How to find and remove the OSX.RSPlug.A malware

Search

From our Sponsor...

User Functions

Don't have an account yet? Sign up as a New User
Lost your password?

What's New:

Hints

No new hints

Comments last 2 days

Links last 2 weeks

No recent new links

What's New in the Forums?

The Editor's Corner...

Here are some of my (robg) other projects...

•	The Robservatory My blog - Macs, tech, etc.
•	Mac OS X Power Hound The best of Hints in print
•	Inside iWork An iWork training DVD
•	Macworld Column, features, online...

Hints by Topic

News from Macworld

The macosxhints Poll

What version of OS X are you running as your main OS?

Other polls | 11,418 votes | 42 comments

How to find and remove the OSX.RSPlug.A malware | 15 comments | Create New Account

Click here to return to the 'How to find and remove the OSX.RSPlug.A malware' hint

The following comments are owned by whomever posted them. This site is not responsible for what they say.

How to find and remove the OSX.RSPlug.A malware
Authored by: garythemacguy on Thu, Nov 1 2007 at 5:40AM PDT

Intel iMac, Mac OS X 10.4.10 - McAfee VirusScan v8.5 (formerly known as Virex).

I have the "VirusScan Schedule Editor" component set to do a DAT eUpdate every working day (I work for a university). Your "sudo crontab -l" produces the following output:

# Virex Schedule Editor Task 09282007101331946

32 10 * * 1,2,3,4,5 /usr/local/vscanx/VShieldScheduleLauncher -i 09282007101331946 >/dev/null 2>&1

Although I'm actually in IT support, I hadn't specifically known that it used cron to achieve its results.