Checking OSX (Mac) for DNS Changer Infections

Checking OSX (MAC) for DNS Changer Infections

The easiest way to check if your system is violated with DNS Changer malware is to go to one of the “are you infected sites.” is one of the remaining active links.  An archive of the original links is maintained below. (see below). These sites only require someone to visit. The “are you infected site” will inform you if you are infected.

Note: These sites only detect for DNS Changer. You might be infected with other malware. Please take appropriate precautions to protect your computer.  Over the years, the threat from malware on your device is used to change the configuration of your home router has increased. Protecting your devices also means protecting your home.

Original DCWG “Am I Infecfed Sites

[ahm-wp-tabular id=738 template=bluedream]

Manually Checking for DNS Changer Infections

The following are the original manual checks to see if your computer is infected with any of the DNS Changer malware.

To check if your OSX computer is infected, first, click the Apple icon in the top left.

Then, select “System Preferences…”

This opens the System Preferences dialog box. Locate the “network” icon. HINT: Type “network” in the top right corner search field.

This opens the Network settings dialog box. Read the “DNS Server” line. Write down these IP addresses.

Are Your DNS Settings Ok?

The malicious Rove viruses changed some peoples DNS settings to use computers they operated. Compare your DNS settings with the known malicious Rove DNS settings listed below:

[ahm-wp-tabular id=486 template=bluedream]

What if I’m infected?

If your computer is infected, please refer to our page that lists tools to clean DNS Changer and other self-help guides to clean your computer –

It is recommended that multiple approaches to home and endpoint security are used. No one approach protects devices from the attacks which have evolved from the DNS Changer attacks.

Will bad guys change my router’s DNS setting?

Yes, bad threat-actors continue to find criminal value by taking over your DNS settings and having you use their DNS Resolvers. The DCWG and DNS Changer work was the beginning of a theme – miscreants want to invade your home.

Leave a Reply