Jump to content

Kaspersky Lab suspends Flashback-removal tool...


Recommended Posts



Kaspersky Lab suspends Flashback-removal tool

By Joel Mathis

April 12, 2012 05:24 PM ET

Macworld - Kaspersky Lab on Thursday suspended distribution of its tool to remove the Flashback malware attacking Mac computers, saying the tool itself was making unacceptable alterations to user computers. A replacement is expected soon.

The lab's Flashfake Removal Tool was suspended after Kaspersky discovered that it was erroneously removing user settings--including auto-start configurations, user configurations in browsers, and file sharing data--from infected computers. It had been in operation since Monday.

"The Kaspersky Flashfake Removal Tool has been temporarily suspended," spokesman Greg Sabey said in an email to reporters. "The company will release an updated version of the utility with the bug corrected and will send a notification as soon as it's available."

Sabey said a different tool, Flashback Checker, is unaffected and remains in use. Flashback Checker works differently than Flashflake Removal. The checker is a website where you can paste your Mac's unique identifier to see if you're infected by Flashback. The site will also check that you have the latest Java update installed, and are thus safe from further infection--otherwise it will prompt you to run Apple's Software Update.

Kaspersky's suspension comes during a busy week in the Flashback-fighting front. Apple on Tuesday said it was developing a technical solution to the defeat the malware, and added that it was working with service providers to disable Flashback's "command and control network."

The malware has reportedly affected more than 600,000 Macs.

Other options remain available. For example, Apple issued a patch last week to close the Java vulnerability that Flashback exploits, though that update won't detect whether you're infected or remove the malware. Last week, F-Secure published a set of Terminal commands to uncover the exploit, and on Monday an independent programmer released a Mac app that can check for the infection as well.

Kaspersky, meanwhile, asked users who had experienced problems with its Flashflake Removal Tool to email the company, or call its Moscow home office at 7 (495) 797-70-32. It is there to provide support or answer questions.

SOURCE: http://www.computerw...ck_removal_tool


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.