Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Apple Releases Flashback Removal Tool for Macs Running OS X Lion without Java

MacRumors

MacRumors

macrumors bot
Original poster
Apr 12, 2001
68,087
38,834



Following yesterday's release of fresh Java updates to remove the Flashback malware system from Macs running OS X Lion and Snow Leopard, Apple today released a standalone Flashback malware removal tool to clean infections from OS X Lion systems without Java installed.
About Flashback malware removal tool

This Flashback malware removal tool that will remove the most common variants of the Flashback malware.

If the Flashback malware is found, a dialog will be presented notifying the user that malware was removed.

In some cases, the Flashback malware removal tool may need to restart your computer in order to completely remove the Flashback malware.

This update is recommended for all OS X Lion users without Java installed.
Click to expand...
While the most dangerous method of attack for Flashback exploits a security hole in Java that Apple has now patched, various versions of the malware have also used social engineering and other tricks in attempting to gain access to users' systems.

flashback_malware_removal_tool.jpg



With OS X Lion not having Java included by default, users of Apple's latest operating system who have found themselves infected through other means and do not have Java installed can use the new tool to clean their systems without needing to install Java.

The update weighs in at 356 KB and requires OS X Lion without Java installed.

Article Link: Apple Releases Flashback Removal Tool for Macs Running OS X Lion without Java
 
Article Link
https://www.macrumors.com/2012/04/13/apple-releases-flashback-removal-tool-for-macs-running-os-x-lion-without-java/
Do you really need Java?

Turned off Java in Firefox and Safari a week ago when I learned of this problem. I haven't noticed any difference in web browsing or anything really. Do I really need it? Seems not. Might uninstall (if possible).
 
Jarra said:
Turned off Java in Firefox and Safari a week ago when I learned of this problem. I haven't noticed any difference in web browsing or anything really. Do I really need it? Seems not. Might uninstall (if possible).
Click to expand...

you need it for logmein for example, honestly i've been running java and haven't been infected.
 
Thanks Apple. I appreciate you trying to help Mac users. I got the trojan via Java, but this should help those running Lion without Java that may get exposed to the trojan in some other way.
 
adamw said:
Thanks Apple. I appreciate you trying to help Mac users. I got the trojan via Java, but this should help those running Lion without Java that may get exposed to the trojan in some other way.
Click to expand...
Thanks Apple?

Hello? What are you thinking?

It's Apples responsibility to step up, too bad they had to get busted publicly, before taking action to resolve this.
 
adamw said:
Thanks Apple. I appreciate you trying to help Mac users. I got the trojan via Java, but this should help those running Lion without Java that may get exposed to the trojan in some other way.
Click to expand...

Yep! Keep an eye out for "FlashPlayer-11.pkg" or some variant form of that in your Downloads folder. This is how it began to spread last year. People visiting shady sites and installing fake versions of Flash. Can't wait until Adobe adds the new background autoupdate and install feature to Flash. Windows users got with the latest version of Flash. OS X users have to wait just a little bit longer.

Also deny files from opening up automatically in Safari by going to Safari>Preferences>General>and uncheck "Open 'safe' files after downloading".

Install Little Snitch if you can. It's a great tool I've been using for many years now and it's something this trojan looks for and deletes itself if it finds it. Same with ClamXav. Little Snitch costs a bit, but worth every penny, in my opinion. ClamXav is free in the Mac App Store.
 
Last edited:
Here's the perfect version of Flash

MarkMS said:
Yep! Keep an eye out for "FlashPlayer-11.pkg" or some variant form of that in your Downloads folder. This is how it began to spread last year. People visiting shady sites and installing fake versions of Flash. Can't wait until Adobe adds the new background autoupdate and install feature to Flash. Windows users got with the latest version of Flash. OS X users have to wait just a little bit longer.

Also deny files from opening up automatically in Safari by going to Safari>Preferences>General>and uncheck "Open 'safe' files after downloading".

Install Little Snitch if you can. It's a great tool I've been using for many years now and it's something this trojan looks for and deletes itself if it finds it. Same with ClamXav. Little Snitch costs a bit, but worth every penny, in my opinion. ClamXav is free in the Mac App Store.
Click to expand...

No Flash. I run Little Snitch, and I'm willing to run AV software, but I'm going to test things out. It slows down my Mac, it's gone.
 
Swift said:
No Flash. I run Little Snitch, and I'm willing to run AV software, but I'm going to test things out. It slows down my Mac, it's gone.
Click to expand...

Get Click2Plugin (Flash and stuff only loads if you click on the element, customizable) and AdBlock (blocks most ads). Don't install stuff that looks illegit. You are safe.

Oh, and opening "safe" files after downloading isn't dangerous. What's it going to do, infect your computer by opening a ZIP or DMG? Just don't agree to any installations that randomly appear when you're browsing some shady site, loading plugins on the site.

----------
cerote said:
Same here. Always had it. Great tool to see what is sending stuff out without you knowing.
Click to expand...

Yeah, but doesn't it slow you down? Oh, and it's a b**** to uninstall.
 
So those of you who ran this update, what happened? Did it just install and then nothing happened? I found it odd to not even be told that I at least DIDNT have this Trojan.
 
Way to go Apple! I'm so glad the apple team did this right away without being pressured by the media! I'm even more happy that their Java updates are so speedy and current! Thanks to Apple for taking it upon themselves to save the day as soon as possible! I'm sure that's the reason why it was released in the middle of the night in most of the western world! :apple::apple::apple:
 
MacRumors said:
The update weighs in at 356 KB.
Click to expand...

Why do you say it 'weighs in at' 356 KB?

Why don't you just say it 'is' 365 KB

I don't see how writing 'it weighs in at' adds any information or style especially as you have used this phrase at least 100 times in the exact same way. That seems to reveal a certain lack of style. Or perhaps I am just being a curmudgeon.
 
Roc P. said:
So I ran this update and it installed and then nothing happened. Does that mean I am ok?
Click to expand...
Yes, the remover tool runs in the background.

----------
faroZ06 said:
You are safe.
Click to expand...
That is an illusion.

faroZ06 said:
Oh, and opening "safe" files after downloading isn't dangerous.
Click to expand...
It is dangerous, because you have no control.
http://www.us-cert.gov/cas/techalerts/TA06-053A.html

faroZ06 said:
What's it going to do, infect your computer by opening a ZIP or DMG?
Click to expand...
The OS reads these file formats. So it is possible to cause buffer overflows and other things in the OS via special ZIP and DMG files. That is the reason why Mac OS X mounts now .dmg-files outside the kernel address space. Older versions of Mac OS X mounted .dmg files inside kernel address space.

----------
Roc P. said:
I found it odd to not even be told that I at least DIDNT have this Trojan.
Click to expand...
Yeah, the remover tool should tell you, that you use Mac OS X and not Windows. That is really necessary! ;-)
 
RobertMartens said:
Why do you say it 'weighs in at' 356 KB?

Why don't you just say it 'is' 365 KB

I don't see how writing 'it weighs in at' adds any information or style especially as you have used this phrase at least 100 times in the exact same way. That seems to reveal a certain lack of style. Or perhaps I am just being a curmudgeon.
Click to expand...

FFS! Get a life. I don't see how your post contributed anything to anything.

FWIW, my Leopard machine hasn't picked up this update... Yet. I'm checking around and will post back accordingly.

Update: Maybe best to download a removal tool/checker, and disable Java on Mac's that can't update to Snow Leopard. http://reviews.cnet.com/8301-13727_7-57411535-263/java-updates-for-flashback-avoid-os-x-tiger-and-leopard/
 
Last edited:
In some cases, the Flashback malware removal tool may need to restart your computer in order to completely remove the Flashback malware.
 
Is this available for Snow Leopard?

It would be nice to know Apple has thought about protecting users who need to stay on SL too.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back