BackDoor.Flashback is a multicomponent backdoor for Mac OS X Lion. It is distributed under the guise of an archived Adobe Flash Player installer with the name FlashPlayer-11-macos.pkg. The main component Preferences.dylib is installed into the /Library/Preferences/.
The main malicious library Preferences.dylib terminates its work if one of the following files is found in the system:
- /Library/Little Snitch/lsd
- /Applications/VirusBarrier X6.app/Contents/MacOS/VirusBarrier X6
- /Applications/Packet Peeper.app/Contents/MacOS/Packet Peeper.app