OS X V10.7 Lion :: Getting Flashback.K Trojan On Macbook Pro?
Apr 3, 2012
The initial instructions are: 1. Run the following command in Terminal: ls -lA ~/Library/LaunchAgents/ 2. Take note of the filename. Proceed only when you have one file. Otherwise contact our customer care. I ran the indicated command and encountered this output: Node00:~ mdyson$ ls -lA ~/Library/LaunchAgents/ total 64
[code]...
In item 2,based on multiple results,my apparent next step would be to contact "our customer care" but I am not F-Secure customer and instructions as to exactly whom and how I am to contact them are lacking. For various reasons I did have Java installed and enabled in Safari.
Info:
MacBook Pro 17, Mac OS X (10.7), Mac Mini Server; Time Capsule
"More than half a million Macs are infected with the Flashback Trojan, a malware package designed to steal personal information, according to a Russian antivirus company." on Cnet:Â
[URL]
I went to the Fsecure link and followed some of the steps on terminal. None of the file names came up so it seems like my computer is clean, but how can I be 100% sure? What's a good virus/malware/trojan scan I can run on my computer to be 100% sure?Â
Sitting here, a bit paranoid after recent newflash bout mac trojans. Trying to follow instructions from F-secure on how to detect if my computers been infected .They say i must use terminal and use a command like this: defaults read /Applications/Safari.app/Contents/Info LSEnvironment. When i do this its all ok, but the problem is i am using chrome as browser. Cant find a single note, googling on how to search for the trojan if youre using chrome, so i turn this way to ask the pros (?) how to deal with this. Â
Is flashback able to affect chrome and how do i detect it?Â
Why is Apple not addressing the issue of the Flashback Trojan? It is a tad disconcerting to have to rely on third-party advice, much of which seems rather iffy.
I am quite sure that most Apple customers are waiting for some sort of Official response and clear directives as to how to a) figure out whether ones computer has been hit by the virus, and b) how to safely address it.Â
I had one of 15 of these laptops in the same room and it did not let the user login to a web-based grading site. The MacBook did log in for me at home but, there was a delay with a brief webpage saying something about so many seconds to redirect. (Could not read it all.) I never experienced a delay before using this web-based grading site.
I´m a OS X 10.5.8. user. Now my iMac is infected with the flashback trojan. Especially my gmx mail-account is forwarding spam-massages. What do I have to do?
If 10.5 is up to date, is it vunerable to the Flashback.G Trojan that was reported on 2/24? All of the news items about this speak only of 10.6 or 10.7. They imply that if OS X is up to date, then there are no worries.Â
I have an iMac running OS 10.4.11. How can I check to see if I have the Flashback Trojan (and remove it, if I have it)? IMy Safari is also crashing frequently.
I just recently updated to 10.6.3 which, as far as I know does not have built-in protection from stuff like Flashback Trojan. When I click on "Software Update" all I get is an inactive, blank screen. I was told that if I clicked on that I would be able to download Apple's patch preventing this from infecting my iMac.
How can I tell if my computer has been infected with this latest Trojan (or with any Trojan)? I did install the latest update to Java when I was told by my iMac that new software was available for my computer, which was just 2 or 3 days ago (first week of April). Now it is being said that there was a Java Trojan.Â
My wife just called in a panic. She opened an e-mail from Verizon Wireless. The e-mail noted that we had a bill of over $1100 which was completely wrong. Unfortunately she clicked on a graphic within the email and then decided to forward it to me. At that point, her mail app stopped functioning. I've Googled the issue and found out that she most likely has infected her iMac with a trojan. She is currently running an anti-virus software that I don't have much faith in. How to remove this trojan?
My iMac is running SL but I have an external bootable hard drive running Lion. When using Software Update on the iMac SL system drive there is no mention of Flashback but when booting into Lion on the external I was able to download the tool.Does SL need it and if so how can I get it?
Info: iMac, Mac OS X (10.6.8), FCE 4 + FCS 3 . . . Little Knowledge, Many Opinions.
And so the Flashback saga continues. About a couple of days before the Java patch hit I encountered the now dreaded Software Update login screen. I did not enter my password, hit cancel, popped back up and hit cancel again. So here is the issue, at the time this happened I had iAntivirus installed which is one of the application this malware looks for when installing orginially according to F-Secure. (apparently it doesn't work on Lion which might be the issue). Since I hit cancel it would have still tried to continue with the second variation but I also have Office 2011 (also one of the applications this looks for before self deleting according to F-Secure).Â
I panicked when popular news broke about this and following the terminal commands provided by F-secure discovered that for all 3 commands, there was nothing that existed and became relieved and updated Java with the new update...until I proceeded to download ClamXav (app store free version) as a future precautionary measure. This is when I ran a scan and discover 2 OSX Flashback-8 infections. One .null and one .rserv. Both of which I promptly removed, which sent them to the trash. When I attempted emptying the trash neither could be permanently deleted bc both were "in use". Â
How do I still have the trojan, virus, malware or whatever you want to call it if terminal found nothing but ClamXav did? Is this just a variation that hasn't really been encountered before?Â
I should also note that in my Library I have both null. plist and com. adobe. reader. plist that had been recently modified in the last couple of weeks (these were mentioned in several articles as potential launcher files. Â
Any thoughts or should I just completely restore my Macbook Pro?
I thought this trojan horse affected those who had Java (JRE) up and running i.e.,Safari security Java checkbox enabled. I also believed this Trojan horse also affected those using Snow Leopard. Clarify please.
