Friday, April 6, 2012

How To Check Flashback Trojan Infected Mac Or Not

Probably this is your first time hearing Mac OS X infected by malicious software, like Trojan. As we know that the Apple computer operating system is widely known for its strong defense against malware. But not this time, there is a flashback trojan has been attacking Mac OS X and according report I red the trojan has managed to infiltrate to over 600,000 Mac users and probably more now.

Things get worse because the flashback trojan was written in an unknown language, and it does not need to know your password to access you MAC OS system . But don't worry too much, you can check whether your Mac is infected, if so than you can remove it.

Mac Flashback Trojan

How to check whether your Mac is infected by FlashBack Trojan.


1. From Utilities folder, then open Terminal.

2. Then, once you're in, follow these easy steps to detection:

3. Within it, then type the command below in Terminal

defaults read /Applications/Safari.app/Contents/Info LSEnvironment

4. Make a note of the value, DYLD_INSERT_LIBRARIES

5. Continue to the step 6 if you receive this error message:

The domain/default pair of (/Applications/Safari.app/Contents/Info, LSEnvironment) does not exist

6. Type this command in Terminal:

defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

7. Take note of the result. Your system is already clean of this variant if you got an error message similar to the following:

"The domain/default pair of (/Users/joe/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist"

If you get variant "does not exist" after running the commands from the above steps, means your MAC is clean or not infected. If the command gives you result other than that, you can head to F-secure to deal with it.

Via Gizmodo.

Want to easier method? You can download FlashbackChecker app to check Trojan Downloader Flashback on Mac.

2 comments:

Do you have to run this test under all user logins on the mac, or does it work to run on a single login?

woww thats really effective thanks for sharing it

Post a Comment