The first really nasty Trojan to hits Macs slithered onto 600,000 Apple computers worldwide. F-Secure, a world leader in security, has posted a way to check and see if your Mac is infected and if so how to clean it up.
Please note that this is meant for experienced users and needs to be done carefully. Earlier this week Apple released a security update for all Macs. Please check to see that you have that update.
If you prefer, you can download and print the instructions here.
Disinfection
Manual Removal
Caution: Manual disinfection is a risky process; it is recommended only for advanced users. Otherwise, please seek professional technical assistance. F-Secure customers may also contact our Support.
Manual Removal Instructions
- 1. Run the following command in Terminal:defaults read /Applications/Safari.app/Contents/Info LSEnvironment
- 2. Take note of the value, DYLD_INSERT_LIBRARIES
- 3. Proceed to step 8 if you got the following error message:”The domain/default pair of (/Applications/Safari.app/Contents/Info, LSEnvironment) does not exist”
- 4. Otherwise, run the following command in Terminal:grep -a -o ‘__ldpath__[ -~]*’ %path_obtained_in_step2%
- 5. Take note of the value after “__ldpath__”
- 6. Run the following commands in Terminal (first make sure there is only one entry, from step 2):sudo defaults delete
Read More