New Fruitfly Malware

Discussions relating to ClamXav

Moderator: Mark

New Fruitfly Malware

Postby Radar1968 » Wed 26 Jul 2017 8:07 pm

Hi,

Appreciate that:

a) Risk is very minimal
b) Code is antiquated and controlling servers/domains are down
c) Latest El Capitan and Sierra OS's render this harmless
d) It's difficult to detect in the first place

But.... does ClamXav have any detection signatures or mechanisms to see if a Mac has been/is infected? or am I asking the question with no basis for concern?

Kind Regards
Radar
Radar1968
 
Posts: 84
Joined: Thu 20 Dec 2012 8:59 pm

Re: New Fruitfly Malware

Postby alvarnell » Wed 26 Jul 2017 10:17 pm

Currently the ClamAV scanner has five and ClamXAV an additional nine signatures (some are almost certainly duplicates) which address all known variants of Fruitfly malware and various components involved in installation. Most have been on-board since January 20 of this year.

For OS X 10.11 and above users, the Malware Removal Tool (MRT) will automatically check for and delete key components at startup.
-Al-
--
iMac(21.5-inch, Mid 2011) 2.8GHz Intel Core i7/OSX 10.10.5, 10.11.6, 10.12.6 & 10.13.6/ClamXAV v3.0.9 (7713)/0.100.2_01
iMac(Retina 5K, 27-inch, 2017) 4.2GHz Intel Core i7/macOS 10.12.6, 10.13.6 & 10.14.5/ClamXAV v3.0.11 (7899)/0.101.2_09
alvarnell
Site Admin
 
Posts: 5509
Joined: Thu 04 Sep 2008 1:18 am
Location: Mountain View, CA, USA

Re: New Fruitfly Malware

Postby Radar1968 » Thu 27 Jul 2017 1:31 pm

alvarnell wrote:Currently the ClamAV scanner has five and ClamXAV an additional nine signatures (some are almost certainly duplicates) which address all known variants of Fruitfly malware and various components involved in installation. Most have been on-board since January 20 of this year.

For OS X 10.11 and above users, the Malware Removal Tool (MRT) will automatically check for and delete key components at startup.


I never doubted it for a moment!! Just nice to have it confirmed.

Thanks again for your time and expertise.

Radar
Radar1968
 
Posts: 84
Joined: Thu 20 Dec 2012 8:59 pm


Return to ClamXav

Who is online

Users browsing this forum: No registered users