Q: Mac virus sent as an Adobe Flash Player update?  I downloaded it.  Is there anything I should do?

This should help check and remove it (if there is a problem)......

http://www.macupdate.com/app/mac/42571/anti-flashback-trojan

Software updates do not come as attachments to emails! I saw the same e-mail and deleted it. Install ClamX and see if it will quarantine the virus.

Just to keep it straight, there is a "flashback" malware trojan, not a virus, that requires you to download it and execute it. If you downloaded an email and didn't execute it, just delete the email. If you want to ensure it's not on your system, see the note above or this one: http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml . Terminal is located on your hard drive in applications/utilities.

Ken1954 wrote:

 

I've read there's a Mac virus that was sent as an Adobe Flash Player update.  I downloaded it.  Is there anything I should do?

The current threat is still called Flashback, but no longer involves Adobe Flash Player and uses Java to infect. As long as you always download Flash updates from adobe.com and keep your software up-to-date, you'll be fine.

Download this:

https://github.com/jils/FlashbackChecker/wiki

and see whether infected, probably not. If not, update your system, and do not bother.

Cattus Thraex wrote:

 

Download this:

I don't know about everybody else, but I'm not going to run any binary that doesn't tell me what it's doing. For all I know this will install the next variant!

I know everybody is trying to be helpful with these little tools, but if you aren't getting it from a reputable source I would never run anything like this.

See here:

http://arstechnica.com/apple/news/2012/04/checking-for-mac-flashback-infestation -theres-an-app-for-that.ars

Cattus Thraex wrote:

 

See here:

Thanks.

I can't believe that all the tools that I've run across outside of this forum are all written to look for the old "I" variant while we've been working for over a week on "K"!  I left a comment on ARS to let them know they and the tool are still out in left field.  Had to do the same thing for another one that's on MacUpdate.