- Joined
- Apr 15, 2013
- Messages
- 83
- Motherboard
- MSI Z170A Gaming M7
- CPU
- Intel Core I7 6700K
- Graphics
- MSI GTX 1070 Gaming X 8G
If you've downloaded Handbrake from the official website between May 2nd and May 6th you've got a 50% chance your download was injected with the OSX.Proton trojan.
Please check your SHAs asap...
If you worried check your system for a process called "Activity_agent" as Handbrake say this is a 100% indicator that your infected.
Removal is pretty straightforward
https://forum.handbrake.fr/viewtopic.php?f=33&t=36364
Please check your SHAs asap...
file: Handbrake.dmg
SHA1: 0935a43ca90c6c419a49e4f8f1d75e68cd70b274
SHA256: 013623e5e50449bbdf6943549d8224a122aa6c42bd3300a1bd2b743b01ae6793
If you worried check your system for a process called "Activity_agent" as Handbrake say this is a 100% indicator that your infected.
Removal is pretty straightforward
Removal
Open up the "Terminal" application and run the following commands:
Then Remove any "HandBrake.app" installs you may have.
- launchctl unload ~/Library/LaunchAgents/fr.handbrake.activity_agent.plist
- rm -rf ~/Library/RenderFiles/activity_agent.app
- if ~/Library/VideoFrameworks/ contains proton.zip, remove the folder
https://forum.handbrake.fr/viewtopic.php?f=33&t=36364
Last edited: