Anyone how I can locate this file? What is the trying to do? How to complete the next step? NeroLite and the space backslash combination has got me confused, and the system can't find the file. The next step is to do the following: bash-3.2$ grep -a -o '_ldpath_*' /Applications/Safari.app/Contents/Resources/.NeroLite /Applications/Safari.app/Contents/Resources/.NeroLite: No such file or directoryĪs you can see the file path includes. 'DYLD_INSERT_LIBRARIES' = '/Applications/Safari.app/Contents/Resources/.NeroLite shows the malware. The first step is to type the following: bash-3.2$ defaults read /Applications/Safari.app/Contents/Info LSEnvironment This link is similar, and provides a little more detail.
There's a summary by F-Secure that I'm trying to follow in order to remove it. My Mac OSX Snow Leopard got exploited by the Flashback malware.
