Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 6 subscribers
  • Views 2688 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Flashback ..

carlos1

Hi,

Protect SAV against the new ...

http://www.f-secure.com/weblog/archives/00002341.html

and all other Flashback.

greets

:1005707


This thread was automatically locked due to age.
Parents
  • 0

    /Users/Shared/Infected/.SafariArchive.tar.gz looks to me like a "quarantine and move" path.  Best to just clean it up from the quarantine manager.  The file itself begins with a dot, so would be invisible without ls -a in the Terminal (and the finder).

    In short, that's lot a location where Flashback can actually do any harm, so you're not likely currently "infected" -- but you do have the remnants of the malware lurking somewhere -- possibly just in the quarantine manager with the actual files already cleaned up.

    :1006453
Reply
  • 0

    /Users/Shared/Infected/.SafariArchive.tar.gz looks to me like a "quarantine and move" path.  Best to just clean it up from the quarantine manager.  The file itself begins with a dot, so would be invisible without ls -a in the Terminal (and the finder).

    In short, that's lot a location where Flashback can actually do any harm, so you're not likely currently "infected" -- but you do have the remnants of the malware lurking somewhere -- possibly just in the quarantine manager with the actual files already cleaned up.

    :1006453
Children
No Data