If you have recently downloaded Handbrake on Mac, you will be infected — 2022

Handbrake has been infected for the last week. If you have downloaded it, don't worry, we will show you how you can get rid of the virus in this article.

Current technological needs

Technology advances at giant steps. A few years ago, although we could already say that it was something from the last century, we watched our movies and series on VHS video tapes.

Years later, videos became virtually obsolete with the advent of CDs and DVDs. They took up less space on our shelves and were more comfortable overall. But with the advent of the digital age, we don't even have DVD movies at home anymore, it's all through media files.

That is why there are certain programs, such as the case of Handbrake, which they are used to convert those old DVDs to digital format , to be able to leave them saved in our multimedia library, either in clouds such as Google Drive, iCloud, or leave them stored in our multimedia center or hard drive.

The bad thing about this type of programs is that they can be vulnerable to infections and this has happened with the program that we have mentioned. Apparently she had a seizure and was infected.

If you've recently downloaded Handbrake, don't worry, don't panic

If you have been infected, don't panic.

For all those people who have downloaded this app between May 2 and May 6 , they will have downloaded version 1.7 of the program, which version is infected, but not 100%.

You have a 50% chance of infection on your Mac – although it is also available for Windows and Linux -, but below we will explain how to get rid of this infection.

If you had the application already downloaded beforehand, don't worry, it only spread when you downloaded that version of new , so to speak. This tells us that if you have updated, it does not mean that you are infected.

Anyway, you can check yourself if your Mac is infected by following these steps:

  1. Go into Activity Monitor in macOS.
  2. Look for a process called Activity_agent.
  3. Si utiliza el SHA1: 0935a43ca90c6c419a49e4f8f1d75e68cd70b274 o SHA256: 013623e5e50449bbdf6943549d8224a122aa6c42bd3300a1bd2b743b01ae6793 you are infected.

In order to eliminate the virus, you must carry out the following commands in the terminal of your Mac:

  1. run the command launchctl unload ~/Library/LaunchAgents/fr.handbrake.activity_agent.plist
  2. run the command rm -rf ~/Library/RenderFiles/activity_agent.app
  3. run the command if ~/Library/VideoFrameworks/ contains proton.zip, remove the folder.

Luckily, as you have seen, it is very easy to get rid of this virus. However, you should change all your passwords immediately, as iCloud Keychain could almost certainly have been infected.

Anyway, you can access the official forum of the app from here . There you will be able to see all the information about this problem, which luckily would not have affected a large number of users, since it is not as common an app as others that are used on a daily basis.

You may be interested: Snake, the Windows malware, comes to macOS