However, the official guides for TM-based restoration recommend saving important files to something external, restoring from TM, then restore the files from the non-TM source. Selectively, cautiously, restore newer files from a newer TM backup.Reinstall OS X and restore files from a Time Machine backup old enough that it should be clean.I'm doing my best to make sure the malware is gone (or at least disabled) and all important data is backed up. Case in point: There's another Mac on the same network, and I've verified that the other Mac is clean.
There are no signs of the malware having worm-like behavior. This Mac had the OSX/Pirrit.D variant which seemed to get more aggressive when I tried to remove it, disabling AVG Antivirus and removing (or at least hiding) the '/Library' folder. It's called OSX/Pirrit.) There are a few different versions and not much is known about them besides they start as just adware, but seem to have the potential to mutate. I'm trying to fix a Mac that got hit with the OS X version of some malware.
