2 Replies Latest reply: Apr 8, 2012 1:35 AM by Peter Borbonus
wwwaldemar Level 1 Level 1 (0 points)

I want to know if there is an easy and safe way to check if my computers are infected with the new trojan "Flashback".

Thanks!


iMac, Mac OS X (10.6.8)
  • 1. Re: flashback
    John Galt Level 8 Level 8 (36,430 points)

    Read and follow this User Tip: https://discussions.apple.com/docs/DOC-3271

     

     

    If you get the following dialog box:

     

    Screen Shot 2012-04-07 at 8.33.49 PM.png

     

     

    ... then they're not.

  • 2. Re: flashback
    Peter Borbonus Level 1 Level 1 (95 points)

    You need to check in two steps:

    1. In Terminal type:

    defaults read /Applications/Safari.app/Contents/Info LSEnvironment

     

    If you get an error-message like:

    The domain/default pair of (/Applications/Safari.app/Contents/Info, LSEnvironment) does not exist

     

    Everything is ok!

     

    After this check step 2:

    2. In Terminal type:

    defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

     

    If you get an error-message like:

    The domain/default pair of (/Users/peter/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist

     

    Everything is ok!

     

    That's it!

     

    Peter