600,000 Macs Worldwide Reportedly Infected by Flashback Trojan

[Renzatic]

It's not even a virus. People are making such a big deal out of something that affects so few people and something that has even been addressed now by both Apple and 3rd party resources.

Most malware currently floating around in Windows world has long since been addressed by MS through an update, and doesn't even affect most people. Much the same as our situation here. Yet, despite that, you see quite a few hardcore Mac people calling Windows virus ridden garbage.

It's a "If it affects the other guy and his stuff, I'll play it up and overexaggerate like a flat out mofo. If it affects me, well...IT'S NOT EVEN A VIRUS! NONE OF MY COMPUTERS HAVE IT", your stuff sucks, mine is awesome type situation.

Basically, it's all tribal BS over not much in particular. I'll say that the situation is worse than most of the not-even-a-virus-people are making it out to be, but ultimately isn't all that bad. Really, the worst thing about it are all these bruised egos and the halfassed excuses that have arisen from it that we're seeing around here.

 

[nec207]

Most malware currently floating around in Windows world has long since been addressed by MS through an update, and doesn't even affect most people. Much the same as our situation here. Yet, despite that, you see quite a few hardcore Mac people calling Windows virus ridden garbage.

It's a "If it affects the other guy and his stuff, I'll play it up and overexaggerate like a flat out mofo. If it affects me, well...IT'S NOT EVEN A VIRUS! NONE OF MY COMPUTERS HAVE IT", your stuff sucks, mine is awesome type situation.

Basically, it's all tribal BS over not much in particular. I'll say that the situation is worse than most of the not-even-a-virus-people are making it out to be, but ultimately isn't all that bad. Really, the worst thing about it are all these bruised egos and the halfassed excuses that have arisen from it that we're seeing around here.

The only difference if you give me PC and I surf the internet with guest account and UAC turn on I can still get payload virus and trojans !! With OS X or Linux I cannot get payload virus and trojans with out password prompt

So far there has been no virus and trojans that have got around the password prompt or macrumors would be all over it.It has happen all to often with windows even with guest account and UAC turn on .

 

[Renzatic]

So far there has been no virus and trojans that have got around the password prompt or macrumors would be all over it.It has happen all to often with windows even with guest account and UAC turn on .

Uh. Isn't that exactly what this not-a-virus does? Uses a weakness in Java to bypass the elevation rights prompt?

 

[GGJstudios]

So far there has been no virus and trojans that have got around the password prompt or macrumors would be all over it.

There have been a few trojans that did not require an admin password in order to infect, including the Flashback trojan.

 

[Roc P.]

OK so I just changed my DNS setting to Open DNS and enabled my Firewall. Thing is, I still don't understand what I did regarding OpenDNS. What did I change? Do I need to know anything to troubleshoot in case I can't access certain sites or something? Confusing.

As for the firewall, do I have to do anything besides just turn it on???
Do I leave the box checked (it is checked by default) that automatically allows signed software to receive incoming connections? This is all so confusing.

I'm just worried that after making these changes I might not know how to troubleshoot properly if I am faced with any issues regarding apps or websites.

 

[GGJstudios]

OK so I just changed my DNS setting to Open DNS and enabled my Firewall. Thing is, I still don't understand what I did regarding OpenDNS. What did I change? Do I need to know anything to troubleshoot in case I can't access certain sites or something?

You won't have any problems accessing sites while using OpenDNS servers. They are widely respected and trustworthy.

As for the firewall, do I have to do anything besides just turn it on??? Do I leave the box checked (it is checked by default) that automatically allows signed software to receive incoming connections?

That's fine. If you want, you can restrict selected apps from receiving incoming connections, using the box above.

I'm just worried that after making these changes I might not know how to troubleshoot properly if I am faced with any issues regarding apps or websites.

You shouldn't have any problems. If an app fails to connect to the internet, you can check to see if it's on the blocked list on the firewall and unblock it, as needed. That shouldn't happen often, if at all.

 

[Roc P.]

You won't have any problems accessing sites while using OpenDNS servers. They are widely respected and trustworthy.

That's fine. If you want, you can restrict selected apps from receiving incoming connections, using the box above.

You shouldn't have any problems. If an app fails to connect to the internet, you can check to see if it's on the blocked list on the firewall and unblock it, as needed. That shouldn't happen often, if at all.

Thanks GGJStudios for your quick and informative answers to my questions! I am really grateful! Is the block list for my firewall that box that is above the checkbox that automatically allows signed software to receive incoming connections?

 

[GGJstudios]

Thanks GGJStudios for your quick and informative answers to my questions! I am really grateful! Is the block list for my firewall that box that is above the checkbox that automatically allows signed software to receive incoming connections?

Yes, this box:

​

 

[Roc P.]

Yes, this box:

View attachment 335550​

OK cool! Right now that box is blank on all my Mac's but now I know that if I have any issues with apps not working properly I will just add them to that box. I don't even really use too many apps anyway so I should be ok. Thanks again man.

 

[Since '84]

I just updated Java through Software Update and it advised me I had Flashback and it was removed. Odd though because I ran the terminal check and it was clear. Also saw some comments saying if you had Skype or MS Office installed it would not affect you(?!) which I do. Only really skimmed the info.
I recall getting an unusual request to provide my system password at a strange time a couple of weeks ago but of course i cancelled and closed everything down. Hmm. How compromised would my data have been and what kind of data did it compromise?
-Not a newbie, but not my area of expertise/interest.
Thnx