14 DAY TRIAL // After recording a total of 670,000 Macs infected with the Flashback trojan, security software vendor Kaspersky Lab released a free software application that checks for and removes the malware from infected Macintosh computers. By visiting flashbackcheck.com, users can check whether or not their computer is affected by the malware.
“After intercepting one of the domain names used by the Flashback/Flashfake Mac Trojan and setting up a special sinkhole server last Friday, we managed to gather stats on the scale and geographic distribution of the related botnet,” Kaspersky Lab Expert Aleks wrote in a blog post.
“We continued to intercept domain names after setting up the sinkhole server and we are currently still monitoring how big the botnet is,” Aleks said. “We have now recorded a total of 670,000 unique bots. Over the weekend (7-8 April) we saw a significant fall in the number of connected bots:”
Aleks cautions that “This doesn’t mean […] that the botnet is shrinking rapidly – these are merely the numbers for the weekend.”
The security expert notes that Kaspersky servers have registered all the data sent by bots from the infected computers and dumped their unique system identifiers in a special database set up by the company.
“Based on this information we have set up an online resource where all users of Mac OS X can check if their computer has been infected by Flashback,” Aleks wrote.
Mac users can visit flashbackcheck.com to find out if their computer is infected, as well as to learn what to do if it is.
Flashfake, a special software tool developed by Kaspersky Lab, not only detects but it also removes the trojan. You can download the software free of charge using the link below.