How to detect infected trojan

How can I determine if my Mac has been infected with this Flashback trojan?

You may find this User Tip on Viruses, Trojan Detection and Removal, as well as general Internet Security and Privacy, useful:
https://discussions.apple.com/docs/DOC-2435
The User Tip (which you are welcome to print out and retain for future reference) seeks to offer some guidance on the main security threats and how to avoid them.
Bear in mind that from April to December 2011 there were only 58 attempted security threats to the Mac - a mere fraction compared to Windows malware:
http://www.f-secure.com/weblog/archives/00002300.html
(I have ClamXav set to scan incoming emails, but nothing else.)
To which I will add (about the Flashback Trojan):
You should be able to prevent infection by disabling Java (not Javascript) and also turning off 'Open safe files after downloading' in Safari Preferences/General.
Flashback Trojan - Detection, and how to remove (with caution):
http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml

Similar Messages

How to detect blackshades Trojan horse

Today's news about a crackdown on the use of the Trojan horse malware called Blackshades has me worried my Mac might be already infected/affected. How can I find out if this malware is present on my Mac and if it is how can I remove it?

HotJohnnieNYC wrote:
Is there anything like it that can affect a Mac?
There is malware that can affect the Mac. Although this has not always been the case, at this time, all Mac threats require you to open some app in order to become infected. Generally, this happens by tricking you into opening it.
Once you open malware, most of it actually will not ask for any kind of permission. You will typically see the "this was downloaded from the internet, are you sure you want to open it" warning and that's it. It's actually quite rare that malware will request your admin password, as there are ways to infect the user account that are every bit as effective as gaining root access to infect the computer as a whole.
Most malware is blocked directly by Mac OS X, but not all is. You cannot assume that Mac OS X will protect you. Similarly, if you install anti-virus software, you cannot assume that will protect you. No such protection is, or can ever be, 100% reliable.
For more information on what the threats are and how to protect yourself, see my Mac Malware Guide.
(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)

What is the risk, and how to detect, Trojan infection with Flashback/Flashfake? (PowerMac G5 OS X 10.5.8)

What is the risk, and how to detect, Trojan infection with Flashback/Flashfake? (PowerMac G5 OS X 10.5.8)

Hey Kappy, without even looking I can tell you anything is better than the GeForce4MX cards, but see
See japamacs page here on the best AGP cards for G4s & G5s...
http://www.jcsenterprises.com/Japamacs_Page/Blog/4B4B7BA2-7ABB-47F1-87AC-B03D379 42BEE.html
Rated slowest on top, fastest on bottom, hopefully japamac will drop in shortly.
Oh, & they need way more RAM...
http://www.everymac.com/systems/apple/powermac_g4/specs/powermac_g4_933_qs.html
http://eshop.macsales.com/MyOWC/Upgrades.cfm?sort=pop&model=155&type=Memory

How do I remove Trojan horse OSX/FakeAlert.B codecm_uploader from my macbook?

How do I remove Trojan horse OSX/FakeAlert.B codecm_uploader from my macbook? My AVG AntiVirus keep putting up a pop up window to say that it's blocked the threat from spreading and I've to consider deleting the infected file. When I search for the file, I can't find it. It pops up literally every 30secs!

First, you need to get rid of AVG. It may have alerted you to this, but in general it's not much good on the Mac.
Second, that indicates that you are infected with the FkCodec, aka Codec-M, adware. See my Adware Removal Guide for instructions on removing it. Be aware that AVG might interfere with your attempts to remove it, thinking that it is protecting you.
(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)

How to detect USB Flash Drive name in LabVIEW

Hi there
I was looking for how to detect a USB Flash Drive name in Labview
appearently every time i insert USB Flash Drive in a computer, windows assign it a different name
once "J:" and sometimes "M:"
Is there anyway to obtain USB Flash Drive name programmatically in Labview ?
Because in my program an user shouldn't be able to access HDD Drives except his USB Flash Drive (for inserting some file ...)
thank you and excuse me for my poor english

I was able to get the demo.vi to load, but it could not load the other two because there is no block diagram associated with those. I'm not sure why this is. I haven't had any issues with other llbs before.
Reese, (former CLAD, future CLD)
Some people call me the Space Cowboy!
Some call me the gangster of love.
Some people call me MoReese!
...I'm right here baby, right here, right here, right here at home

How to detect a selected row in ALV GRID

Hi,
Can anyone tell me how to detect and catch an event when a row is selected in an ALV GRID?
I would like to catch such event when the end user presses Ctrl + Shif + Space bar.
Thank you and best regards.
Hassane.

Hi,
Use this wiki link, to have a checkbox with all the records in ALV Grid and to process those selected records at a user command, as per the requirement.
https://www.sdn.sap.com/irj/scn/wiki?path=/display/snippets/alv%252bgrid%252bdisplay%252bwith%252bcheckbox%252bto%252bprocess%252bselected%252brecords%252bat%252bruntime
Hope this solves your problem.
Thanks & Regards,
Tarun Gambhir

How to detect the Acrobat Browser Plug-in version installed on a users system for non-IE browsers?

How to detect the *Acrobat Browser Plug-in version* installed on a users system, on Firefox, Safari, Opera, etc?
Or one script for detecting Plug-in version for major browsers. Need full example code.

Wrote an article on this with code samples (Javascript + HTML) - basically there are differences between IE and other browsers. Chrome natively comes with the Chrome PDF Viewer so I've incorporated that in my detection script.
The script detects the browser type, and the installed acrobat version...
Have a look here:
Detect the Adobe Reader Plugin

How to detect the path of Temp directory

I am writing a class library which allows users to manipulate a database in the web server java applications/applets. In my logic the Application/Applet communicate with a CGI script/Servlet in the server and that do all the database handling. My objective is to make the Client independant from the Database Drivers, and to some restrictions and possible security threats that can arrice when accessing the database directly.
99% of the work is done and now I am doing the fine tuning.
My Problem:
When the user downloading a blob object from the server database. each time the program read the blob it will get a new copy from the server. This is not good if the blob is large (few 100 megs) . So I am going to implement a cache system. but the problem is If I am caching in the memory it will not support large objects (Memory is a limited factor). So the preferance is use the Temperary files but I do not know how to detect the path to temperary folder.
And my 2nd questions is are the applets allowed to write and read in temperary folder.

The Java default temporary file path can be determined with
System.getProperty("java.io.tmpdir")This is typically the same value as the os environment variable

How to detect color pages in a PDF?

I am using a C++ Acrobat plug-in do read/edit a PDF file.
I need to get the total number of pages in the PDF as well as the page numbers of color pages.
So far I have been able to get the total number of pages using PDDocGetNumPages() without any trouble.
However, I cant seem to find an API that lets me know whether a particular page is color or not. Is there a way to do this?
Thanks in advance!

But what if there is RGB data that means black or gray (R == G == B), does that mean black or RGB?
There is some sample code in the SDK for iterating over the content in the PDF, and then you can get the colorspace and the color of each object.
But you really need to do some background research on colors & colorspaces to properly achieve this goal.
From: Sachintha81 <[email protected]<mailto:[email protected]>>
Reply-To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>
Date: Wed, 8 Feb 2012 16:57:10 -0800
To: Leonard Rosenthol <[email protected]<mailto:[email protected]>>
Subject: How to detect color pages in a PDF?
Re: How to detect color pages in a PDF?
created by Sachintha81<http://forums.adobe.com/people/Sachintha81> in Acrobat SDK - View the full discussion<http://forums.adobe.com/message/4194889#4194889

How to detect the HTML extension window close in In-design? Does the In-design throws any event on opening/closing of extensions?

How to detect the HTML extension window close in In-design? Does the In-design throws any event on opening/closing of extensions?
I have a HTML extension running in In-design CC 2014 version.
I want to perform some required set of actions before my extension window is closed(by clicking on the cross button on top right corner).
Does In-design throws any event for it? Or can we capture it using C++ plugin in some way?

Naah.......haven't got any event for that yet.
Although, since HTML extensions are using chromium browser, as a workaround, u can attach listener to HTML onClose event, but it won't solve any purpose if you
are looking to logout session or do some business login in your code.

How to detect the final loop iteration of a step in a PostStep Engine Callback?

I see the need to use a PostStep Engine Callback and look at the Step.Result container of the caller.
My issue: If the caller is configured to loop, the PostStep Engine CB executes with each iteration and I do not see how to detect the final iteration (which is the only iteration I am interested in).
Ideas are welcome. Thanks in advance,
Guenter

Guenter,
well, the way i discripted IS the generic way. The reason for this is the following:
You can compare TestStand very well with procedural programming languages. So you have variables with different lifetimes and scope. RunState is one variable, which is available in every scope, but it may have different content.
So you leaving the execution of your clientsequence in order to call the callback, you leave the scope of the RunState from your clientsequence. But only there the information is stored on how many iterations are left. It does not make sense to pass this anywhere, since the execution of your clientsequence has to decide if to loop further or not.
But, please note that there are different scopes for the "disable result recording" as well. You have found the most global one, the station option. But you can as well set this in the sequence settings (Edit >> Sequence Properties >> Disable Result Recording for All Steps) and at step-level (Run Options >> Record Result {uncheck it}).
Looping on a single step using the step settings, you can additionally choose not to record results for each iteration. This will lead to only a single entry in the ResultList, the overall result of the looped step (if resultcollection is enabled of course!).
hope this helps,
Norbert
Message Edited by Norbert B on 08-22-2008 02:10 AM
CEO: What exactly is stopping us from doing this?
Expert: Geometry
Marketing Manager: Just ignore it.

How to detect the end of a loaded swf file

Hello Guys
This is my first time on this forum, come here with a great
hope
I have loaded a picture file (jpeg) and a video file (swf)
into the main flash file using xml
on frame 3, I load the picture and on frame 7, I load the
video, there is a stop action on frame 6
Now when the flash is executed the picture is displayed ( it
says "Click here to view the video")
when the user click the picture , the video is loaded and
starts to play ---- so far everything is working fine
now what I want to do is, once the video finishes playing (
not stoped) I want to display the picture again
can you tell me how to detect the end of an external loaded
swf files,
Please help me
Thanking You
Shriram

How to detect is flash player is idle

How to detect whether flash player is playing any animation
like moving an object or it is static like an image for .swf file.
I want to know the duration of the .swf file played.

is is as2, yes I have to detect animation duration achieved
via action script, for example there is only one frame in the .swf
in that frame there is movieclip it will change its _x positon
using scripting upto 500 pixel and come back to 0 position it may
loop for 3 times or 4 times and stops. I want to detect duration of
the movie clip played till it stops. I have only .swf file no
fla.

How to detect collssion for random or Duplicated movie clips

Hey guys .. i am back with set of query..till now .. key
press movement a rocket (mc) is moving left right up down in a
defined stage area. and i am able to generate some fire balls
randomize falling from top. this is just i am duplicating the movie
clip(fireball_mc) .... now i want incase or when the rocket (mc)
touch the fire ball programm shold detect the collsion and generate
a score board. well for this i have tried a script for two movie
clips ... wchich is working but ..i don know or i m not gettng the
logic how to detect the collission for duplicated movie clips...
well i m just giving the script for oinly 2 movie clips
coliding...can any one tell me how to do it with randmize or
duplkicated mcs??
for 2 movie clip ...
_root.mc1.onEnterFrame = function() {
if(this.hitTest(_root.egg)) {
_root.result="Oh no..... we are dead";
} else {
_root.result="we are going fine";
(this is happening ..but let me know how can i get the same
result for ranndom mcs)
hope someone can help me out ...
i appriciate ur valuable time to read this..
thanking you

Hey thx for ur suggestion...but as i said m very much new to
actionscript (more designer) so i don have much idea... most of the
things i m doing for this game i m going through lots of references
then i tried to understand te codes m implmenting them to my
need..can u explain me little more about arrays u haves asked for
loops u asked me to use the hittest function..please /.. i will be
greatfull to u... thx

ANSWER: HOW TO DETECT Java Plugin from JavaScript

I created a new topic because the questions about
how to detect Java Plugin in browsers are scattered
thoughout this forum.
Basically you need to employ two approaches for IE and NS.
In IE you need to try to instantiate a small applet
(not your production applet) in order to see if browser
can do it. if the browser can do it, you can make a
call applet from JavaScript in order to find version of
JRE (as well as a host of other things).
In NS you can write a simple JavaScript which will
interrogate the browser for all plugins installed. Then
ypu can make a desicion whether to pass execution to
the next(or generated) page which hosts your applet,
or ask the user to download/install a plugin.
I ecourage everybody to host a plugin on your site
rather leave default link to it which is generated by
html converter.
In order to run sample,
Prerequisites:
Java Plugin 1.3.
If you have a different version of plugin,
substitute hardcoded plugin version in JavaScript for
value that you have.
1. compile java file
2. put class file in the same directory with html file
3. load html file into the browser.
4. press "Check Java Plugin.." button
5. see it work
6. examine code
7. uninstall plugin
8. repeat steps 1 - 4
9. see it work
10. install plugin.
Sample code follows:
**********************HTML FILE BEGIN***********
<HTML>
<HEAD>

<TITLE>Detect Java Runtime</TITLE>
</HEAD>
<SCRIPT LANGUAGE="JavaScript">
var browsername;
function doNetscape()
for (i=0; i < navigator.plugins.length; i++)
for (j = 0; j < navigator.plugins.length; j++)
if(navigator.plugins[i][j].type == "application/x-java-applet;version=1.3")
alert("You are running Netscape with Java Plugin 1.3.0 - OK");
return;
alert("You are running Netscape\nPlease, install Java Runtime Environment 1.3.0");
function doMicrosoft()
var applet = document.myApplet;
if(applet == null)
alert("You are running Microsoft Browser.\nPlease, install Java Runtime Environment 1.3.0");
return;
var version = applet.getJavaVersion();
if(version == "1.3.0")
alert("You are running IE, Java Plugin 1.3.0 installed - OK");
else
alert("You are running IE, other plugin installed - mybe OK if later that 1.3.0\nYour version: " + version);
function getJava()
var applet = document.myApplet;
if(applet == null)
alert("Please, install Java Runtime Environment");
return;
     alert("JRE Version: " + document.myApplet.getJavaVersion());
function checkJavaPlugin()
     browsername = navigator.appName;
     if(browsername.indexOf("Netscape")!= -1)
          browsername="NS";
          doNetscape();
     else
          if(browsername.indexOf("Microsoft")!=-1)
               browsername="MSIE";
               doMicrosoft();
          else
               browsername="N/A";
               alert("Unknown browser: " + browsername);
</SCRIPT>
<body>
<Strong>Check Java Plugin</strong>
<OBJECT id="myApplet" classid="clsid:8AD9C840-044E-11D1-B3E9-00805F499D93"
     WIDTH = 1
     HEIGHT = 1 >
     <PARAM NAME = CODE VALUE = "DetectPluginApplet.class" >
     <PARAM NAME="scriptable" VALUE="true" >
     <embed type="application/x-java-applet;version=1.3"
          code = DetectPluginApplet width = 2 height = 2 MAYSCRIPT = "true" >
     </embed>
     </EMBED>
</object>
<FORM>
     <INPUT TYPE="button" value="Get Plugin Version in IE" onClick="getJava()">
     <INPUT TYPE="button" value="Check Java Plugin in NS and IE" onClick="javascript:checkJavaPlugin()">
</FORM>
</BODY>
</HTML>
**********************HTML FILE END***********
***************APPLET FILE BEGIN***********
import java.awt.*;
public class DetectPluginApplet extends java.applet.Applet
     public void init()
          add(new Label("DetectPluginApplet"));
public String getJavaVersion()
return System.getProperty("java.version");
**************APPLLET FILE END************

Try following java script, it works on new browsers (NS 4+, IE5+). For IE you have to enable 'ActiveX objects creation' in security options.
var agt=navigator.userAgent.toLowerCase();
var is_major = parseInt(navigator.appVersion);
var is_nav = ((agt.indexOf('mozilla')!=-1) && (agt.indexOf('spoofer')==-1)
&& (agt.indexOf('compatible') == -1) && (agt.indexOf('opera')==-1)
&& (agt.indexOf('webtv')==-1) && (agt.indexOf('hotjava')==-1));
var is_nav4up = (is_nav && (is_major >= 4));
var is_ie = ((agt.indexOf("msie") != -1) && (agt.indexOf("opera") == -1));
var is_ie5 = (is_ie && (is_major == 4) && (agt.indexOf("msie 5.0")!=-1) );
var is_ie5_5 = (is_ie && (is_major == 4) && (agt.indexOf("msie 5.5") !=-1));
var is_ie6 = (is_ie && (is_major == 4) && (agt.indexOf("msie 6.0") !=-1));
var is_ie5up = (is_ie && (is_major == 4)
&& ( (agt.indexOf("msie 5.0")!=-1)
|| (agt.indexOf("msie 5.5")!=-1)
|| (agt.indexOf("msie 6.0")!=-1) ) );
var pluginDetected = false;
var activeXDisabled = false;
// we can check for plugin existence only when browser is 'is_ie5up' or 'is_nav4up'
if(is_nav4up) {
// Refresh 'navigator.plugins' to get newly installed plugins.
// Use 'navigator.plugins.refresh(false)' to refresh plugins
// without refreshing open documents (browser windows)
if(navigator.plugins) {
navigator.plugins.refresh(false);
// check for Java plugin in installed plugins
if(navigator.mimeTypes) {
for (i=0; i < navigator.mimeTypes.length; i++) {
if( (navigator.mimeTypes[ i].type != null)
&& (navigator.mimeTypes[ i].type.indexOf(
"application/x-java-applet;jpi-version=1.3") != -1) ) {
pluginDetected = true;
break;
} else if (is_ie5up) {
var javaVersion;
var shell;
try {
// Create WSH(WindowsScriptHost) shell, available on Windows only
shell = new ActiveXObject("WScript.Shell");
if (shell != null) {
// Read JRE version from Window Registry
try {
javaVersion = shell.regRead("HKEY_LOCAL_MACHINE\\Software\\JavaSoft\\Java Runtime Environment\\CurrentVersion");
} catch(e) {
// handle exceptions raised by 'shell.regRead(...)' here
// so that the outer try-catch block would receive only
// exceptions raised by 'shell = new ActiveXObject(...)'
} catch(e) {
// Creating ActiveX controls thru script is disabled
// in InternetExplorer security options
// To enable it:
// a. Go to the 'Tools --> Internet Options' menu
// b. Select the 'Security' tab
// c. Select zone (Internet/Intranet)
// d. Click the 'Custom Level..' button which will display the
// 'Security Settings' window.
// e. Enable the option 'Initialize and script ActiveX controls
// not marked as safe'
activeXDisabled = true;
// Check whether we got required (1.3+) Java Plugin
if ( (javaVersion != null) && (javaVersion.indexOf("1.3") != -1) ) {
pluginDetected = true;
if (pluginDetected) {
// show applet page
} else if (confirm("Java Plugin 1.3+ not found, Do you want to download it?")) {
// show install page
} else {
// show error page
}

How to detect infected trojan

Similar Messages

Maybe you are looking for