When Apple released an Anti-virus tool to remove Flashback Trojan from Mac, some people were upset as the tool was not compatible with No-Java 10.7 Lion. Now here is a good news to cheer them up.
The security risks of having a Java Virtual Machine (JVM)/runtime environment on a Mac have been highlighted over the past two weeks, as the Flashback trojan spread widely by taking advantage of a vulnerability that Oracle had patched months ago, but Apple did not. However, Apple does not ship a JVM with Lion. Users who need it have to opt in and download it.
Now, Apple’s Java package has been updated repeatedly both to patch the exploit and to Flashback-proof the system as a whole, Lion users without Java installed were left out. In theory they could be affected by the Flashback trojan itself even if they were not susceptible to the specific means of infection that this variant uses.
This 356KB anti-virus tool download is recommended for all Lion users without Java installed.