old news apparently still growing...caused exploit in un-patched java...
careful out there- http://arstechnica.com/apple/news/2...controls-half-a-million-macs-and-counting.ars
manual disinfection instructions (http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml)
code:
disinfection manual removal instructions 1. run following command in terminal: defaults read /applications/safari.app/contents/info lsenvironment 2. take note of value, dyld_insert_libraries 3. proceed step 8 if got following error message: "the domain/default pair of (/applications/safari.app/contents/info, lsenvironment) not exist" 4. otherwise, run following command in terminal: grep -a -o '__ldpath__[ -~]*' %path_obtained_in_step2% 5. take note of value after "__ldpath__" 6. run following commands in terminal (first make sure there 1 entry, step 2): sudo defaults delete /applications/safari.app/contents/info lsenvironment sudo chmod 644 /applications/safari.app/contents/info.plist 7. delete files obtained in steps 2 , 5 8. run following command in terminal: defaults read ~/.macosx/environment dyld_insert_libraries 9. take note of result. system clean of variant if got error message similar following: "the domain/default pair of (/users/joe/.macosx/environment, dyld_insert_libraries) not exist" 10. otherwise, run following command in terminal: grep -a -o '__ldpath__[ -~]*' %path_obtained_in_step9% 11. take note of value after "__ldpath__" 12. run following commands in terminal: defaults delete ~/.macosx/environment dyld_insert_libraries launchctl unsetenv dyld_insert_libraries 13. finally, delete files obtained in steps 9 , 11.
No comments:
Post a Comment