I broke Safari trying to get rid of Flashback malware. How do I fix it?

I foolishly tried following the instructions on the CNET site for finding if I have the Flashback malware and supposedly fixing it:
http://reviews.cnet.com/8301-13727_7-57410096-263/how-to-remove-the-flashback-ma lware-from-os-x/?tag=mncol;txt
On the page, it says to run this command in Terminal and that if it returns a path result that you have the malware:
defaults read /Applications/Safari.app/Contents/Info LSEnvironment
When I ran the above, it gave me the following:
"DYLD_INSERT_LIBRARIES" = "/Applications/safari.app/contents/resources/.PassmarkMonitorTestV.xsl" 
Based on the instructions on the CNET site, I believed that this file was infected and I deleted it, even though it was a hidden file. I followed the rest of the instructions on the page as well, which would supposedly "reset" the infected application, but  this didn't work.
I now can't run Safari, It would apear that the file deleted was necessary for it to run.
I tried downloading Safari from the apple.com website so that I can reinstall it, but when I ran the installer, it said I couldn't use it because there was a newer version already on my machine.
I'm running Mac OS X Snow Leopard. I'm not sure what version of Safari I'm running (I can't open Safari) but it must be higher than the version on Apple's site, which is 5.1.4.
Here is the Safari error report:
Process:    
Safari [516]
Path:       
/Applications/Safari.app/Contents/MacOS/Safari
Identifier: 
com.apple.Safari
Version:    
Build Info: 
WebBrowser-75345503~2
Code Type:  
X86-64 (Native)
Parent Process:  launchd [98]
Date/Time:  
2012-04-05 21:14:59.436 -0400
OS Version: 
Mac OS X 10.6.8 (10K549)
Report Version:  6
Interval Since Last Report:     
2686299 sec
Crashes Since Last Report:      
13
Per-App Crashes Since Last Report:   7
Anonymous UUID:                 
Exception Type:  EXC_BREAKPOINT (SIGTRAP)
Exception Codes: 0x0000000000000002, 0x0000000000000000
Crashed Thread:  0
Dyld Error Message:
  could not load inserted library: /Applications/Safari.app/Contents/Resources/.PassmarkMonitorTestV.xsl
Binary Images:
0x7fff5fc00000 -
0x7fff5fc3be0f  dyld 132.1 (???) <29DECB19-0193-2575-D838-CF743F0400B2> /usr/lib/dyld
How can I repair my Safari installation?
<Edited By Host>

If you’re certain you know when the infection happened, and you back up with Time Machine or something similar, you can save yourself a lot of time by restoring your whole system from the most recent snapshot taken before it was infected. Then take Steps 7, 8, and 10 below.
How can you tell when the infection took place? All you can be sure of is that you were infected some time before the problems started. You may have visited a blog that prompted you to install some kind of software, or a “certificate.” If you remember doing that recently, mention it in a reply, but don’t post a link.
If you don’t know when you were infected, there's no easy, reliable way to remove the malware, because it's constantly changing. There are differences of opinion on this site as to the best of course of action, so you should do your own research before deciding how to proceed.
I suggest you take the following steps:
1. Back up all data to at least two different devices, if you haven't already done so.
2. Boot from your recovery partition (if running Mac OS X 10.7 or later) or your installation disc (if running an earlier version of the Mac OS), launch Disk Utility, and erase the startup volume. This action will destroy all data on the volume, so you must be sure of your backups.
3. Install the Mac OS.
4. Reboot and go through the initial setup process to create an account with the same name as your old one. Don’t import anything from your backups at this stage.
5. If running Mac OS X 10.6.x or earlier, run Software Update. You may have to run it more than once to fully update your system.
6. Restore the contents of the top-level subfolders of your home folder except “Library” from the most recent backup. The Library folder may contain components of the malware. It’s best not to restore anything from there. If you must do so, restore only files, not whole folders with all their contents, and only if (a) they’re visible in the Finder, and (b) you know what they are, and (c) they haven’t been altered. Don’t restore anything in the home subfolder Library/LaunchAgents, if it exists, or any hidden files or folders, no matter where they are.
7. If you’re running Mac OS X 10.5.8 or earlier, launch Safari and select Safari ▹ Preferences… ▹ Security from the menu bar. Uncheck the box labeled Enable Java. Because of known bugs, Java in those OS versions is unsafe to use on the Internet. (Note: I’m not referring to JavaScript, which is unrelated to Java, despite the similar names.) If you’re running Mac OS 10.6.8 or later, you should still disable the Java web plugin unless you really need it. Few websites have legitimate Java content nowadays. If you encounter one that does, enable Java temporarily.
8. Change every Internet password you have, starting with banking passwords. Check all financial accounts for unauthorized transactions. Take this step only after you’ve secured your system in the preceding steps, not before.
9. Reinstall your third-party software from fresh downloads or original media, not from backups which may be contaminated.
10. If you use any third-party web browsers, disable Java in their preferences. As with step 7, this step is mandatory if you’re running any version of Mac OS X older than 10.6. Otherwise it’s optional, but recommended.

Similar Messages

  • Get ical error msg 404 on both my MacBook pros, but not my MacPro Desktop. Same ical ver 5.02 & all are OSX Lion. Both MacBooks get ical stuck with error msg & I must force quit to get rid of window. How can I fix?

    Upgraded both my MacBook Pro Laptops, the 2011 - 13" and my 2006 - 15" to OSX Lion. Then I upgraded my MacPro Desktop also to OSX Lion.  No problems with MacPro, but iCal, when I open on both my laptops, constantly comes up with Error msg 404 as follows:  "The Server responded with an error.  The URL https://p03-caldav.icloud.com/286232046/principal encountered HTTP error 404.  Make sure URL is correct."  When I click OK, I just get a duplicate error message immediately and I can do nothing with iCal or my computer until I force-quit iCal.
    iCal on all 3 of my mac is Ver 5.01 (1571), but only my laptops are affected with this problem.  What can I do?

    Upgraded both my MacBook Pro Laptops, the 2011 - 13" and my 2006 - 15" to OSX Lion. Then I upgraded my MacPro Desktop also to OSX Lion.  No problems with MacPro, but iCal, when I open on both my laptops, constantly comes up with Error msg 404 as follows:  "The Server responded with an error.  The URL https://p03-caldav.icloud.com/286232046/principal encountered HTTP error 404.  Make sure URL is correct."  When I click OK, I just get a duplicate error message immediately and I can do nothing with iCal or my computer until I force-quit iCal.
    iCal on all 3 of my mac is Ver 5.01 (1571), but only my laptops are affected with this problem.  What can I do?

  • Trouble with Safari - it keeps shutting down - all because I tried to get rid of MacKeeper

    trouble with Safari - it keeps shutting down - all because I tried to get rid of MacKeeper ad - after I install what I thought was an update since I already had MacKeeper, it would not allow me to continue without buying the new one. Make a long story short I switch to Firefox and deleted as much as I could of Safari (files, preferences etc) Now I'm at OS Yosemite X 10.10.2 and would like to get Safari up and running again - I've searched for Adware in applications etc but could not find it. Found what to do from the community, but before I go that route...Do I have to know where or if I actually have this spyware?    And if I were to reinstall  Maveric - would my files and such be undisturbed?  so that only Safari would be replaced?    I"M LOST .... (as if you couldn't tell)
    I've been working with Mac for 30 years or more and although I'm hands on taught the only thing I lack is the newer "buzz words" so if you can help me out - please make it simple ??  thanks

    There is no need to download anything to solve this problem.
    You may have installed one or more of the common types of ad-injection malware. Follow the instructions on this Apple Support page to remove it. It's been reported that some variants of the "VSearch" malware block access to the page. If that happens, start in safe mode by holding down the shift key at the startup chime, then try again.
    Back up all data before making any changes.
    One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
    If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, ask for further instructions.
    Make sure you don't repeat the mistake that led you to install the malware. It may have come from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
    Malware is also found on websites that traffic in pirated content such as video. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
    In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere  should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
    Still in System Preferences, open the App Store or Software Update pane and check the box marked
              Install system data files and security updates (OS X 10.10 or later)
    or
              Download updates automatically (OS X 10.9 or earlier)
    if it's not already checked.

  • I am getting an error "The older version of Bonjour cannot be removed" I am trying to get rid of all of my Apple Software. What can I do? Because it will not let me uninstall iTunes either.

    I am getting an error "The older version of Bonjour cannot be removed" I am trying to get rid of all of my Apple Software. What can I do? Because it will not let me uninstall iTunes either.

    Akeenleyside,
    Are you removing your Apple software in an attempt to update to iTunes 10.5?  I ask this because I am getting the same message when trying to install iTunes 10.5.

  • I'm trying to get rid of logmein. I threw away the entire application but I can't remove it form my overhead menu bar and the activity monitor tells me it's still running.

    I'm trying to get rid of logmein. I threw away the entire application but I can't remove it from my overhead menu bar and the activity monitor tells me it's still running. How do I get rid of it completely?

    Install it again and use the developers uninstall instructions
    How to uninstall/install software on your Mac

  • HT1311 I have two iTunes accounts an. Am trying to get rid of he primary one because I don't have access to that email anymore but it seems impossible?

    I have two iTunes accounts an. Am trying to get rid of he primary one because I don't have access to that email anymore but it seems impossible?

    Just cahnge the e-mail account asssociated with the account.  There was no need to start another account.
    You cannot delete and account, nor would you want to.  All purchases made with an account will always be tied to that account.

  • Im trying to get ride of Alias but it keep making copy Now my trash is so big....How long it will take to empty the trash

    Im trying to get ride of Alias but it keep making copy Now my trash is so big....How long it will take to empty the trash

    That's not how it works. Once a device (including a computer) is associated with an Apple ID it cannot be switched for 90 days. See this Apple KB article for more information: http://support.apple.com/kb/HT1420.

  • TS3694 I tried to get rid of my jailbreak things like restoring my whole phone. It didn't work. Now it keeps showing the photo to connect to itunes so I did. It said to restore so I did. and it keeps doing the same thing over and over and over and over ag

    I tried to get rid of my jailbreak things like restoring my whole phone. It didn't work. Now it keeps showing the photo to connect to itunes so I did. It said to restore so I did. and it keeps doing the same thing over and over and over and over again. How do I fix it?

    Your phone is toast.  Contrary to what the lovely folks in the jalibreaking community say, attempting to restore the iPhone to "factory" condition does not always remove the jailbreak.  You'll need to contact those bozos and see if they can help you.
    Hint:  start saving for a new phone.

  • Since I joined creative cloud, I have not been able to sync. Why the difference? Worked good during initial trial. Also I had installed the Mosaic app before Lightroom mobile came out and I cannot seem to get rid of it. How can I get mosaic out? I have ca

    Since I joined creative cloud, I have not been able to sync. Why the difference? Worked good during initial trial.
    Also I had installed the Mosaic app for ipad before Lightroom mobile came out and I cannot seem to get rid of it. How can I get mosaic out? I have cancelled, I have deleted, I have looked through the files for visible remnants.

    The sync count is 60 and static. The total number synced so far is 500+. None have been synced from the ipad except for corrections made there on those already synced.
    I have deleted the Mosaic app from all machines and checked the library folder and have contacted the Mosaic tech support and they have discontinued my subscription. I still get mosaic messages on initiating Lightroom and sometimes at closing.
    I have not tried to sync fewer yet, but some catalogs that I have tried are smaller numbers. Initially, it did well on good connections. Nothing works on my home connections over satellite.

  • Getting Rid of TRIGGERS - Just How Does One Do This

    Hi,
    I have a trigger that I'm trying to get rid of in my DB.
    So logically, I attempt a
    DELETE TRIGGER triggername;
    But it doesn't work.
    Anyone have any idea how to do this?
    thank you.

    And the other thing you can do is stop posting duplicate threads.
    Getting Rid of TRIGGERS - How Does One Do This?

  • I have two Apple ID's and want to get rid of one.  How is that done?

    I have 2 Apple ID's and want to get rid of one?  How do you do that?

    Stop using it.
    Accounts cannot be merged, purchases made under an account cannot be transferred to another account.

  • HT5318 Ever since I updated what looked like iTunes 10.6.1 my computer has been corrupted with Malware, which has filled up all available space on my hard drive.  What do I do to get rid of the Malware?

    Ever since I updated what looked like iTunes 10.6.1 my computer has been corrupted with Malware, which has filled up all available space on my hard drive.  What do I do to get rid of the Malware?

    First, reboot. That will temporarily free up some space. According to Apple documentation, you need at least 9 GB free for normal operation. You also need enough space left over to allow for growth of your data.
    Use a tool such as OmniDiskSweeper to explore your volume and find out what's taking up the space.
    Proceed further only if the problem hasn't been solved.
    ODS can't see the whole filesystem when you run it just by double-clicking; it only sees files that you have permission to read. To really see everything, you have to run it as root.
    First, back up all data if you haven't already done so. No matter what happens, you should be able to restore your system to the state it was in at the time of that backup.
    Launch the Terminal application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ If you’re running Mac OS X 10.7 or later, open LaunchPad. Click Utilities, then Terminal in the page that opens.
    After installing ODS in the Applications folder, drag or copy — do not type — the following line into the Terminal window, then press return:
    sudo /Applications/OmniDiskSweeper.app/Contents/MacOS/OmniDiskSweeper
    You'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up.
    I don't recommend that you make a habit of this. Don't delete anything while running ODS as root. When you're done with it, quit it and also quit Terminal.

  • I downloaded a program that was an adware and now can't get rid of it.  How do I do it?

    I downloaded a program that was an adware with out understanding what it really was and now can't get rid of it.  How do I get rid of it?

    Click here and follow the instructions, or if they don't cover that type of adware, these ones. If you're willing to use a tool to remove it(you don't need to, but may find it easier), you can instead run Adware Medic; this link is a direct download.
    (120472)

  • I'm getting a blank screen when trying to connect to my App Store.how can I fix this ?

    I'm getting a blank screen when trying to connect to my App Store.how can I fix this?

    I got this error after upgrading to new version. After searching these pages for an answer and not finding a usable one, I simply quit and re-opened iTunes, and... voila! Problem solved!

  • I can not use Safari because I get a server failure message. The same with email. Cannot get mail, server failure. How do I fix

    I Cannot use Safari to access my bookmarks, I get a server failure message. The same is happening with my email. I get a message cannot get mail, server failure. How do I fix the problem?

    It might be worth a shot to reset your router first. Unplug it from power for about 30 seconds and then plug it in again. Or try any other WiFi network and see what happens.

Maybe you are looking for

  • How to overcome Security Block on link in PDF?

    I created a PDF using Word 2010. The document has website links. When I tested the PDF, an Adobe "Security Block" dialog box said it "does not allow connection" to a site, but it allows access to the other website link. How do I overcome this and fix

  • Upgrade to Solaris 10/08 hangs after reboot

    I upgraded to Solaris 10 10/08 however the system hangs after reboot. I had never any issues with its previous versions. Any thoughts?

  • COPA to SOP to DM

    I have a situation where I am updating multiple (1000+) materials from COPA to SOP  then from SOP to Demand Managment on a weekly basis. I succeeded to create a recording to update all materials from COPA to SOP.  However, when I tried to create a re

  • Problem java.text.NumberFormatter with specified numbers

    Hello! I have a peculiar problem with NumberFormatter class. Some numbers when formatted, are incorrect formatted. See the code: public static void main(String[] args) {         // TODO code application logic here         System.out.println("Print Do

  • ITunes combined two podcast subscription lists

    We have always  maintained two machines (one mac one pc) with iTunes keeping separate podcast subscriptions but  linked libraries for music.  11.1 decided to download all subscribed podcasts on both machines to both machines.  Our tastes diverge on p