Thursday, April 05, 2012

How to Check for Presence of Trojan-Downloader:OSX/Flashback.I

If you run OS X and want to check for the presence of Trojan-Downloader:OSX/Flashback.I malware, do the following:
  1. Start up the terminal (from Finder, Cmd-Shift-A, click on Utilities, then on Terminal).
  2. Open a new window (Cmd-N).
  3. Copy-paste the following, followed by a return:
defaults read /Applications/Safari.app/Contents/Info LSEnvironment || defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES || echo "You're OK"

If you get a reply that ends with You're OK, then so you are.