Mac using OS X 10.7 infected with dns changer?

Hi. I was recently alerted by my internet company that my computer was infected with a virus called “dns changer.” Upon further inspection I found that one of my DNS servers matched up with a list of known rogue DNS servers.
I have downloaded several virus scanning programs, such as macscan and virusbarrier x6 which were recommended to me. They didn’t turn up anything.
I’ve been through the OS X 10.7 topics on the mac community as well as other websites (couldn’t find the “plugins.settings” in my Internet Plug-Ins folder and tried to pry it out using terminal). The same bad DNS server has mysteriously appeared on other computers that use the same internet connection out of my home and have not have any untrustworthy downloads.
This is a real head scratcher. If anybody could help it would be much appreciated!

I've recently had the same thing! I did the instructions above and got this
Last login: Sun Apr 22 15:11:46 on ttys000
dhcp-149-144-209-103:~ megansmart$ /usr/sbin/scutil --dns | grep nameserver
nameserver[0] : 131.172.2.2
nameserver[1] : 131.172.4.1
dhcp-149-144-209-103:~ megansmart$
help!

Similar Messages

I have always heard that Macs are less likely to get infected with a virus. My computer has been running much slower since I installed Maverick. Just not sure what the problem might be. Is there a way for me to run a diagnosis?

I have always heard that Macs are less likely to get infected with a virus. My computer has been running much slower since I installed Maverick. Just not sure what the problem might be. Is there a way for me to run a diagnosis?

Some have found relief just by reinstalling, but it is more than likely incompatible third-party applications that slow it down.
You will have to investigate to see what it is.
Open Activity Monitor and see if anything is using a lot of CPU% or Memory. If they are, check to see if there is an update for them.
Another place to look is the Console. See if anything is logging repeating messages with throttling and/or respawn in the All Messages list.
Sometimes it is not that easy to root out the problems, but if you have anything that purported to clean, protect, optimize, maintain, or flush your system, then that is likely the cause.

SSO does not work with DNS change

Hi all,
I have an ITS service which works fine on intranet but do not work on internet. But the same service when put on internet (ofcourse with a different DNS i.e. abc.mycompany.co.uk) and it breaks down. When clicking on a webgui service or webrfc service it opens up the logon screen asking for password. In the whole ITS service there is no cross domain service.
The same thing works fine on intranet with different domain name.
Is there any other settings to be changed to accomodate for the new domain to work on the internet?
Thanks in advance for your replies.
Surendar

Hi Surendar,
cross domain support is from security point not a proper solution.
The ITS issues a MYSAPSSO2 cookie. The cookie specification says that the browser rules who is getting cookies. Normally only site with the corresponding DNS name will get.
Possible solution would be:
If you switch your application, the service which creates the ticket must be connect with another DNS name. Your DNS server allows to configure aliases. So just connect your WebServer with WGate with this new (alias) name, then you will get a cookie with another entry in DOMAIN property of the cookie.
See ITS parameters:
http://help.sap.com/saphelp_webas620/helpdata/en/4b/0c00273d6d11d480aa00c04f99fbf0/frameset.htm
regards,
-markus

Hi my computer is infected with 733,exec.bat malware..even though I had eth elitist virus barrier,HELP what do I do??

Hi my mac book pro ( 1yr old) is infected with 733,exec.bat malware..even though I had installed virus barrierX6
HELP what do I do??

Hi
Message comes up when using the net.... the Virusbarrierx 6 program tells me with a pop up ..... asking me to repair quarantine etc.... I hit repair and it says virus eradicated... but then will come again at a new page..... some will say something like histplist....as file and others will be something to do with cookies etc. Could I delete all cookies/history and reset safari? ps I am on Lion operating system
thanks CHM

My computer has been infected with a Trojan Horse. It has completely taken over my Mac email account and was sending out malicious email to everyone in my address book. At the same time it infected my iPhone---I am no longer able to receive or send emai

My computer has been infected by a Trojan Horse. It has taken over my Mac email account and began sending out malicious emails to everyone in my address book. I cleared out my MAC address book and began using my AOL email account. It took a few days and then my AOL email account was infected and has now been send out malicious email to all my contacts for over a month. It has also infected my iPhone--I am no longer able to send or receive emails on my iPhone. Also, once the Trojan Horse began using my AOL email it completely blocked me from using my MAC account by sending never ending popups asking for my email password to access my MAC email account, but it never accepts my pass word. The TH has also slowed down everything on my computer. It's like I am working on an old PC with dial up connection instead of the high speed digital connection that I have. The little color wheel spins constantly as I wait for sometimes over a minute for a page to pull up. If it pulls up at all. I have tried to use the 2 disks that came with my computer to completely remove everything on my computer and then reinstall all the programs, but I am not allowed to sweep my computer clean. I thought maybe my disks that came with my computer were defective so I called Apple and they sent me 2 new disks. I am not able able to clear my computer with the 2 new disks either. I have done this before successfully so it's not something new to me. I do remember when I believe my computer became infected: I had googled an unusual sewing term, and I was opening what appeared to be legitimate sites, when all of a sudden a pop up appeared that said that my computer had been infected. I immediately shut my computer off, but it was too late. I downloaded a virus program for Mac, and it has never found a virus or problem at all. I think it is part of this Trojan Horse, but I am unable to delete it from my computer. It refuses to uninstall. The Mac Trojan Horse is real and it is terrible. If anyone has any suggestions for me I would be very appreciative,
Beth
vu

Install ClamXav and run a scan with that. It should pick up any trojans.
17" 2.2GHz i7 Quad-Core MacBook Pro  8G RAM  750G HD + OCZ Vertex 3 SSD Boot HD 
Got problems with your Apple iDevice-like iPhone, iPad or iPod touch? Try Troubleshooting 101

How do I know if my Mac has been infected with the virus

I recently was asked to download an Adobe Acrobat reader update but before I was made aware that the current virus was contained in a similar request, I downloaded what I assumed to be a legit update. I currently do not use my mail program on my Mac so am unaware of any spam being distributed from the computer. How can I identify if my computer has been infected with this Trojan Horse virus?

Two Helpful Links Regarding Flashback Trojan
A link to a great User Tip about the trojan: Flashback Trojan User Tip
A related link in the tip to a checker: Malware Checker Dowload Link
A Google search can reveal a variety of alternatives on how the remove the trojan should your computer get infected. This can get you started.
For now I recommend the User Tip from etressoft to detect and remove:
Checking for and removing the "Flashback" trojan

I mac seems to be infected with something

I'm afraid my imac is infected with something. When browsing on safari or firefox, new tabs randomly open with strange download websites or with a website that has nothing to do with what i was looking at or searching for., I'm afraid my imac is infected with something. When browsing on safari or firefox, new tabs randomly open with strange download websites or with a website that has nothing to do with what i was looking at or searching for. This is also after a program malware program called "mackeeper" somehow downloaded on my mac and has been deleted.

There is no need to download anything to solve this problem. You may have installed a variant of the "VSearch" ad-injection malware. Follow Apple Support's instructions to remove it.
If you have trouble following those instructions, see below.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
The VSearch malware tries to hide itself by varying the names of the files it installs. To remove it, you must first identify the naming pattern.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
/Library/LaunchDaemons
In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "LaunchDaemons" may open. Look inside it for two files with names of the form
          com.something.daemon.plist
and
           com.something.helper.plist
Here something is a variable string of characters, which can be different in each case. So far it has always been a string of letters without punctuation, such as "cloud," "dot," "highway," "submarine," or "trusteddownloads." Sometimes it's a meaningless string such as "e8dec5ae7fc75c28" rather than a word. Sometimes the string is "apple," and then you must be especially careful not to delete the wrong files, because many built-in OS X files have similar names.
If you find these files, leave the LaunchDaemons folder open, and open the following folder in the same way:
/Library/LaunchAgents
In this folder, there may be a file named
          com.something.agent.plist
where the string something is the same as before.
If you feel confident that you've identified the above files, back up all data, then drag just those three files—nothing else—to the Trash. You may be prompted for your administrator login password. Close the Finder windows and restart the computer.
Don't delete the "LaunchAgents" or "LaunchDaemons" folder or anything else inside either one.
The malware is now permanently inactivated, as long as you never reinstall it. You can stop here if you like, or you can remove two remaining components for the sake of completeness.
Open this folder:
/Library/Application Support
If it has a subfolder named just
           something
where something is the same string you saw before, drag that subfolder to the Trash and close the window.
Don't delete the "Application Support" folder or anything else inside it.
Finally, in this folder:
/System/Library/Frameworks
there may an item named exactly
            v.framework
It's actually a folder, though it has a different icon than usual. This item always has the above name; it doesn't vary. Drag it to the Trash and close the window.
Don't delete the "Frameworks" folder or anything else inside it.
If you didn't find the files or you're not sure about the identification, post what you found.
If in doubt, or if you have no backups, change nothing at all.
The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Then, still in System Preferences, open the App Store or Software Update pane and check the box marked
          Install system data files and security updates (OS X 10.10 or later)
or
          Download updates automatically (OS X 10.9 or earlier)
if it's not already checked.

My internet provider informed me my Mac has been infected with a Flashback virus. How do I remove it? I have Macbook OSX 10.5.8

My internet will be cut off in 48 hours unless I remove this virus. I got an e-mail saying I was infected with this flashback virus. I called Rogers to confirm that it wasn't a phishing e-mail and it is legitimate. The only thing they did was give me numbers to a paid technical support line, I'd prefer not to call and pay. I went online and found a tutorial for removing it using Terminal, which I tried and got the error messages which apparently means I'm not affected. Help! How do I remove this virus before my internet gets cut off?
I am operating a MAC OSX 10.5.8 software system on my macbook

Maybe
F-Secure's Flashback removal tool - http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_k.shtml - supposedly also works on OSX 10.5 and earlier.
Something you should consider is upgrading to Snow Leopard since then you (for at least a few more months) will still get security updates from Apple which would cover this issue.
Snow Leopard 10.6 Technical Requirements - http://support.apple.com/kb/SP575 - note by K Shaffer - http://discussions.apple.com/message/12921514 : "Some early Intel-based Macs can't use Snow Leopard 10.6 installers; of those, the Core Duo (not 2 duo) were suspect and had issues." - and a qualifier by "a brody" http://discussions.apple.com/message/13028822 : "I think that refers to the ones without at least 1 GB of RAM."
Macs and Software that will run with Snow Leopard (Mac OS X 10.6.x) - https://discussions.apple.com/docs/DOC-2455
A Mac OS X 10.6 Snow Leopard Application Compatibility List - http://snowleopard.wikidot.com/

My mac is infected with viruses, Safari can not normally search for constantly appear commercials and some unknown site. What to do? antivirus free program that you recommend?

my mac is infected with viruses, Safari can not normally search for constantly appear commercials and some unknown site. What to do? antivirus free program that you recommend?

You may have installed the "VSearch" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Step 1
From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
Step 2
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
          Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
This trojan is distributed on illegal websites that traffic in pirated content. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that this Internet criminal has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Want to use a Lacie External Hard Disk with Windows and Mac? Can I?...

Hi, I've just purchased a Lacie Extreme D2 external hard disk, I'm looking to use it to move film clips from my Mac G5 to my Sony Vaio laptop. I'll connect the Mac using Firewire 1 and the PC using USB 1.
I understand there is an issue with setting the compaitibility of the hard disk to either Mac or Windows format but I'm wondering if I can set it to both, so it's possible to transfer these files? The hard disk is Windows and Mac compatible but does it have to be partitioned a certain way?
Any help is much appreciated.
Thanks,
Alex

Format the drive as FAT or use the Mac format (HFS Extended) and install MacDrive on the PC.

I have itunes set up on a PC with all my music, apps, etc. I want to stop using PC and move my iTunes and files to a Mac I bought and synch my iPhone with the Mac. Can I just synch iPhone with Mac iTunes and will it copy all my stuff onto Mac, or will I h

I have itunes set up on a PC with all my music, apps, etc. I want to stop using PC and move my iTunes and files to a Mac I bought and synch my iPhone with the Mac. Can I just synch iPhone with Mac iTunes and will it copy all my stuff onto Mac, or will I have to copy files from PC onto Mac?

Here are some of the links to get you started.
https://discussions.apple.com/thread/3727530?start=0&tstart=0
http://support.apple.com/kb/HT4527
http://www.macworld.com/article/1146958/move_itunes_windows_mac.html

How to connect my ipad with mac using bluetooth?

how to connect my ipad with mac using bluetooth?

You can't so quit trying. Take a look at this to see what is supported with regard to Bluetooth connections in iOS.
iOS: Supported Bluetooth profiles

Is there a way to use the iMac's display mode with a Mac mini with out logging in first on the Mac mini

Is there a way to use the iMac's display mode with a Mac mini with out logging in first on the Mac mini (late2014)
im currently useing my Mac mini as a portable computer, I take it to the university and use the iMacs there as a monitor but before I can do that I have to log in to my Mac mini first which means doing it blind
is there a way to put the IMacs into display mode with out logging into my Mac mini first
or is there a portable monitor that I can use that will not require me to login first

This
Target Display Mode: Frequently Asked Questions (FAQ) - Apple Support
says:
How do I enable TDM?
Make sure both computers are turned on and awake.
Connect a male-to-male Mini DisplayPort or ThunderBolt cable to each computer.
Press Command-F2 on the keyboard of the iMac being used as a display to enable TDM.
Note: In Keyboard System Preferences, if the checkbox is enabled for "Use all F1, F2, etc. keys as standard functions keys," the key combination changes to Command-Fn-F2.
How do I exit TDM?
To leave TDM, press Command-F2 on the keyboard of the iMac that is in TDM. You can also exit TDM if you shutdown or sleep either computer or detach the cable.
Can I use a third-party keyboard or older Apple keyboard to enable TDM?
Some older Apple keyboards and keyboards not made by Apple may not allow Command-F2 to toggle display modes. You should use an aluminum wired or wireless Apple keyboard to toggle TDM on and

TS2834 I've been using the mail app that came with my Mac for over a year. Out of the blue, it will not open and keeps saying "Mail cannot open because of a problem" and something about not being compatible ??? Help! I miss my mail

I've been using the mail app that came with my Mac for over a year. Out of the blue, it will not open and keeps giving me an error like "Mail cannot open because of an error and something about it not being compatible. Please help! I miss my mail

Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Console in the icon grid.
Make sure the title of the Console window is All Messages. If it isn't, select All Messages from the SYSTEM LOG QUERIES menu on the left. If you don't see that menu, select
View ▹ Show Log List
from the menu bar.
Click the Clear Display icon in the toolbar. Then try the action that you're having trouble with again. Select any messages that appear in the Console window. Copy them to the Clipboard (command-C). Paste into a reply to this message (command-V).
When posting a log extract, be selective. In most cases, a few dozen lines are more than enough.
Please do not indiscriminately dump thousands of lines from the log into this discussion.
Important: Some private information, such as your name, may appear in the log. Anonymize before posting.

How to sync 2 different Mac users using the same Apple ID and with out mixing each other info?

How to sync 2 different Mac users using the same Apple ID and with out mixing each other info?
We are two people using three difrent Macs, 1 Iphone and 1 Ipad with separate USERS on each Mac but sharing the same Apple ID: xxxxxx
I set up the first user to iCloud and it was OK but when I set up the second user to use iCoud the first users's info gets mixed with the second user's info?
Do we have to set up a diffrent Apple ID for each other?
Sometime ago I added my friends E mail (yyyyy) to the main Apple ID (xxxx) as for using his E mail account (to separate our e mail accounts, and it's working ok) but now when I try to create a new apple ID whith the same friend's e mail (yyyyyy) it says that his mail (yyyyy) is already an apple ID when the Apple ID is really my E mail (xxxxx)... any clue?
Thanks

I believe because you migrated from a Nokia to an iPhone you need to register the Bn phone number with your Apple ID so it can be used for iMessage. The Pn number seems to be the only one registered
Go here > https://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa/
Manage your Apple ID and see if that does the trick
Hope that helps

Mac using OS X 10.7 infected with dns changer?

Similar Messages

Maybe you are looking for