Computer has been infected. How do I remove the installed iroffer package?

[packman86]

Someone has accessed my computer and installed Iroffer.
http://iroffer.org/

I have located the folder in which it was installed, but I can not find the uninstaller.

In the Terminal, I can see that someone has been using FTP in order to download the packaged file, and subsequently ran the ./Config command to install it.

I have checked the iroffer website on how to uninstall, but nothing comes up.

Anyone know what I can do?

Thanks!

 

[woosah]

Try CleanApp. http://www.syniumsoftware.com/cleanapp/

 

[packman86]

It does not show up as an installed application, so CleanApp does not find it.

 

[jzuena]

Is there a Makefile in the iroffer directory? Maybe they were nice enough to leave a "make uninstall" option that you can run from terminal (since this is a legitimate program being used for illegitimate reasons and not a purpose-built virus the chances are at least 50/50)? If not, see where the Config file put stuff and manually remove it (also from terminal).

 

[packman86]

There was no uninstall option, so I just ran the rm -rf on the entire directory where the files were installed.

I hope I will be safe for now.

Thanks!