If you\u2019 ve recently downloaded HandBrake, be sure to check out this removal guide<\/b>
\nThe creators of media transcoding program HandBrake have issued a statement warning that certain downloads of the installer for the Mac version of the app may contain a Trojan virus.
Downloading the app between May 2 (14: 30 UTC) and May 6 (11: 00 UTC) from the \u201cdownload.handbrake.fr\u201d mirror means you have a 50-percent chance of being infected with the Trojan. Automatically updated apps (using updater version 1.0 and above) , and files downloaded from the primary mirror are unaffected.
The attackers replaced the usual HandBrake installer file, titled \u2018HandBrake-1.0.7.dmg\u2019 , with a version that also contained the Trojan virus, so checking if you have this file on your system and seeing when it was downloaded is the first step to identifying the threat.
If you still have the installer file, you can also check if it has either of the following checksums, which likewise indicate that it contains the Trojan.
For a step-by-step on determining a file\u2019s checksums, check out this how-to .
Removing the malware is thankfully quite simple. Open the Terminal by searching for it in the Launchpad and type the following commands (without the bullet point) , hitting enter after each line.
Once you\u2019 ve done this, open your Applications folder and remove any instances of Handbrake.app there (or any other locations you may have installed it to) .
Because this Trojan targets passwords and sensitive information, if you\u2019 ve been infected it\u2019s recommended you change all passwords that are stored in Apple\u2019s macOS KeyChain or any similar password-storing services, such as browser-based password stores. Note that deleting passwords from these services isn\u2019 t sufficient \u2014 you\u2019 ll need to actually change each password that has been stored in one of these locations, as they could have already been sent to the Trojan\u2019s creators.<\/p>\n

\n

Sentiment rank: -0.3<\/div>\n

<\/div>\n<\/div>\n