finder corrupt? - Strange characters in menu

mudpize wrote:

Fixed it! Hooray! I had a moment of panic there. When I logged back in the screen was empty. had to restart. Can you give me directions on where to upload these files please and then I want to get rid of them.

Sure. Based on what Linc just told me, you can leave out the "swlog" file as it will vary with each installation. I think the best approach may be to zip the four remaining files together and explain that in the remarks.

The first is a community site, VirusTotal. In the remarks section explain that it's what was installed by the OSX.FlashBack Trojan.

The second is the one ClamXav uses, clamav. They request that you don't download more than two files a day, but I would ignore that since they are a package. Again explain that they are the files installed by the OSX.Flashback Trojan and include the keyword "macos".

Also, is it fairly certain this came in through a bogus flash site as I read in the other thread? This makes sense to me now as I recently upgraded Firefox and there were several things I clicked afterwards that popped up and I believe one was Flash.

It probably looked like the site described here Flashback Trojan Spreading; Mac Users Should Be Wary of Flash Installers.

mudpize wrote:

Done. I've uploaded and submitted. The files are now trashed. Thank you

And thank you for your help.