Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 6 subscribers
  • Views 2690 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Flashback ..

carlos1

Hi,

Protect SAV against the new ...

http://www.f-secure.com/weblog/archives/00002341.html

and all other Flashback.

greets

:1005707


This thread was automatically locked due to age.
  • 0

    Greetings... 

    I did the Sophos scan and my quarantine manager has an alert..  OSX/Flshplyr-E .... (/Users/Shared/Infected/.SafariArchive.tar.gz)..... 3 weeks agao I did an update to system which supposedly fixed the java vulnerablitly... I am confused cause I have used TERMINAL and cut an pasted several paths and they say DOES NT EXIST... therefore I assumed I had no trojan... So if the Sophos gave me an alert, but the Terminal cannot find any existing paths... Do I have the Flashback virus? Sorry if this is confusing... I am not a tech but average user.....

    :1006441
  • 0

    /Users/Shared/Infected/.SafariArchive.tar.gz looks to me like a "quarantine and move" path.  Best to just clean it up from the quarantine manager.  The file itself begins with a dot, so would be invisible without ls -a in the Terminal (and the finder).

    In short, that's lot a location where Flashback can actually do any harm, so you're not likely currently "infected" -- but you do have the remnants of the malware lurking somewhere -- possibly just in the quarantine manager with the actual files already cleaned up.

    :1006453