Apple Updates Anti-Malware Definitions to Address Fake Flash Player Trojan

[abz1981]

Originally Posted by virginiaplain0

Well, today, I turned on my computer and Adobe's updated started soon afterwards. I clicked "Install" and the "Agree" window popped up next. I clicked on the software agreement and it took me to Adobe's website. Is that a good sign that I didn't get this trojan?

I did the same today, when I opened the BBC I player application. But then it asked me to update adobe, that an update was needed. How do I know if I got this trojan too? Anyway to find out?

[subsonix]

Didn't OS X use to ship with Flash pre-installed, and also take care of updates automatically in the main OS updates? Seems to be a better option, regardless of what you may think of Flash since it is, in reality, something that everyone uses from time to time.

[mac-ho]

MMMM, my neighbor was just arrested for Flashing. Guess you can't be to careful!!

[skiziks]

A simple question from an inquisitive senior.
You say XProtect.plist is standard with Snow Leopard.
Why can't I find this file with a "Find" search or with Spotlight?
Yes, I have Snow Leopard.

[GGJstudios]

Originally Posted by skiziks

A simple question from an inquisitive senior.
You say XProtect.plist is standard with Snow Leopard.
Why can't I find this file with a "Find" search or with Spotlight?
Yes, I have Snow Leopard.

/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.plist

[michaelsviews]

Kinda late in reporting this aren't you ?

[GGJstudios]

Originally Posted by PJMAN2952

Windows has 100 of viruses. Us Mac have only 2.

Correction: zero.

[curtisinoc]

So then . . . how do you view "Flash sites" like youtube without installing Flash on your Mac? Is there a way?

[GGJstudios]

Originally Posted by curtisinoc

So then . . . how do you view "Flash sites" like youtube without installing Flash on your Mac? Is there a way?

To view Flash on websites, you need Flash installed. For YouTube, you have an option to watch videos in HTML5 format, instead of Flash. It's OK to install Flash.... just make sure you do it from Adobe's site.

[munkery]

Originally Posted by curtisinoc

So then . . . how do you view "Flash sites" like youtube without installing Flash on your Mac? Is there a way?

There are Safari extension that allow you to view various Flash video sources via HTML5 video tags but these extensions sometimes break due to changes in how Flash is embedded in YouTube.

For example, YouTube5 is a nice extension but it presently does not work, AFAIK.

Here is another option:

http://www.macupdate.com/app/mac/344...fari-extension -> may not work as I don't use it.

To view Flash on websites, you need Flash installed. For YouTube, you have an option to watch videos in HTML5 format, instead of Flash.

Do you still have to sign up for the beta to do so?

[curtisinoc]

Originally Posted by GGJstudios

To view Flash on websites, you need Flash installed. For YouTube, you have an option to watch videos in HTML5 format, instead of Flash. It's OK to install Flash.... just make sure you do it from Adobe's site.

Thanks GGJ . . . The more I read this forum, the more paranoid I get . . yet, I can't stop reading !!!!!

[GGJstudios]

Originally Posted by curtisinoc

Thanks GGJ . . . The more I read this forum, the more paranoid I get . . yet, I can't stop reading !!!!!

There's really no need to be paranoid. Here's a simple rule that will keep your Mac malware free: Only install software that you intended to install, downloaded from reputable, known sources.

That means you don't install something just because you were prompted to install it. It also means you don't install software from torrent sites, porn sites, instant messages or emails. For the most part, that means you only download software from the developer's site or from a trusted site like Cnet. If you're not sure about an app, search this forum for the app name and you'll likely find many posts by others who will tell you if it's good to use or not.

As long as you follow that rule, you don't need to worry about malware on your Mac. You don't need any antivirus software to protect Mac OS X from malware. No viruses exist in the wild that can run on Mac OS X, and there never have been any, since it was released 10 years ago. The handful of trojans that exist can be easily avoided with some basic education, common sense and care in what software you install:

Mac Virus/Malware Info

Helpful Information for Any Mac User

[MagnusVonMagnum]

Well let's see, about 50 people all saying Flash is a trojan (ha ha). It was slightly funny the first time. It's not funny being repeated 49 more times, not to mention the usual people who then post (preemptively this time) 50 more times that a trojan is not a virus (just in case we all haven't had our does of banality today).

In any case, I would hardly call this status quo. Despite what some people think, Apple and its associated operating systems are going to see more malware as user numbers increase. This is one reason you need to make sure you are on an official web site and not some mockup mailed to you with some kind of special, etc. So many people think no one falls for that sort of thing, but reality is quite different. Mac users are probably no smarter or dumber than any other person on the planet (although sometimes I think their skill sets tend to skew a little compared to an average PC owner). I do think it's ridiculous that Apple doesn't offer their malware checker program to Leopard users. It wouldn't be much bother, after all. They could even set it up to quietly update itself to newer definitions if they so willed.

OTOH, Leopard users who have PPC shouldn't fall for it because Flash isn't being updated for PPC anymore. I'm not sure why a Leopard Intel user hasn't upgraded yet, except possibly because Snow Leopard is slower (not sure about Lion as I refuse to even update to it until I 'need' to given how it drops Rosetta and ruins Screens, etc. and my Hackintosh Netbook can't run Lion anyway because it's 32-bit).

[GGJstudios]

Originally Posted by MagnusVonMagnum

...not to mention the usual people who then post (preemptively this time) 50 more times that a trojan is not a virus (just in case we all haven't had our does of banality today).

Actually, that's not for your benefit, but for the benefit of the thousands of readers who still think any malware is a virus and don't understand the implications of the difference. Remember, this forum is read by more than long-time members.

Originally Posted by MagnusVonMagnum

I do think it's ridiculous that Apple doesn't offer their malware checker program to Leopard users. It wouldn't be much bother, after all.

It wouldn't make any difference, as long as the user exercises common sense about what they install. That's a much safer approach than depending on software to protect you.

Originally Posted by MagnusVonMagnum

I'm not sure why a Leopard Intel user hasn't upgraded yet...

There are many reasons. Chief among them is, why update unless you need to? Neither SL nor Lion offer anything that I need or want, so why change for the sake of changing?

[curtisinoc]

Originally Posted by GGJstudios

There's really no need to be paranoid. Here's a simple rule that will keep your Mac malware free: Only install software that you intended to install, downloaded from reputable, known sources.

That means you don't install something just because you were prompted to install it. It also means you don't install software from torrent sites, porn sites, instant messages or emails. For the most part, that means you only download software from the developer's site or from a trusted site like Cnet. If you're not sure about an app, search this forum for the app name and you'll likely find many posts by others who will tell you if it's good to use or not.

As long as you follow that rule, you don't need to worry about malware on your Mac. You don't need any antivirus software to protect Mac OS X from malware. No viruses exist in the wild that can run on Mac OS X, and there never have been any, since it was released 10 years ago. The handful of trojans that exist can be easily avoided with some basic education, common sense and care in what software you install:

Mac Virus/Malware Info

Helpful Information for Any Mac User

Good, Solid, Simple advice . . should make this a "sticky"

[Macgrim]

So this trojan, doesn't prompt you like a normal update correct? Cause there was a normal update for flash that was found threw software update. Or was that the trojan? The reason i ask is because I'm new to mac and I assumed that if i was able to find the update threw the software updater that it was safe. Or is this trojan just like a pc virus/malware where it will try and install after clicking a bad link or going to a bad site?

[GGJstudios]

Originally Posted by Macgrim

So this trojan, doesn't prompt you like a normal update correct? Cause there was a normal update for flash that was found threw software update. Or was that the trojan? The reason i ask is because I'm new to mac and I assumed that if i was able to find the update threw the software updater that it was safe. Or is this trojan just like a pc virus/malware where it will try and install after clicking a bad link or going to a bad site?

Software Update won't include updates for non-Apple apps. If you get the update notice from already installed software, that should be safe. If, however, you visit a website, like I did this morning, that says you need an updated version of Flash player, don't install it there. Instead, go to Adobe's site directly and download and install the player.

To download Flash player: http://get.adobe.com/flashplayer/
To find your currently installed version: http://www.adobe.com/software/flash/about/

[Macgrim]

Originally Posted by GGJstudios

Software Update won't include updates for non-Apple apps. If you get the update notice from already installed software, that should be safe. If, however, you visit a website, like I did this morning, that says you need an updated version of Flash player, don't install it there. Instead, go to Adobe's site directly and download and install the player.

To download Flash player: http://get.adobe.com/flashplayer/
To find your currently installed version: http://www.adobe.com/software/flash/about/

Cool thanks for the info. I feel a lot better now hahaha.

[Rowf]

Originally Posted by abz1981

I did the same today, when I opened the BBC I player application. But then it asked me to update adobe, that an update was needed. How do I know if I got this trojan too? Anyway to find out?

Originally Posted by Macintox

menu go to folder ..type this: /etc/
then open - hosts
the inside should look like this if it has not been modified
##
# Host Database
#
# localhost is used to configure the loopback interface
# when the system is booting. Do not change this entry.
##
127.0.0.1 localhost
255.255.255.255 broadcasthost
::1 localhost
fe80::1%lo0 localhost

Check against the above.
Open finder - click Go on the menu bar - scroll to Folder - type in /etc/ in the box that opens and you'll go to the folder where the host file is.
Open the hosts file and compare to this.
If it matches it hasn't been modified.
Thanks to the person who posted this.

My Flash updated yesterday and I've compared the my hosts file against this and it matches.

[ablashek]

History

Windows: Popular, Lots of Virus, Hard to Use.
Mac: Not so much, about 5% in the past, Not Popular, Easy to Use
So we made the switch from Windows to Mac back in early 2000's (because it just seamed like the right thing to do.)

Prediction

Mac: Popular (80% Market Share), Lots of Virus, and Possible Harder to Use
Windows: UnPopular (5% Market Share), Hardly any Viruses, and Possibly Easier to Use.
So we probably will make the switch to Windows from a Mac because in just seems like the right thing to do.


I am joking of course, but we all knew this day would come.

[GGJstudios]

Originally Posted by ablashek

I am joking of course, but we all knew this day would come.

What day is that?

[ablashek]

Originally Posted by GGJstudios

What day is that?

I'm a Mac lover, and deep down one of the reasons I like the Mac is that we don't have to worry about Virus/Trojans. We all knew deep down its not because the Mac is safer, its just not popular enough for hackers to dedicate their time.

Now that its getting popular, with the latest numbers crossing 11% Market Share (considering that when i switched it was 4%). Hackers are going to take an interest in making Virus/Trojans to hurt users.


So the "day has come" obviously is this, that the mac got popular enough for hackers to take attention. Next we might start getting Virus for the iPhone.

[GGJstudios]

Originally Posted by ablashek

I'm a Mac lover, and deep down one of the reasons I like the Mac is that we don't have to worry about Virus/Trojans. We all knew deep down its not because the Mac is safer, its just not popular enough for hackers to dedicate their time.

Now that its getting popular, with the latest numbers crossing 11% Market Share (considering that when i switched it was 4%). Hackers are going to take an interest in making Virus/Trojans to hurt users.


So the "day has come" obviously is this, that the mac got popular enough for hackers to take attention. Next we might start getting Virus for the iPhone.

The market share theory is a myth that has been debunked many times in this forum and elsewhere. Mac OS X has more market share and a larger installed base than any previous Mac OS. There were viruses and trojans that affected Mac OS 9 and earlier, but now that market share has grown, the number of viruses has dropped to zero and the number of trojans has dwindled to just a handful.

"This day", as the doom-and-gloomers have been predicting, has not only failed to arrive, it has gotten farther away.

[skiziks]

Originally Posted by GGJstudios

/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.plist

Thank you. I would not have found this.

The "Find" search and "Spotlight" were not very useful.

[Random14]

Um, a few days ago I was just browsing sites and I think a Flash update showed up in my dashboard. Is that how it normally happens? I was slightly suspicious so I clicked the "remind me later" option to close it while I directly went to Adobe's site to check but it didn't prompt me to update or anything.

So did the program get on my computer or not? My browser isn't getting redirected, and I think I have the daily updates on, but I still get paranoid easily. Oh well, its Mac and I know I didn't install anything so its probably all fine, just gotta be more careful in the future. Pretty sure I didn't get to the "which drive to install it on" screen and mostly sure I didn't input my password. Just wondering if it would show up in the activity monitor or if Apple updates would've already dealt with it if it was there.