Repeat this command for all listed services (Especially Ethernet and Wi-Fi connections) to list all configured DNS servers. Networksetup -getdnsservers 'SERVICE NAME' You can also do this in the Terminal by first running the following command: Check this location for all network connections to see the DNS configuration in OS X (click for larger view).Īfter this command is run, next run the following command on each of the listed names (be sure to remove any asterisks from in front of the names, and ensure the names are in quotes if there are any spaces in them):

Follow this by selecting the 'DNS' tab and making note of the DNS servers listed. On Mac systems open the Network system preferences and for each network service (Wi-Fi, Ethernet, Bluetooth, etc.), select the service and then click the 'Advanced' button. First you can check the DNS settings in your system to see if the servers your computer is using are part of the rogue DNS network. If you have recently received a warning when performing a Google search, browsing Facebook, or otherwise using the Web that claims your system may be compromised, then you might consider taking a few steps to check your system for the presence of the malware. If you see this or similar warnings when using Google or other services, then be sure to check your system for malware.

This malware scam has been widespread enough that even third-party companies like Google and Facebook and a number of ISPs like Comcast, COX, Verizon, and AT&T have joined in the effort to help remove it by issuing automatic notifications to users that their systems are configured with the rogue DNS network. These servers were originally a part of a scam where a crime ring of Estonian nationals developed and distributed a malware package called DNSChanger, but which the FBI seized and converted to a legitimate DNS service. On July 9, the FBI will close down a network of DNS servers that many people have been depending on for proper Internet access.

Dns worm virus