Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Flashback Trojan Returns With a Multi-Pronged Infection Strategy
- Thread starter MacRumors
- Start date
- Sort by reaction score
So they specically mention snow leopard and making sure java is fully up to date...is this a non-issue on lion?
Why does everyone automatically think that every single Mac user is immune to Trojan's?
Most Mac or PC users are not very computer savvy, and among many of those people are my parents and nearly all my friends..
I'm certain If my parents saw that dialog box they would click continue..
Most Mac or PC users are not very computer savvy, and among many of those people are my parents and nearly all my friends..
I'm certain If my parents saw that dialog box they would click continue..
Yes but a virus is malware. It's just in the general vernacular as virus so for all intents and purposes this is how it is understood by most people. Semantics really aren't as important as good practices and education about threats to computing IMHO.
----------
My same issue, parents. Im thinking of installing Sophos while I wait for Mountain Lion to release.
Important!!
Could some who *KNOWS* please answer this. I got a prompt this morning supposedly from Adobe saying there was an update to Flash. It appeared in the style of the CS5 installer windows ( black rectangle with coloured text ).
I thought no more and installed it.
Now I read this and am worried it may have been this trojan.
Any advice gratefully received.
Could some who *KNOWS* please answer this. I got a prompt this morning supposedly from Adobe saying there was an update to Flash. It appeared in the style of the CS5 installer windows ( black rectangle with coloured text ).
I thought no more and installed it.
Now I read this and am worried it may have been this trojan.
Any advice gratefully received.
Won't the default GateKeeper setting coupled with the sandbox requirement for the Mac App Store reduce malware to entirely nonexistent?
The one thing I worry about is the error message that Apple displays if GateKeeper is on and someone attempts to run an unsigned app. It basically says "THIS IS MALWARE!" I see the message as having two horrible impacts:
1 - The clueless user who doesn't know what they're doing will say "Oh crap! Macs have malware! Yes, this one was blocked, but how many others weren't?"
2 - The user who has common sense and knows it isn't malware but doesn't understand GateKeeper will see the message as reporting false positives on a malware checks.
Could some who *KNOWS* please answer this. I got a prompt this morning supposedly from Adobe saying there was an update to Flash. It appeared in the style of the CS5 installer windows ( black rectangle with coloured text ).
I thought no more and installed it.
Now I read this and am worried it may have been this trojan.
Any advice gratefully received.
Don't click on the links, go to the real Adobe site directly, and check there whether you need the latest update or not.
If it was fake, then you may notice problems using Safari, and Skype.
Are you using Lion or Snow Leopard? Because with Lion, you'd have seen the certificate warning. With Snow Leopard, you'd be more vulnerable, unless your Updates (re Java) are current.
I'm interested in an answer from someone experienced with either of these as well. I worry about the wife's Macbook as the kids also use it....
OS 9 had a far smaller share and more malware.
OS X has been on the market for nearly twelve years and all we have are a handful of trojans. And all this despite over 50 million users.
The old market-share argument dictates that we should have at least 1000 viruses by now, and that's being conservative. Right now we still have zero viruses and a few trojans.
The iDevice ecosystem (and the rapid proliferation thereof) has rendered this entire virus discussion moot anyway.
I'm a little confused, I though that no more java updates where to be given through the software update.
It is years since I have last seen one.
It is years since I have last seen one.
If you install ClamAV from the App Store be aware that it does not automatically scan. It is user initiated scans.
If you decide on Sophos you should read the following thread:
https://forums.macrumors.com/threads/1204593/
Good luck.
Last edited:
Could some who *KNOWS* please answer this. I got a prompt this morning supposedly from Adobe saying there was an update to Flash. It appeared in the style of the CS5 installer windows ( black rectangle with coloured text ).
I thought no more and installed it.
Now I read this and am worried it may have been this trojan.
Any advice gratefully received.
There has been a recent update to Flash....You should be fine. If you want to check, go to the flash icon in system>preferences and do a check from the Flas icon there.
This new trojan variation irritates me no end. I just spent the past week helping a friend who downloaded koobface or Flashback from a Facebook prompt to update Flash after she clicked on a dog video sent by a friend. It totally wiped her hard drive somehow. Dumb mistake on her part, although she made several mistakes by refusing to update her OS because she believed it would screw up her iMovie program . --Oh, and not having any current backups or a bootable clone.
I unilaterally updated her system to Snow Leopard and unchecked Java and Safe Downloads in Safari, etc., etc. -And told her she's much safer in SL, and now this, in which SL is somewhat vulnerable...
. --Oh, and not having any current backups or a bootable clone.I unilaterally updated her system to Snow Leopard and unchecked Java and Safe Downloads in Safari, etc., etc. -And told her she's much safer in SL, and now this, in which SL is somewhat vulnerable...
11.1.102.55 is installed. Thats the latest version of flash according to the website (official).
I am still running SL and am updated, have ClamXav also as a backup, windows has made me aware that nothing is absolutely secure, so even though right now most malware is you being dumb, I am just preparing for that scan when it just bypasses it completely.
I am still running SL and am updated, have ClamXav also as a backup, windows has made me aware that nothing is absolutely secure, so even though right now most malware is you being dumb, I am just preparing for that scan when it just bypasses it completely.
In Mountain Lion, Gatekeeper makes perfect sense for people who would naturally just click accept on stuff like this, which I would imagine is the large majority of consumers.
This means less support calls for Apple and more importantly less support calls from family/friends if you're seen as a "computer expert".
This means less support calls for Apple and more importantly less support calls from family/friends if you're seen as a "computer expert".
Yes I use ClamXav, good product, works well updates daily, runs in background and it's free but well worth a donation.
Find ClamXav from this site http://www.clamxav.com
This is not true, Sentry can be set to scan the hard drive as you work.
See this text from the ClamXav site.
Clean, simple-to-use interface
Clearly lists infected files
Free virus definitions (usually updated daily)
Save your favourite scan locations for easy access
Customise the toolbar - or hide it entirely
Send selected files to quarantine or trash with one click
Specify files to exclude using plain text* or by using drag & drop from the Finder
Specify schedules to update virus definitions and perform scans
Use ClamXav Sentry to monitor your hard drive and scan new files as they arrive
Use the bundled ClamAV engine or bring your own installation
Compatible with Mac OS X 10.5, 10.6 and 10.7 Lion
You are making the assumption that most users will have Sentry installed. I do not believe it is installed on the App Store version.