New in OS X: Get MacRumors Push Notifications on your Mac

Resubscribe Now Close

Apple Releases Java Update to Remove Flashback Malware

Thursday April 12, 2012 1:27 pm PDT by Jordan Golson
Apple just released Java for OS X 2012-003, an update to the Java implementation in OS X. The update removes "the most common variants of the Flashback malware." Interestingly the update disables the automatic execution of Java applets, and, if automatic execution is re-enabled, will again disable it if no applets have been run for "an extended period of time".

It was reported earlier this week that Apple was in the process of creating software to remove Flashback. It's been claimed that the Flashback malware infected more than 600,000 Macs at its peak, though there have been a number of programs created to quickly and easily cleanse infected machines.

This Java security update removes the most common variants of the Flashback malware.

This update also configures the Java web plug-in to disable the automatic execution of Java applets. Users may re-enable automatic execution of Java applets using the Java Preferences application. If the Java web plug-in detects that no applets have been run for an extended period of time it will again disable Java applets.

This update is recommended for all Mac users with Java installed.

For details about this update see: http://support.apple.com/kb/HT5242

The update can be downloaded via Software Update. A separate Java for Mac OS X 10.6 Update 8 is available for users on Mac OS X Snow Leopard.
[ 141 comments ]


Top Rated Comments

(View all)

Avatar
daneoni
81 months ago

I thought that apple didnt get virus?


You're the exact type of user this update was released for.
Rating: 36 Votes
Avatar
nelmat
81 months ago

I thought that apple didnt get virus?


This isn't a virus. And it's estimated that less than one percent of macs that had the trojan. The OS was in no way affected, it relates to third party software which is being dropped by Apple.
Rating: 11 Votes
Avatar
gmcalpin
81 months ago

I thought that apple didnt get virus?

Troll much?

You can't honestly be stupid enough to not know the difference between a Trojan horse and a virus.
Rating: 9 Votes
Avatar
GGJstudios
81 months ago

I thought that apple didnt get virus?

It's not a virus. Educate yourself: Mac Virus/Malware FAQ (http://guides.macrumors.com/Mac_Virus/Malware_FAQ)
Rating: 7 Votes
Avatar
coolfactor
81 months ago

All computers are susceptible to viruses... even iOS devices. Macs don't get as many viruses because Windows is more "popular" and is used in huge corporations, where information is very valuable. Apple does try hard to keep OS X virus free though, including adding in an automatically updating safe list for some virus that was causing problems last year.


Is Flashback a virus? It's malware, but is it a self-propagating virus? And it's not true that Macs have fewer viruses because Windows is "more popular". OS X is inherently more secure, but as Flashback proves, it's not 100% bulletproof. But as Apple has proven with this update, the good design of OS X allows them to protect users, even after an incident arises.
Rating: 6 Votes
Avatar
Santabean2000
81 months ago
Something satisfying about installing updates!:D
Rating: 5 Votes
Avatar
charlieegan3
81 months ago
let the big boys handle this one (about time)
Rating: 4 Votes
Avatar
coolfactor
81 months ago

So does that mean we still need to run the previous update in order to patch Java? What if your computer is NOT infected? What does this update do in that case? Does this update exist for users of earlier versions of OSX such as Tiger?


It's generally recommended to install all updates that become available. Letting a system fall behind on updates is only asking for trouble.
Rating: 3 Votes
Avatar
Eric S.
81 months ago

They are moving fast.


You mean Apple? Yeah, once it became big news, about two months after Oracle released a fix for it.
Rating: 3 Votes
Avatar
bsolar
81 months ago

Thats weird. For some reason on one of my Macs it this update won't come up.


The update is relevant only if you have Java. Maybe on that machine you don't have Java installed in the first place?
Rating: 3 Votes

[ Read All Comments ]