How To Test If Your Mac Is Infected With The Flashback Trojan

More then 600.000 Mac users already got infected with the Flashback Trojan – Are you one of them?

Here I will give you a few easy steps to check it in less then 5 minutes!

Last week notices got out that more then 600.000 users of Mac may be infected with this trojan!

Unfortunately, for the moment the only solution is to head into Terminal and copy and paste a few commands — so the process is recommended only for advanced users. If you’re comfortable with that, head to Applications > Utilities, launch Terminal and get started. You can also find terminal by searching (cmd+space) and type in “Terminal”

Now follow these steps:

1. Run the following command in Terminal:

defaults read /Applications/Safari.app/Contents/Info LSEnvironment

2. Take note of the value, DYLD_INSERT_LIBRARIES

3. Proceed to step 8 if you got the following error message:
“The domain/default pair of (/Applications/Safari.app/Contents/Info, LSEnvironment) does not exist”

[STEPS 4 THROUGH 7 OMITTED]

8. Run the following command in Terminal:

defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

9. Take note of the result. Your system is already clean of this variant if you got an error message similar to the following:
“The domain/default pair of (/Users/joe/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist”

 

If you didn’t get the error message in 9. I would recommend for you to jump right over to F-secure’s homepage to follow a few steps to get rid of the trojan!

Also, if you DID get the error message, congratulations, your mac isn’t infected. My recommendation would be for you to install an anti-virus program as soon as possible and, if you wish to follow these steps to prevent getting infected with trojans in the future!