Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Apple's update on April 17, 2012 detected and deactivated the Flashback trojan.

Yet two weeks ago I had following the instructions here. After concluding that my Mac is not infected, I disabled Java.

I don't understand how Flashback could have sneaked in, especially after my guard has been up after an Arstechnica article, but that no longer matters.

How do I find out what kind of damage might have already been done? Will one of the log files contain a trace of what has happened?

share|improve this question
1  
There may have been different version of Flashback than the one in the F-secure instructions. Did you disable Java in all browsers that you were using or in Java Preferences (in Utilities)? –  lupincho Apr 17 '12 at 7:46
    
Only in the browsers (Safari + Firefox), but I see that Java is also disabled in Java Preferences, which the last Apple patch said would do. –  Calaf Apr 17 '12 at 13:12
add comment

1 Answer 1

I'd be surprised if the logs told you anything useful.

If you're concerned, you could install one of the free AV products for the Mac. Do a full system scan to ensure that all traces of the trojan have been removed.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.