HT202234: Mac OS X Snow Leopard and malware detection

Learn about Mac OS X Snow Leopard and malware detection
wwwaldemar

Q: flashback

I want to know if there is an easy and safe way to check if my computers are infected with the new trojan "Flashback".

Thanks!

iMac, Mac OS X (10.6.8)

Posted on Apr 7, 2012 8:21 PM

Close

Q: flashback

  • All replies
  • Helpful answers

  • by John Galt,Helpful

    John Galt John Galt Apr 7, 2012 8:31 PM in response to wwwaldemar
    Level 8 (49,171 points)
    Mac OS X
    Apr 7, 2012 8:31 PM in response to wwwaldemar

    Read and follow this User Tip: https://discussions.apple.com/docs/DOC-3271

     

     

    If you get the following dialog box:

     

    Screen Shot 2012-04-07 at 8.33.49 PM.png

     

     

    ... then they're not.

  • by Peter Borbonus,Solvedanswer

    Peter Borbonus Peter Borbonus Apr 8, 2012 1:35 AM in response to wwwaldemar
    Level 1 (140 points)
    Servers Enterprise
    Apr 8, 2012 1:35 AM in response to wwwaldemar

    You need to check in two steps:

    1. In Terminal type:

    defaults read /Applications/Safari.app/Contents/Info LSEnvironment

     

    If you get an error-message like:

    The domain/default pair of (/Applications/Safari.app/Contents/Info, LSEnvironment) does not exist

     

    Everything is ok!

     

    After this check step 2:

    2. In Terminal type:

    defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

     

    If you get an error-message like:

    The domain/default pair of (/Users/peter/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist

     

    Everything is ok!

     

    That's it!

     

    Peter