Leap-A Removal – Bye_Leap-A Application
Tonight, I released an Automator script that will remove the Leap-A trojan/malware. It removes the /apphook/ directory in the ~/Library/InputManagers/ directory, removes the malicious file latestpics.tgz in the /tmp/ directory, and makes the permissions stronger on the ~/Library/InputManagers/ folder.
Thanks to Macworld.com for the removal process. Download the file @ versiontracker.com or macupdate.com. If the workflow fails, this is good because it means you don’t have the malware/trojan. In other words, the workflow is trying to remove a directory/file that doesn’t exist and exits.
After you’ve run the Automator workflow, you should probably reinstall those applications that no longer run. Due to a bug in the original malware, the programs can stop running. Reinstalling the applications will revert them back to pristine quality.
Enjoy – I hope you learned a lesson not to download from untrusted sources!
Feedback from those who downloaded it: Thank you very much! I love when the Mac community jumps in to help the Mac community! I wouldn’t give my Mac up for anything, and the community makes owning one always that much better! – UMAROMC
Thanks, this makes the removal process easier. – DANSGIL
Posted: February 17th, 2006 under Apple.
Comments: 2
Comments
Comment from rg
Time: January 5, 2007, 5:41 pm
hi & thanks: how do i know if it found & removed anything?
Comment from Ryan
Time: January 5, 2007, 6:48 pm
In the status/menu bar at the top of your screen, you will see a “Workflow…” and a stop sign. If the workflow fails (meaning not all files were found for the “virus”), it will say briefly that Workflow Failed or something similar.









Write a comment