Skip navigation

RE: Flashback Trojan

652 Views 2 Replies Latest reply: Apr 8, 2012 10:48 AM by Linc Davis RSS
harjea Calculating status...
Currently Being Moderated
Apr 8, 2012 10:33 AM

Re: flashback Trojan-- I have not received any updates for Java from Software Update.  When I open Java Profile, it just tells me that I need to download Java Runtime.  Does this indicate that I do not have Java installed? I don't know the steps for going into Terminal to check for the Trojan-if I need to do this, please tell me the steps necessary.

imac, Mac OS X (10.6.6)
  • Kappy Level 10 Level 10 (221,010 points)
    Currently Being Moderated
    Apr 8, 2012 10:35 AM (in response to harjea)

    Two Helpful Links Regarding Flashback Trojan

     

    A link to a great User Tip about the trojan: Flashback Trojan User Tip

     

    A related link in the tip to a checker: Malware Checker Dowload Link

     

    A Google search can reveal a variety of alternatives on how the remove the trojan should your computer get infected. This can get you started.

     

    Also, you can download this tool: Anti Flashback-Trojan 1.0.1

  • Linc Davis Level 10 Level 10 (107,660 points)
    Currently Being Moderated
    Apr 8, 2012 10:48 AM (in response to harjea)

    Does this indicate that I do not have Java installed?

     

    Yes.

     

    I don't know the steps for going into Terminal to check for the Trojan-if I need to do this, please tell me the steps necessary.

     

    Log out and log back in, if you haven’t done so recently. Launch the Terminal application in any of the following ways:

     

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

     

    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

     

    ☞ If you’re running Mac OS X 10.7 or later, open LaunchPad. Click Utilities, then Terminal in the page that opens.

     

    Step 1

     

    Copy or drag — do not type — the line below into the Terminal window, then press return:

     

    launchctl getenv DYLD_INSERT_LIBRARIES
    

     

    If any lines of output appear below what you just entered, post them in a reply (the text, please, not a screenshot.)

     

    Step 2

     

    Do the same with this line (triple-click anywhere in it to select the whole line):

     

    find /Applications /System/Library/CoreServices -type d -name *.app -exec defaults read {}/Contents/Info LSEnvironment \; 2> /dev/null | grep DYLD_INSERT_LIBRARIES
    

     

    The command will take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear.

     

    If you get no output from either step, you're not infected with any variant of Flashback that I know of.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.