The researchers believe the infected Transmission app was signed on August 28 and distributed only on August 29, and thus recommend anyone who downloaded version 2.92 of the app between those dates to verify if their system is compromised by checking for the presence of any of the following files or directories: /Applications/Transmission.app/Contents/Resources/License.rtf/Volumes/Transmission/Transmission.app/Contents/Resources/License.rtf$HOME/Library/Application Support/com.apple.iCloud.sync.daemon/icloudsyncd$HOME/Library/Application Support/com.apple.iCloud.sync.daemon/process.id$HOME/Library/LaunchAgents/com.apple.iCloud.sync.daemon.plist/Library/Application Support/com.apple.iCloud.sync.daemon/$HOME/Library/LaunchAgents/com.geticloud.icloud.photo.plist
fake macs cant get viruses
