Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

virus - time machine

My computer has been acting very strange lately. I know Macs aren't prone to viruses, so I may or may not have one. There is also evidence of some tampering as if I've been hacked.


Regardless, I have not backed up via TimeMachine for about a year. Should I run a backup to my external hard drive or do I risk infecting it also and thus all my backups and other files on the external hard drive?

MacBook, Mac OS X (10.5.8)

Posted on Apr 23, 2012 12:51 AM

Reply
1 reply

Apr 23, 2012 11:09 AM in response to Mt. Fuji

Disable Java in your Browser settings, not JavaScript.


http://support.apple.com/kb/HT5241?viewlocale=en_US

http://support.google.com/chrome/bin/answer.py?hl=en-GB&answer=142064

http://support.mozilla.org/en-US/kb/How%20to%20turn%20off%20Java%20applets


Flashback - Detect and remove the uprising Mac OS X Trojan...


http://www.mac-and-i.net/2012/04/flashback-detect-and-remove-uprising.html


In order to avoid detection, the installer will first look for the presence of some antivirus tools and other utilities that might be present on a power user's system, which according to F-Secure include the following:


/Library/Little Snitch

/Developer/Applications/Xcode.app/Contents/MacOS/Xcode

/Applications/VirusBarrier X6.app

/Applications/iAntiVirus/iAntiVirus.app

/Applications/avast!.app

/Applications/ClamXav.app

/Applications/HTTPScoop.app

/Applications/Packet Peeper.app


If these tools are found, then the malware deletes itself in an attempt to prevent detection by those who have the means and capability to do so. Many malware programs use this behavior, as was seen in others such as the Tsunami malware bot.


http://reviews.cnet.com/8301-13727_7-57410096-263/how-to-remove-the-flashback-ma lware-from-os-x/


http://x704.net/bbs/viewtopic.php?f=8&t=5844&p=70660#p70660


The most current flashback removal instructions are F-Secure's Trojan-Downloader:OSX/Flashback.K.


https://www.securelist.com/en/blog/208193454/Flashfake_Removal_Tool_and_online_c hecking_site


More bad news...


https://www.securelist.com/en/blog/208193467/SabPub_Mac_OS_X_Backdoor_Java_Explo its_Targeted_Attacks_and_Possible_APT_link

virus - time machine

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.