The Blog by Ziyad Nazem

Trojan on Macs, and How-To Fix

Over 600,000 Apple computers have been infected by this “Flash Player” malware codenamed “Flashback.” This is a “dummy”of Adobe’s Flash Player and it looks strikingly similar to it. The malware was installed by users mistaking for Adobe’s Flash Player. Whenever the user would browse the web, it would collect personal information from the web browser and then send it to remote servers. Apple did fix the issue by upgrading its malware scanner XProtect to kill off the files of “Flashback” by using Java. Now, I know probably many of you might have been infected by this Trojan. Well, have no fear a fix is here. What you need to do is you need to open “Terminal” in the Utilities folder on your Mac. Then, copy this code and paste it into Terminal:

defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES
defaults read /Applications/Safari.app/Contents/Info DYLD_INSERT_LIBRARIES
defaults read /Applications/Firefox.app/Contents/Info DYLD_INSERT_LIBRARIES

After clicking “enter” you will either get a welcoming note that says, “domain/default pairs does not exist.” If you get that, your Mac is not infected.

If you, however, are infected, Terminal will split up the patch and show where the files are for it. Also, if you are infected here is a walkthrough provided by security firm F-Secure to get your Mac fixed.