Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

chibianh

macrumors 6502a
Original poster
Nov 6, 2001
783
1
Colorado
Saw this at Macintouch.. hope it's not a repost

There's now a real virus out there for Mac OS X that can do some real damage. It doesn't seem to be too destructive although it does delete some unix commands and modifies prefs for a couple of others. It will gather all password info on your machine. For now, lets call it "Opener."
* My system was a responding a bit slowly and a check of my /var/log files showed that they were _all_ empty and had the same mod date. The Activity Monitor showed a process called "john" eating almost an entire processor.
* Some further looking showed an unknown startupitem in /Library/StartupItems/ called "opener". The executable file is a well-commented bash program. It scans for passwords for every user, processes the hashed info using your own Mac, turns on file sharing, and puts all this stuff into an invisible folder called .info on each users Public folder.
* It does much, much more but it's important that a warning get out quickly.

http://www.macintouch.com/index.shtml#i.2004.10.21.opener
 
We're talking about possible malware, not a virus as yet. Viruses propagate from machine to machine. Malware is more like downloading an app from the internet and it isn't what it claims to be.

Still need to be careful downloading apps from the net.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.