Computing Magazine

How To Check If Your Mac Is Infected By The Flashback Trojan

Posted on the 06 April 2012 by Skateroren @ProgramsAlive
Step 1: Run the Terminal app on your Mac either by selecting it from the Applications folder or pressing CMD + Space and searching for Terminal in Spotlight.
Step 2: Type the following command into the terminal app: defaults read /Applications/ LSEnvironment.
Step 3: Terminal will return information back to you based on the entered text. Make a note of the value DYLD_INSERT_LIBRARIES.
Step 4: If Terminal returns an error similar to "The domain/default pair of (/Applications/, LSEnvironment) does not exist" then check out the next step below.
Step 5: If the command in step 2 produced an error message then enter the following command directly into the Terminal app: defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES.
Step 6: If any results are returned then take note of them. If Terminal produces an error similar to "The domain/default pair of (/Users/paul/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist" then it means you are not affected by this creepy Trojan.
if the commands actually return any results then head on over to the F-Secure information page in order to find out how to get rid of this pest.

Back to Featured Articles on Logo Paperblog