Some versions of the installer for Handrake, a popular video-encoding app on Mac, were recently infected with malware. The creators of Handbrake say around 50% of the downloads from "download.handbrake.fr" were affected from May 2 to May 6.
Any apps downloaded from the primary mirror or downloaded automatically were not impacted.
Those who used the other mirror could have a Trojan virus on their system. Attackers were able to swap a version of the installer file, known as "HandBrake-1.0.7.dmg," with a malicious one containing a virus.
You'll know you're infected if you open Activity Monitor and find a process called "activity_agent." To remove the malware, open Terminal and type these commands:
- launchctl unload ~/Library/LaunchAgents/fr.handbrake.activity_agent.plist
- rm -rf ~/Library/RenderFiles/activity_agent.app
- if ~/Library/VideoFrameworks/ contains proton.zip, remove the folder
Then you can open your Applications folder and remove any mention of Handbrake.app. It's wise to change your passwords as well.

0 Comments