Anti Flashback Trojan
Anti Flashback Trojan
2.1.1

5.0

HomeAntivirusAnti Flashback Trojan
Anti Flashback Trojan free download for Mac

Anti Flashback Trojan2.1.1

10 January 2013

Checks for the Flashback Trojan.

Overview

Anti Flashback Trojan is a free application that checks for the Flashback Trojan.

Flashback is a variant of the Tsunami Trojan for Mac OS X, and has so far infected over 600, 000 of them. Now you can check whether your Mac is infected with the Flashback-Trojan without resorting to manual removal in Terminal. For more information what Flashback does, including manual removal instructions, see the F-Secure website.

Incidentally, all my apps are free, so any donation would be very much appreciated.

What's new in Anti Flashback Trojan

Version 2.1.1:
  • Adds a google chrome scan (improved virus search)
  • Adds a download link to the apple flashback remove tool
  • Some minor changes

Related articles

Join over 500,000 subscribers.

Subscribe for our newsletter with best Mac offers from MacUpdate.

How would you rate Anti Flashback Trojan app?

18 Reviews of Anti Flashback Trojan

LizBo
17 April 2012
Version: 2.0.2

Most helpful

I have serious doubts about the credibility of the people claiming this trojan infected 600,000 Mac computers. I think the numbers are a outright lie and exaggerated to scare people into buying AV software. I was not infected, none of my friends or family were infected. And none of the 10,000+ worldwide clients the company I work for had a single reported infection.
(5)
AsSpants
10 January 2013
Version: 2.1
The operation couldn't be completed. (OSStatus error -67049)
(0)
Imho
10 January 2013
Version: 2.1
Downloaded the new version. Tried to open it, but it gave me twice an error message ...
(0)
Schmye-Bubbula
25 April 2012
Version: 2.0.4
I can't glean from the description or from the publisher's website whether this thing will actually remove the malware, or only check for it.
(2)
Show comment (1)
B-Jefferson-Le-Blanc
22 April 2012
Version: 2.0.3
This app is viable if for no other reason than it works on OS X 10.5. Apple has stopped supporting OS versions before Snow Leopard so there's no Java update for Leopard users. They might appreciate a tool that can check their systems for infection. Indeed, so might Tiger users. That said, they would all be well advised in the now riskier climate for Mac security to install an app like ClamXav that still supports older Macs.
(2)
Show comment (1)
jessica@jessicawilliams-com
22 April 2012
Version: 2.0.3
I was using Dreamweaver on my Mac about 2 weeks ago. A very suspicious window closely resembling but not exactly like the flash installer popped up and said I was running an old version of flash and needed to update it. It directed me to enter my password, not giving me a choice. I refused. I restarted and no more installer. My flash version was not only up-to-date. It was a an advanced beta version. This has not happened since. I'd steer clear of scripts offering to delete this 'virus' since Mac has put out a very effective Java fix, and since this bug is supposedly very hard to remove. I would NOT click "update" on any flash installer that appears out of nowhere ordering you to install a version not listed on Adobe's web site. If it's not on Adobe's download page, it's fake.
(3)
LizBo
17 April 2012
Version: 2.0.2
I have serious doubts about the credibility of the people claiming this trojan infected 600,000 Mac computers. I think the numbers are a outright lie and exaggerated to scare people into buying AV software. I was not infected, none of my friends or family were infected. And none of the 10,000+ worldwide clients the company I work for had a single reported infection.
(5)
Show comment (1)
Mysticalos
16 April 2012
Version: 2.0.2
apples tool is out now http://www.macupdate.com/app/mac/42634/flashback-malware-removal-tool
(2)
Show comment (1)
Beamy
11 April 2012
Version: 1.0.2
You may also try the Kaspersky Flashfake Trojan removal tool : info: http://www.securelist.com/en/blog/208193454/Flashfake_Removal_Tool_and_online_checking_site Download: http://support.kaspersky.com/downloads/utils/flashfake_removal_tool.zip :)
(0)
Show comment (1)
2
Tareed
10 April 2012
Version: 1.0.2
Be cautious of relying on scripts like this one. It is based on instructions for a specific variant from F-Secure, which do not work for all variants. It would be better to rely on some good anti-virus software, like Sophos Anti-Virus for Mac Home Edition or ClamXav, both of which are completely free, with no subscriptions or time limitations. And no, I'm not associated with either product.
(1)
Show comment (1)
2
AlVarnell
10 April 2012
Version: 1.0.2
All references to the F-Secure document for cleaning this malware are out-of-date. The correct one for removing the current variant that has supposedly infected over 600,000 Macs is http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_k.shtml which has been out for over a week now.
(2)
Show comment (1)
3.5
Simbasounds
09 April 2012
Version: 1.0.1
This may not be the most sophisticated software, but the developer has responded quickly and provided it for free (so far there's nothing else on MacUpdate - their review process is somewhat quirky.) I checked the script and it's not a trojan installer as one user suggested. See for yourself: -- -- Anti Flashback-Trojan -- -- Created by Moritz Wette on 06.04.12. -- Copyright 2012 Moritz Wette. All rights reserved. -- on scan1() try set command to do shell script "defaults read /Applications/Safari.app/Contents/Info LSEnvironment" --set output to words of (do shell script command) return true on error errmsg if (errmsg contains "does not exist") then return false end try end scan1 on scan2() try do shell script "defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES " return true on error errmsg if (errmsg contains "does not exist") then return false end try end scan2 on scan3() try do shell script "defaults read /Applications/Firefox.app/Contents/Info LSEnvironment" return true on error errmsg if (errmsg contains "does not exist") then return false end try end scan3 on scan4() try do shell script "defaults read /Applications/Google Chrome.app/Contents/Info LSEnvironment" return true on error errmsg if (errmsg contains "does not exist") then return false end try end scan4 (*on remove1() try do shell script "grep -a -o '__ldpath__[ -~]*' " + scan1_return on error errmsg display dialog errmsg end try try do shell script "sudo defaults delete /Applications/Safari.app/Contents/Info LSEnvironment" on error errmsg display dialog errmsg end try try do shell script "sudo chmod 644 /Applications/Safari.app/Contents/Info.plist" on error errmsg display dialog errmsg end try end remove1*) (*on remove2() try do shell script "grep -a -o '__ldpath__[ -~]*' %path_obtained_in_step9%" on error errmsg display dialog errmsg end try try do shell script "defaults delete ~/.MacOSX/environment DYLD_INSERT_LIBRARIES" on error errmsg display dialog errmsg end try try do shell script "launchctl unsetenv DYLD_INSERT_LIBRARIES" on error errmsg display dialog errmsg end try end remove2*) on run set f to 0 scan1() if (scan1() = true) then set f to f + 1 scan2() if (scan2() = true) then set f to f + 1 scan3() if (scan1() = true) then set f to f + 1 scan4() if (scan2() = true) then set f to f + 1 if (f > 0) then set temp to display dialog "Your computer is infected!" with icon 0 buttons {"Okay"} if (button returned of result = "Remove The Flashback-Trojan") then --if (scan1() = true) then remove1() --if (scan2() = true) then remove2() --display dialog "Your computer should be clean now!" --open location "http://www.moritzwette.com/donate" end if else display dialog "Your computer may be clean!" open location "http://www.moritzwette.com/donate" end if end run
(3)
Show comments (4)
Dana-Sutton
08 April 2012
Version: 1.0.1
If you are concerned about the Flashback Trojan and want to check out, and, if necessary, fix your Mac using only Terminal, first go to this page (linked by the Ars Technica site): http://www.f-secure.com/weblog/archives/00002336.html, and then this followup page: http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml That way you can avoid any anxiety about using this or similar items of software.
(0)
Show comments (3)
Ironman
08 April 2012
Version: 1.0.1
Just a comment: the info about the supposed 600'000 infected Macs comes from only 1 source, some called "Dr Web", a russian hacker or troll. All this is a scam ..
(3)
Show comments (2)
MacUpdate-Lon
08 April 2012
Version: 1.0
See "Flashback Checker Script" available here: http://macstuff.beachdogs.org/blog/
(1)
Show comment (1)
MacUpdate-Lon
08 April 2012
Version: 1.0
There's an alternative at this page: http://macstuff.beachdogs.org/blog/ Look for this at the above page: Flashback Checker Script
(1)
Borlox
08 April 2012
Version: 1.0
This Applescript application is completely bogus. It's just a wrapper for some shell commands that don't make sense and that the "developer" obviously doesn't understand. Don't download.
(4)
Show comments (4)
Passanstoi
08 April 2012
Version: 1.0
This is fast and hopefully effective, thank you developer
(0)
5
Ok14me21
08 April 2012
Version: 1.0
My computer is clean!
(0)
Show comments (3)