Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

marchcapital

macrumors regular
Original poster
Feb 22, 2006
207
0
Canada
When scanning for viruses using anti-virus software(Clam xAV) what are the best files to scan, where do viruses hide on macs?
 

Chundles

macrumors G5
Jul 4, 2005
12,037
493
marchcapital said:
When scanning for viruses using anti-virus software(Clam xAV) what are the best files to scan, where do viruses hide on macs?

What's a virus?
 

Chundles

macrumors G5
Jul 4, 2005
12,037
493
marchcapital said:
ya i know but if you use lime wire do download music and videos for your ipod your sure to catch something...!!!

There are four known instances of malware for Mac OSX, all of them have been stopped by Security updates.
 

Chundles

macrumors G5
Jul 4, 2005
12,037
493
marchcapital said:
o good!:) i guess winblows has currupted me...

Yeah, it does that to people.

So far:

1. First instance was an "mp3" file that was actually a program that played the sound of someone laughing and a dialogue box appeared on screen warning you about something. It actually ran on OS9 code and was a "proof of concept" trojan horse. Totally weak...

2. Leap-A - proper trojan horse but you had to a) download it, b) run it and c) allow a "jpg" file to open Terminal - not something you would normally do.

3. Intanqa - a bit of malware (java based worm) that relied on a bluetooth vulnerability that had been patched almost a year before it appeared.

4. Zaptastic - a web site could automatically install and run a widget in 10.4, it was patched up in 10.4.1 or .2

There was something going around that showed Safari could be vulnerable to opening a file if it was "trusted" but that was patched and nothing bad came of it.

Honestly, we have a pretty hand combination of built-in security and a very low to zero number of virus writers so there's not really a need to scan.

Microsoft Office is vulnerable to regular macro viruses though but I'm yet to come across one.
 

marchcapital

macrumors regular
Original poster
Feb 22, 2006
207
0
Canada
Chundles said:
Yeah, it does that to people.

So far:

1. First instance was an "mp3" file that was actually a program that played the sound of someone laughing and a dialogue box appeared on screen warning you about something. It actually ran on OS9 code and was a "proof of concept" trojan horse. Totally weak...

2. Leap-A - proper trojan horse but you had to a) download it, b) run it and c) allow a "jpg" file to open Terminal - not something you would normally do.

3. Intanqa - a bit of malware (java based worm) that relied on a bluetooth vulnerability that had been patched almost a year before it appeared.

4. Zaptastic - a web site could automatically install and run a widget in 10.4, it was patched up in 10.4.1 or .2

There was something going around that showed Safari could be vulnerable to opening a file if it was "trusted" but that was patched and nothing bad came of it.

Honestly, we have a pretty hand combination of built-in security and a very low to zero number of virus writers so there's not really a need to scan.

Microsoft Office is vulnerable to regular macro viruses though but I'm yet to come across one.

so theres really nothing that signifficantly slows down your computer...
 

encro

macrumors 6502
May 6, 2002
451
1
bendigo.victoria.au
Even though there isn't any known virus issues on OS X, it's still worth using a Virus Checker to prevent passing something on to a friend using a PC.

ClamX AV is great for this because it essentially costs nothing to run a quick scan on your download directory; as I've never used Limewire to access the gnutella network so you will need to check the preference settings to find out where it stores downloaded music, video's and app etc.
 

steamboat26

macrumors 65816
May 25, 2006
1,123
0
Arlington VA
I think my imac had that first one you were talking about. I remember booting into OS 9 on my imac G3, after the system folder had become unstable/corrupt, and a warning box would appear, and speak the text in a laughing voice. Bummer, i must be one of like 5 people that have ever gotten malware on a mac. But at least i am part of an elite minority. I did the impossible by getting malware on a mac. :D
 

MisterMe

macrumors G4
Jul 17, 2002
10,709
69
USA
marchcapital said:
so theres really nothing that signifficantly slows down your computer...
FWIW, the purpose of a virus is not generally to slow down a computer in some nimrod's bedroom. Viruses and other malware are intended to secretly co-op computers in an effort to raise revenue through mass mailings of SPAM or by some other nasty business. The stealthier the malware, the more effective it is at generating revenue for its author.
 

howesey

macrumors 6502a
Dec 3, 2005
535
0
Chundles said:
Microsoft Office is vulnerable to regular macro viruses though but I'm yet to come across one.
Not so much so on a Mac.

Visual Basic on Windows allows access to the whole system. Same with ActiveX in Internet Explorer. This is the main flaw with Windows. A virus can be installed and executed without user intervention also. OS X doesn't use Visual Basic, it will not go outside of the app, and also it uses BSD with UNIX like permissions layer that is right down to kernal level, therefore more secure.


As for Vista, speaking to a Microsoft Developer at uni, the new 'input password' for doing tasks has already been bypassed. Meaning, Vista will still have the viruses and spyware of current Windows versions. Microsoft have put these new security features quite high, whereas Apple in OS X have put them into the grass roots of the OS low down like UNIX. Most of the new code for Vista has just been bolted on. People are saying it has just had a 70% (something like that) re-write of the code, this is only on the multimedia and windowing system.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.