occurring at a server which belongs to the FBI,
and which the FBI is about to repurpose.
Once that happens, any flawed computers will no longer get redirected to
that server, and their misdirected addresses won't be fixed any more.
This is happening out in the cloud, not in your computer.
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
[snnnip]
And, of course, what happens if the folk are using a VOIP
system that hooks up through their computer? Does this
mean they can't call for help to get their phone working?
--
__________________________________________________ ___
Knowledge may be power, but communications is the key dannyb@panix.com
[to foil spammers, my address has been double rot-13 encoded]
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
From: "J. P. Gilliver (John)" <G6JPG@soft255.demon.co.uk>
> In message <Zd6dndzXubRfU2XSnZ2dnUVZ_tednZ2d@giganews.com>, David H.
> Lipman <DLipman~nospam~@Verizon.Net> writes:
>> From: "Tony" <Tony@TheDeli.Sandwich>
>>
>>> What if you turn your clock or calendar back? Does that buy you more
>>> time?
>>>
>> LOL - No. It's irrelevant to the DNS Protocol and what servers you use.
>>
> Yes, but if this "DNS Changer" Trojan (is it a trojan?) triggers on
> Monday, then it must find out from somewhere that it _is_ Monday.
> Presumably it uses an online timeserver, but this is only a presumption:
> the question is valid!
No. There ios no "trigger date". The DNSChanger trojan changes the DNS
Table of computers and SOHO Routers. That change was in effect subsequent
to a reboot upon infection.
The ONLY concept about Monday is that the the DNS Servers tied to the IP
addresses of were the malicious DNS Servers will be taken down. That's it.
End of story.
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
From: "danny burstein" <dannyb@panix.com>
> [snnnip]
>
> And, of course, what happens if the folk are using a VOIP
> system that hooks up through their computer? Does this
> mean they can't call for help to get their phone working?
>
IFF they had been infected by the DNSChanger trojan and the DNS server table
had not been corrected then if they need DNS Services then there may be
service interruption. However if the VoIP device has hard coded addresses,
or they were never infected, no.
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
In message <WfqdnemqxrcjfGXSnZ2dnUVZ_h-dnZ2d@giganews.com>, David H.
Lipman <DLipman~nospam~@Verizon.Net> writes:
>From: "J. P. Gilliver (John)" <G6JPG@soft255.demon.co.uk>
>
>> In message <Zd6dndzXubRfU2XSnZ2dnUVZ_tednZ2d@giganews.com>, David H.
>>Lipman <DLipman~nospam~@Verizon.Net> writes:
>>> From: "Tony" <Tony@TheDeli.Sandwich>
>>>
>>>> What if you turn your clock or calendar back? Does that buy you
>>>>more time?
>>>>
>>> LOL - No. It's irrelevant to the DNS Protocol and what servers you use.
>>>
>> Yes, but if this "DNS Changer" Trojan (is it a trojan?) triggers on
>>Monday, then it must find out from somewhere that it _is_ Monday.
>>Presumably it uses an online timeserver, but this is only a
>>presumption: the question is valid!
>
>No. There ios no "trigger date". The DNSChanger trojan changes the
>DNS Table of computers and SOHO Routers. That change was in effect
>subsequent to a reboot upon infection.
>
>The ONLY concept about Monday is that the the DNS Servers tied to the
>IP addresses of were the malicious DNS Servers will be taken down.
I don't understand the above "sentence" (-:.
>That's it. End of story.
>
>
>
--
J. P. Gilliver. UMRA: 1960/<1985 MB++G.5AL-IS-P--Ch++(p)Ar@T0H+Sh0!:`)DNAf
Santa's elves are just a bunch of subordinate Clauses.
Re: Computers Infected By 'DNS Changer' Trojan Malware Will LoseInternet Access Monday
J. P. Gilliver (John) wrote:
> In message <WfqdnemqxrcjfGXSnZ2dnUVZ_h-dnZ2d@giganews.com>, David H.
> Lipman <DLipman~nospam~@Verizon.Net> writes:
>> No. There ios no "trigger date". The DNSChanger trojan changes the
>> DNS Table of computers and SOHO Routers. That change was in effect
>> subsequent to a reboot upon infection.
>>
>> The ONLY concept about Monday is that the the DNS Servers tied to the
>> IP addresses of were the malicious DNS Servers will be taken down.
>
> I don't understand the above "sentence" (-:.
>
The trojan works by redirecting DNS requests by infected computers and
routers to a server which is currently controlled by the FBI, having
been removed from the control of the bad guys some months ago. This
server directed certain address requests to malware or advertising
sites, effectively hiding the correct websites from the user.
This nameserver will be disconnected from the internet on Monday 9th
July. As a result, all computers and routers that are using it as their
default or only nameserver will be unable to look up the IP addresses
for websites.
If you have sites which you access by typing in the IP address directly,
you won't be affected, If you have made sure that you use your ISP's
nameserver, you won't be affected. If you are deliberately using
something like 8.8.8.8 or one of the other public nameservers, you won't
be affected.
If your security programs are up to date, you won't be affected, as this
exploit has been fixed by all of them a long time ago.
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
In message <a5st88FqtpU1@mid.individual.net>, John Williamson
<johnwilliamson@btinternet.com> writes:
>J. P. Gilliver (John) wrote:
>> In message <WfqdnemqxrcjfGXSnZ2dnUVZ_h-dnZ2d@giganews.com>, David H.
>>Lipman <DLipman~nospam~@Verizon.Net> writes:
>>> No. There ios no "trigger date". The DNSChanger trojan changes the
>>>DNS Table of computers and SOHO Routers. That change was in effect
>>>subsequent to a reboot upon infection.
>>>
>>> The ONLY concept about Monday is that the the DNS Servers tied to
>>>the IP addresses of were the malicious DNS Servers will be taken down.
>> I don't understand the above "sentence" (-:.
>>
>The trojan works by redirecting DNS requests by infected computers and
>routers to a server which is currently controlled by the FBI, having
>been removed from the control of the bad guys some months ago. This
Thanks - a most clear explanation.
>server directed certain address requests to malware or advertising
>sites, effectively hiding the correct websites from the user.
>
>This nameserver will be disconnected from the internet on Monday 9th
>July. As a result, all computers and routers that are using it as their
>default or only nameserver will be unable to look up the IP addresses
>for websites.
Kind of the FBI to help out for as long as they did!
>
>If you have sites which you access by typing in the IP address
>directly, you won't be affected, If you have made sure that you use
>your ISP's nameserver, you won't be affected. If you are deliberately
>using something like 8.8.8.8 or one of the other public nameservers,
>you won't be affected.
>
>If your security programs are up to date, you won't be affected, as
>this exploit has been fixed by all of them a long time ago.
>
>
>>> That's it. End of story.
>>>
>>>
>>>
>
>
--
J. P. Gilliver. UMRA: 1960/<1985 MB++G.5AL-IS-P--Ch++(p)Ar@T0H+Sh0!:`)DNAf
The sun, with all those planets revolving around it and dependent upon it, can
still ripen a bunch of grapes as it if had nothing else in the universe to do.
-Galileo Galilei, physicist and astronomer (1564-1642)
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
"Jeff Liebermann" <jeffl@cruzio.com> wrote in message
news:bbmhv7t2dkk4b84ehpnmqchate70entas9@4ax.com...
> On Sat, 07 Jul 2012 19:52:10 -0400, "(PeteCresswell)" <x@y.Invalid>
> wrote:
>
>>Which utility for connecting to the user's desktop do you favor?
>
> TeamViewer:
> <http://www.teamviewer.com>
> Windoze, Mac, Linux, iphone, iPad, and Droid versions.
> Free for non-commercial use. $749 for a biz license.
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
In message <5a4jv7h2kq80b01n0hks2kel5sc4vdis5p@4ax.com>, Ken Blake
<kblake@kb.invalid> writes:
>On Sun, 8 Jul 2012 08:29:13 -0400, "glee" <glee29@spamindspring.com>
>wrote:
>
>> "Jeff Liebermann" <jeffl@cruzio.com> wrote in message
>> news:bbmhv7t2dkk4b84ehpnmqchate70entas9@4ax.com...
>> > On Sat, 07 Jul 2012 19:52:10 -0400, "(PeteCresswell)" <x@y.Invalid>
>> > wrote:
>> >
>> >>Which utility for connecting to the user's desktop do you favor?
>> >
>> > TeamViewer:
>> > <http://www.teamviewer.com>
>> > Windoze, Mac, Linux, iphone, iPad, and Droid versions.
>> > Free for non-commercial use. $749 for a biz license.
>>
>> Absolutely agree.... TeamViewer.
>
>
>I'll add my vote for TeamViewer to yours.
>
And mine. I've used it (from this XP netbook) to sort out friends on XP,
Vista, and 7. (The XP and 7 users are blind, to boot.)
--
J. P. Gilliver. UMRA: 1960/<1985 MB++G.5AL-IS-P--Ch++(p)Ar@T0H+Sh0!:`)DNAf
If you don't know how to orient your card to swipe it through the reader, the
checkout person will say, "Strip down, face toward me." (DNRC newsletter 1997)
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
"J. P. Gilliver (John)" <G6JPG@soft255.demon.co.uk> wrote in message
news:ND$jtYZ5IU+PFw2V@soft255.demon.co.uk...
> In message <a5st88FqtpU1@mid.individual.net>, John Williamson
> <johnwilliamson@btinternet.com> writes:
>>J. P. Gilliver (John) wrote:
>>> In message <WfqdnemqxrcjfGXSnZ2dnUVZ_h-dnZ2d@giganews.com>, David H.
>>> Lipman <DLipman~nospam~@Verizon.Net> writes:
>>>> No. There ios no "trigger date". The DNSChanger trojan changes the
>>>> DNS Table of computers and SOHO Routers. That change was in effect
>>>> subsequent to a reboot upon infection.
>>>>
>>>> The ONLY concept about Monday is that the the DNS Servers tied to the
>>>> IP addresses of were the malicious DNS Servers will be taken down.
>>> I don't understand the above "sentence" (-:.
>>>
>>The trojan works by redirecting DNS requests by infected computers and
>>routers to a server which is currently controlled by the FBI, having been
>>removed from the control of the bad guys some months ago. This
>
> Thanks - a most clear explanation.
>
>>server directed certain address requests to malware or advertising sites,
>>effectively hiding the correct websites from the user.
>>
>>This nameserver will be disconnected from the internet on Monday 9th July.
>>As a result, all computers and routers that are using it as their default
>>or only nameserver will be unable to look up the IP addresses for
>>websites.
>
> Kind of the FBI to help out for as long as they did!
>>
>>If you have sites which you access by typing in the IP address directly,
>>you won't be affected, If you have made sure that you use your ISP's
>>nameserver, you won't be affected. If you are deliberately using something
>>like 8.8.8.8 or one of the other public nameservers, you won't be
>>affected.
>>
>>If your security programs are up to date, you won't be affected, as this
>>exploit has been fixed by all of them a long time ago.
>>
>>
>>>> That's it. End of story.
>>>>
>>
>>
> --
> J. P. Gilliver. UMRA: 1960/<1985 MB++G.5AL-IS-P--Ch++(p)Ar@T0H+Sh0!:`)DNAf
>
> The sun, with all those planets revolving around it and dependent upon it,
> can
> still ripen a bunch of grapes as it if had nothing else in the universe to
> do.
> -Galileo Galilei, physicist and astronomer (1564-1642)
Also, for those with a router, it's safer to "not" use the factory password
provided by
the manufacturer. Change the password to something more secure to
prevent malware from breaking into your router/network.
Routers probably should ship with a more unique password instead of
one factory password for all routers of the same make/model.
That's one way the malware was breaking in and changing the DNS settings.
Re: Computers Infected By 'DNS Changer' Trojan Malware Will LoseInternet Access Monday
On 7/8/2012 2:28 PM, Adam wrote:
<snipped>
> Also, for those with a router, it's safer to "not" use the factory password
> provided by
> the manufacturer. Change the password to something more secure to
> prevent malware from breaking into your router/network.
>
> Routers probably should ship with a more unique password instead of
> one factory password for all routers of the same make/model.
Re: Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday
"Big Steel" <YouCanRun666@ButYouCannotHide1666.com> wrote in message
news:rMqdnRcWg5niJWTSnZ2dnUVZ_hidnZ2d@earthlink.co m...
> On 7/7/2012 11:58 AM, Adam wrote:
>> Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet
>> Access
>> Monday ...
>> http://medford.patch.com/articles/fb...-access-monday
>>
>>
>
> Monday will come and pass. It's just another doomsday that will not amount
> to much.
Kinda like the Y2K scare; my boss made me come back early from vacation for
that one. But that was all right- I got triple time for eight hours, plus
two extra vacation days for that one :-)
--
SC Tom
Re: Computers Infected By 'DNS Changer' Trojan Malware Will LoseInternet Access Monday
On 7/8/2012 4:20 PM, SC Tom wrote:
>
>
> "Big Steel" <YouCanRun666@ButYouCannotHide1666.com> wrote in message
> news:rMqdnRcWg5niJWTSnZ2dnUVZ_hidnZ2d@earthlink.co m...
>> On 7/7/2012 11:58 AM, Adam wrote:
>>> Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet
>>> Access
>>> Monday ...
>>> http://medford.patch.com/articles/fb...-access-monday
>>>
>>>
>>>
>>
>> Monday will come and pass. It's just another doomsday that will not
>> amount to much.
>
> Kinda like the Y2K scare; my boss made me come back early from vacation
> for that one. But that was all right- I got triple time for eight hours,
> plus two extra vacation days for that one :-)
Maybe you can convince your boss that the activation period is wrong,
and it will happen next Saturday so you can collect again. :)
Computers Infected By 'DNS Changer' Trojan Malware Will Lose Internet Access Monday 
Linear Mode
