Contribute
Register

Handbrake site breached and download infected with Malware!!!

Joined
Apr 15, 2013
Messages
87
Motherboard
MSI Z170A Gaming M7
CPU
Intel Core I7 6700K
Graphics
MSI GTX 1070 Gaming X 8G
If you've downloaded Handbrake from the official website between May 2nd and May 6th you've got a 50% chance your download was injected with the OSX.Proton trojan.

Please check your SHAs asap...

file: Handbrake.dmg
SHA1: 0935a43ca90c6c419a49e4f8f1d75e68cd70b274
SHA256: 013623e5e50449bbdf6943549d8224a122aa6c42bd3300a1bd2b743b01ae6793
If you worried check your system for a process called "Activity_agent" as Handbrake say this is a 100% indicator that your infected.

Removal is pretty straightforward
Removal

Open up the "Terminal" application and run the following commands:

  • launchctl unload ~/Library/LaunchAgents/fr.handbrake.activity_agent.plist
  • rm -rf ~/Library/RenderFiles/activity_agent.app
  • if ~/Library/VideoFrameworks/ contains proton.zip, remove the folder
Then Remove any "HandBrake.app" installs you may have.
https://forum.handbrake.fr/viewtopic.php?f=33&t=36364
 
Last edited:
Joined
Jul 24, 2015
Messages
2,332
Motherboard
MSI H81i
CPU
i5-4570
Graphics
RX 580
If you've downloaded Handbrake from the official website between May 2nd and May 6th you've got a 50% chance your download was injected with OSX.Proton the trojan.

Please check your SHAs asap...
Thanks for the information.
 
Joined
Apr 15, 2013
Messages
87
Motherboard
MSI Z170A Gaming M7
CPU
Intel Core I7 6700K
Graphics
MSI GTX 1070 Gaming X 8G
Not much use if you've already downloaded the app is it but thanks for the warning.
I was in the process of adding that to the OP :)
 
Top