Finding Mac Flashback

There’s a mac virus making the rounds this week. Yes, I just said “mac” and “virus” in the same sentence. These things happen.
First off, run Software Update to get all the spiffy Java updates waiting for you.
Second, go to Safari :: Preferences ::  Security, and disable Java. Not Javascript, just Java.

Anyhow, the method for checking if you’re infected can be a little cumbersome. It involves using the Terminal app, which not many are comfortable with. So instead, I’ve just wrapped that stuff up into a clickable application.

It’s a simple Automator app that runs the following:

set +e
defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES
sleep 2
defaults read /Applications/Safari.app/Contents/Info LSEnvironment
sleep 2
defaults read /Applications/Firefox.app/Contents/Info LSEnvironment
set -e

A file on your desktop will have your results. If it’s empty, you’re good to go. If it has something in it, then it’s time to download something to help you get rid of the virus. ClamAV & Sophos are both free and pretty straightforward. F-Secure has also released a tool specifically designed to get rid of this virus. It’s over here.

I’ll try to keep this up-to-date if I can. Good luck. Let me know if you have any questions.

Apple’s latest Java update now removes the virus as well. So an update should cure what ails you. Tho an anti-virus app couldn’t hurt going forward.

One Comment

Leave a Reply

Your email address will not be published. Required fields are marked *