I wish to know if this short piece of code is sufficient to get rid of the malware installed by Transmission on 2016/08/28 and 2016/08/29.
set userLib to POSIX path of (path to library folder from user domain)
tell application "System Events"
try
delete disk item "/Applications/Transmission.app/Contents/Resources/License.rtf"
end try
try
delete disk item "/Volumes/Transmission/Transmission.app/Contents/Resources/License.rtf"
end try
try
delete disk item (userLib & "Application Support/com.apple.iCloud.sync.daemon/icloudsyncd")
end try
try
delete disk item (userLib & "Application Support/com.apple.iCloud.sync.daemon/process.id")
end try
try
delete disk item (userLib & "LaunchAgents/com.apple.iCloud.sync.daemon.plist")
end try
try
delete disk item "/Library/Application Support/com.apple.iCloud.sync.daemon/"
end try
try
delete disk item (userLib & "LaunchAgents/com.geticloud.icloud.photo.plist")
end try
end tell
Yvan KOENIG running El Capitan 10.11.6 in French (VALLAURIS, France) mardi 30 août 2016 21:53:04