Originally Posted By: alternaut
Testing for the presence of and removing Trojan-Downloader:OSX/Flashback.I * can be done with Terminal, following the instructions provided by F-Secure. That said, I don't know if these instructions are valid for all current Flashback variants out there (but see below).

*) PS, the (similar) detection/removal instructions for the more recent Downloader:OSX/Flashback.K variant are found HERE. This is the variant that doesn't require an admin password to install.


The F-Secure protocol for identification and disinfection seems to be valid only for Safari.

I'm way too unsophisticated to make the necessary changes to see if my iMac might be infected via Firefox.

Any other suggestions?