Computer has been infected. How do I remove the installed iroffer package?

Discussion in 'Mac Basics and Help' started by packman86, Jun 30, 2010.

  1. packman86 macrumors newbie

    Joined:
    Aug 27, 2009
    #1
    Someone has accessed my computer and installed Iroffer.
    http://iroffer.org/

    I have located the folder in which it was installed, but I can not find the uninstaller.

    In the Terminal, I can see that someone has been using FTP in order to download the packaged file, and subsequently ran the ./Config command to install it.

    I have checked the iroffer website on how to uninstall, but nothing comes up.

    Anyone know what I can do?

    Thanks!
     
  2. packman86 thread starter macrumors newbie

    Joined:
    Aug 27, 2009
    #3
    It does not show up as an installed application, so CleanApp does not find it.
     
  3. jzuena macrumors 6502a

    jzuena

    Joined:
    Feb 21, 2007
    Location:
    Lexington, MA, USA
    #4
    Is there a Makefile in the iroffer directory? Maybe they were nice enough to leave a "make uninstall" option that you can run from terminal (since this is a legitimate program being used for illegitimate reasons and not a purpose-built virus the chances are at least 50/50)? If not, see where the Config file put stuff and manually remove it (also from terminal).
     
  4. packman86 thread starter macrumors newbie

    Joined:
    Aug 27, 2009
    #5
    There was no uninstall option, so I just ran the rm -rf on the entire directory where the files were installed.

    I hope I will be safe for now.

    Thanks!
     

Share This Page