Currently Being ModeratedOct 19, 2011 7:12 PM (in response to Donna Anna)
you will know if u see this file in your hard disk -> library -> preferences folder
look for a file called:
has instructions on manual removal.
how u like me now?
< Edited By Host >
Currently Being ModeratedOct 20, 2011 8:26 AM (in response to CarltonBanks)
How do I ensure the Securiety updates are current if I suspect theymay have been disabled?
Currently Being ModeratedOct 20, 2011 8:40 AM (in response to Donna Anna)
I don't see a file called "Preferences.dylib", so I'm assuming my computer is safe.
Thank you so much.
Currently Being ModeratedNov 15, 2011 5:20 PM (in response to Donna Anna)
I don't have that preference file, but I think I still have the trojan!
Incidently, I am running Snow Leopard. Some folks have been saying this trojan only infects Lion, but no.
Also, the solution from F Secure using the teminal program doesn't seem to work for me either. I get a "permission denied" message when I try:
plutil -convert xml1 /Applications/Safari.app/Contents/Info.plist
Any other help available?
Currently Being ModeratedNov 15, 2011 5:28 PM (in response to Kailua)
Apparently thare are now at least 4 variants of the original Flashback trojan. I don't see anything which offers clarity as to whether the presence of the Preferences file is a marker for all the variants or not.
Apple has included protection from the initial generation of the trojan through security updates, but this artcle seems to indicate that the newest variant actual is a little more nasty, and whether or not recent security updates can rebuild damaged files is unknown.