Mac Flashback Virus - and removal

[PepperElf]

http://howto.wired.com/wiki/Check_Your_Mac_for_Malware


Type the following commands in terminal. (if you get error messages then you're NOT infected)

defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

defaults read /Applications/Safari.app/Contents/Info LSEnvironment

defaults read /Applications/Firefox.app/Contents/Info LSEnvironment



I'm not infected at the moment so this is what I see as my results:

The domain/default pair of (/Users/PepperElf/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist

Domain /Applications/Safari/app/Contents/InLSEnvironment does not exist


Domain /Applications/Firefox.app/Contents/ILSEnvironment does not exist

[Dave1982]

Or just download and install the fix from Software Update.

[PepperElf]

weird though i didn't get an update from them for it.
i'll double check to see if there's one avail for me but ... maybe it only shows up for download if you are infected?

[Dave1982]

http://macdailynews.com/2012/04/12/a...shback-trojan/

Apparently Snow Leopard or later.....

[PepperElf]

ahhhh that's why. When I asked at work which computers could be infected they said "anything that uses Safari" but... I'm on Leopard.

I use to be on SL but when I upgraded it was on a new HDD. the drive died after a year so I went back to my original mac hdd which was still on leopard. i've been too lazy to upgrade back to SL.