[OS X TeX] OT: effective Macintosh Trojan in the wild

[Peter Dyballa]

Am 04.05.2005 um 10:38 schrieb Bruno Voisin:

> which apparently means removing several swapfiles and tmp files.

Allô Bruno!

The swapfiles can be found in /private/var/vm. They last till the next 
reboot. They're nothing more than a memory extension -- when you loose 
the swap files you're not losing anything but re-gaining used disk 
space. You can delete them by hand when you boot into single user mode 
with only the text console and invoke 'mount -rw /' (Mac OS X gives you 
the correct syntax on the boot screen), typing on an English keyboard 
with French lettering!

The files in /private/tmp are temporal too and are allowed to exist 
until you switch off or reboot your Mac. Therefore too no loss.

It should be worth rebooting from a Norton AV CD and scanning the 
PowerBook's whole disk for the source of the trojan.

--
Greetings

   Pete

--------------------- Info ---------------------
Mac-TeX Website: http://www.esm.psu.edu/mac-tex/
           & FAQ: http://latex.yauh.de/faq/
TeX FAQ: http://www.tex.ac.uk/faq
List Post: <mailto:MacOSX-TeX at email.esm.psu.edu>