›

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Register

In this Discussion

Is your Mac infected?

ManInTheIvoryTowerManInTheIvoryTower
edited April 2012
Over 600k macs have been infected with the Flashback trojan, is your Macbook one of them?

How to detect if you're infected: http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml

Apple released a patch, link below but should be able to update via Software Update as the latest Java patch.
http://reviews.cnet.com/8301-13727_7-57408874-263/java-update-for-os-x-patches-flashback-malware-exploit/?tag=mncol;txt

If you have been infected please report here. For science!

Comments

  • ManInTheIvoryTowerManInTheIvoryTower
    I'll post simplified instructions for checking for infection via Terminal when I get home today. No access to Macs at work. Sadface.
  • MatthewMatthew
    Stupid java.
  • ManInTheIvoryTowerManInTheIvoryTower
    It was gonna either be that or Flash. Two of the best threat vectors for OSX.

    My money would have been on Flash but that was before I knew that Apple lags months behind on java updates...
  • Loose_ThreadLoose_Thread
    Dammit!

    Although, getting a computer virus is so retro, it has a kind of style appeal... like getting TB
  • swamp_knobbler_mahanswamp_knobbler_mahan
    edited April 2012
    Not infected. STUPID JAVA.
  • MarcusMarcus
    Mac coughs a spot of blood into its kerchief
    "Dearest, are you well?"
    Mac swivels away, turning towards the sunset
    "It's but a trifling cough, think nothing of it."
  • YoursTrulyYoursTruly
    Mac breaks into beautiful death scene aria as orchestra swells
  • ManInTheIvoryTowerManInTheIvoryTower
    Copy and paste each one of the three code strings below into the terminal window (not all at once, three steps). Each command should run automatically but if not hit return.

    defaults read /Applications/Safari.app/Contents/Info LSEnvironment
    defaults read /Applications/Firefox.app/Contents/Info LSEnvironment
    defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

    If your system is clean, the commands will tell you that those domain/default pairs "does not exist." If you're infected, it will spit up the patch for where that malware has installed itself on your system.

    I haven't tested this yet so let me know if you have problems.
  • ManInTheIvoryTowerManInTheIvoryTower
    So Loose_Thread your mac was sick?
  • Loose_ThreadLoose_Thread
    edited April 2012
    I don';t know yet but I'll report back if it is

    I'm just like dammit what is this the Y2K bug
    Shouldn't I get a refund on this machine
  • MirandaJulyMirandaJuly
    I'm clean. I never rawdog randos.
  • MatthewMatthew
    I always wear a rubber while googling the internet.
  • ManInTheIvoryTowerManInTheIvoryTower
    Those commands work fine. You can also check other apps like Chrome via;

    defaults read /Applications/Chrome.app/Contents/Info LSEnvironment

    Despite all the hoopla I haven't met anyone who is infected yet and figured this crowd would have a lot of macs so I'm curious if anyone got bit.
  • ThickeningAgentThickeningAgent
    is it only laptops that got it?
  • ManInTheIvoryTowerManInTheIvoryTower
    edited April 2012
    Not just laptops, any modern (intel) mac is a potential target. Just remember to fire up Software Update and grab the latest Java Security Update to protect yourself. (May have already downloaded/installed automatically so don't panic if you don't see it)
  • Loose_ThreadLoose_Thread
    The good thing about computers is that they can't get pregnant.
  • MarcusMarcus
    (Not for my lack of tryin'.)
  • LelandLeland
    goodde 1!
Sign In or Register to comment.