Contribute
Register

Handbrake site breached and download infected with Malware!!!

Status
Not open for further replies.
Joined
Apr 15, 2013
Messages
83
Motherboard
MSI Z170A Gaming M7
CPU
Intel Core I7 6700K
Graphics
MSI GTX 1070 Gaming X 8G
If you've downloaded Handbrake from the official website between May 2nd and May 6th you've got a 50% chance your download was injected with the OSX.Proton trojan.

Please check your SHAs asap...

file: Handbrake.dmg
SHA1: 0935a43ca90c6c419a49e4f8f1d75e68cd70b274
SHA256: 013623e5e50449bbdf6943549d8224a122aa6c42bd3300a1bd2b743b01ae6793

If you worried check your system for a process called "Activity_agent" as Handbrake say this is a 100% indicator that your infected.

Removal is pretty straightforward
Removal

Open up the "Terminal" application and run the following commands:

  • launchctl unload ~/Library/LaunchAgents/fr.handbrake.activity_agent.plist
  • rm -rf ~/Library/RenderFiles/activity_agent.app
  • if ~/Library/VideoFrameworks/ contains proton.zip, remove the folder
Then Remove any "HandBrake.app" installs you may have.

https://forum.handbrake.fr/viewtopic.php?f=33&t=36364
 
Last edited:
If you've downloaded Handbrake from the official website between May 2nd and May 6th you've got a 50% chance your download was injected with OSX.Proton the trojan.

Please check your SHAs asap...
Thanks for the information.
 
Not much use if you've already downloaded the app is it but thanks for the warning.

I was in the process of adding that to the OP :)
 
Status
Not open for further replies.
Back
Top