[Macpartners] Flashback trojan reportedly controls half a million Macs and counting

[John-Elmer Canfield]

This may be much trumped up hysteria by the Russian company trying to sell their "antivirus" software. Apple plugged the vulnerability with a Java update a couple of days ago, so make sure you let Software Update do its thing.

To allay any fears that your system may already be infected, simply paste these two commands into a Terminal window. If they both return messages saying the entries don't exist, then you're fine:

   defaults read /Applications/Safari.app/Contents/Info LSEnvironment
   defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

It'd be interesting to hear if anyone actually finds an infected system!


Thanks,

John-Elmer

On Apr 5, 2012, at 8:43 AM, Michael Tiernan wrote:

> Flashback trojan reportedly controls half a million Macs and counting
> 
> By Jacqui Cheng | Published about 15 hours ago
> Variations of the Flashback trojan have reportedly infected more than half a million Macs around the globe, according to Russian antivirus company Dr. Web.
> 
> Here's a link to the article and discussion about how to check to see if your machine is infected:
> http://tinyurl.com/6vtpkml
> -- 
>   << MCT >>   Michael C Tiernan xmpp:mtiernan at mit.edu +1 (617) 324-9173
>   MIT - Laboratory for Nuclear Science - http://www.lns.mit.edu
>   High Perf Research Computing Facility at The Bates Linear Accelerator
>     Please avoid sending me MS-Word or MS-PowerPoint attachments.
>     See http://www.gnu.org/philosophy/no-word-attachments.html
> 
> _______________________________________________
> Macpartners mailing list
> Macpartners at mit.edu
> http://mailman.mit.edu/mailman/listinfo/macpartners