How to Scan a Router for Malware

Lawrence Bonk Profile image

Written by:

Updated August 10, 2022

If you are worried about hackers or other threats to your wireless network, you may wonder how to scan a router for malware. Even the best routers, after all, are susceptible to malware and related viruses, so it’s always a good idea to check every once in a while. Keep reading to learn all about this process.


  • Routers can be infected with malware, which leads to all kinds of issues with your Internet connection and allowed Internet traffic.
  • To check for malware on a Wi-Fi router, look for a changed DNS server address on your Wi-Fi router settings or download and install dedicated scanning software.
  • If you find malware on your router, perform a full factory reset to solve the problem. Your Internet searches and Internet traffic should speed up.

How to Check a Router for Malware

Any device with an operating system (OS) can be infected with malware, and modern routers are no exception. If you are learning how to set up a router as a bridge and you get infected with malware or a virus, you’ll be out of luck. Luckily, there are plenty of ways to suss out potential infections so you can go about learning how to change a router’s security settings and implementing other protections.

If you’re interested in more network protections, you might want to know how to set up UPnP on a router, delete a WiFi network from a router, and how to reset a router password.

Insider Tip

Some antivirus software suites, such as Symantec, boast integrated router scanning capabilities.

Method 1 – Pay Attention to Your Connection

  1. A great way to suss out malware is to simply pay attention to your overall Internet connection.
  2. Is your computer running slowly, lagging, or even crashing? Router malware could be to blame.
  3. Are fake antivirus messages appearing on-screen? This is another tell-tale sign,
  4. Unfortunately, the symptoms of router malware and a traditional computer virus are extremely similar.

Method 2 – Check the DNS Server Address

  1. Hackers occasionally use malware to change your DNS server address so as to direct traffic to infected services.
  2. Log on to your router’s control panel or settings page, looking for the DNS server address.
  3. Is the address unrecognizable? Malware could have changed the address to one operated by hackers.

Method 3 – Use Dedicated Scanning Software

  1. There are multiple software suites and web apps available that scan routers for malware infections.
  2. Products such as F-Secure Router Checker automatically check your DNS server address and other items of interest for potential malware attacks.
  3. Look for the right software for your particular setup, download it, run it, and check to see if your router is riddled with malware.

What to do if Your Router is Infected

Perform a full factory reset of the router, restoring all of its default settings. This process will differ according to the make and model of your router, but a full factory reset nearly always puts the kibosh on any malware.


How to remove viruses and malware from an infected router?

Once you are certain via router settings that you have some malware, eliminate it by restoring your router to its factory default settings. Firmware updates also occasionally help.

How to prevent your Linksys router from getting The Moon malware?

Make sure to always update and install the newest router firmware. Check for new releases by inputting your login credentials and heading to the settings app via a web browser, a mobile device, or another connected device.

How much damage could router malware cause?

Unfortunately, routers are indeed a target for hackers and malware can cause a disruption to your entire wireless network.

STAT: Over the past few years, cybersecurity researchers have started to discover malware that can directly affect routers. One notable example is 2016’s Switcher Trojan, which hijacked victims’ Android devices to manipulate their router settings. (source)

Lawrence Bonk Profile image