dns-changer-malware

Unfortunately, not a hoax.

http://www.fbi.gov/news/stories/2011/november/malwar...

http://www.fbi.gov/news/stories/2011/november/malwar...

It was tempting on reading the above to think it was just another self inflicted wound found only on WINDOWS PCs.

But the problem might have been able to affect Apple computers because the second document referenced above contains instructions on how to fix Apple equipment.
Also, it can affect other network hardware - such as routers.

Has anyone any experience of this malware on Apple computers and/or on routers?

And how was any malware removed, if found?

Yesss, sort of. Not the recent one though. One of my Macs was infected by one of the first dns trojans that affected Macs. Actually it was infected twice, by slightly different variants. This was a good 4 years ago or so. (I subsequently stopped the user from having any control over the admin account!)

The thing I remember most about it was that while I trawled the internet to find a solution to the infection, I came across dozens and dozens of posts in forums all over the place by Mac owners who clearly also were infected and who had no idea at all that they were dealing with a virus or malware, even on the Apple forums.

I have dug out the wonderfully useful Macworld article that I used to remove the trojan. One of the variants needed some advice that I found buried in the comments. http://www.macworld.com/article/1060823/trojanhorse....

Also http://ithreats.net/2008/12/26/how-to-remove-macacce...

The advice applies to 10.5 and those particular trojans, but I think it will still at least flag up dns issues today. In fact that Macworld article is still being commented on up to this month, some 4 1/2 years later, so I am sure that up to date advice and findings will be in those comments.

There is a deal of information on DNS-changer-malware in this article (+links) from Sophos ,the security organisation :- http://nakedsecurity.sophos.com/2012/04/25/internet-...

Please note this,referring to the forthcoming shut down of certain servers:-

"And computers should be fixed - because if the DNS servers go down, any computer relying on them for DNS name services will cease to be able to browse the web, read email or do just about anything on the internet at all."