Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

iServices.B2 Trojan causing low battery life and higher temps

MacModMachine

MacModMachine

macrumors 68020
Original poster
Apr 3, 2009
2,476
393
Canada
hi guys....

i noticed my battery life and temps a higher then normal....decided to purchase and scan with virus barrier X6 and up came a iservices.b2 trojan...i removed it and now i notice my temps 10c lower and battery life about 1 hour more.

this trojan was sitting resident on my mac for a little while now without my knowledge....i have no idea how it got there.

intego says it is mostly bundled with pirated software, but i have nothing pirated, everything i purchased.

now im trying to find where this came from.

if you have high temps and a low battery life unexpectantly....scan your machine.
 
iServices.B2 query in safari gogle search form opens itunes and tries to access itunes store...how peculiar...
 
Wirelessly posted (iPod Touch 2G 8GB: Mozilla/5.0 (iPod; U; CPU iPhone OS 3_1_2 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7D11 Safari/528.16)

OP - please answer the guy above me.... We're all in shock
 
thebeautyisfake said:
Was this on OSX?
If so, this may well be the greatest thread of all time.
Click to expand...

its only on OSX 10.5 , 10.6

it can infect any machine and it spreads by creating new files and renaming its older ones.

there are several variations that i think spread with websites now.

iservices.A
iservices.B
iservices.B2 are ones i have found so far.

:S

all 3 of my macs had the B2 trojan :S

google iservices.b

read all the problems and solutions

http://mac.blorge.com/2009/01/27/how-to-remove-osxtrojaniservicesa-iservicesb/

keep in mind....i installed i work from my iwork 09 disc.
 

Attachments

  • Screen shot 2010-03-13 at 11.59.56 AM.png
    Screen shot 2010-03-13 at 11.59.56 AM.png
    68.9 KB · Views: 165
IIRC, iServices is an actual trojan you can get by downloading a torrented version of iWork or CS4.

There are removal tools out there.
 
r.j.s said:
IIRC, iServices is an actual trojan you can get by downloading a torrented version of iWork.
Click to expand...

right, but that is iservices.b , i have i services.b2 and i have already stated i did not download iwork its purchased on a disc.
 
gfiz said:
know you said you're on the up and up...but do you ever download any torrents period?
Click to expand...

nope...everything i own is purchased.

although i do remember giving a website permission to install somthing ....thats got to be where it came from, it was a website for unlocking phones.
 
Hmm....

I searched for more information about this via Google and other anti-virus/anti-malware sites but I could not find anything.

Until I see more evidence I remain skeptical...
 
MacModMachine said:
nope...everything i own is purchased.

although i do remember giving a website permission to install somthing ....thats got to be where it came from, it was a website for unlocking phones.
Click to expand...

Probably so. Did you recently visit a porn site and let it install a codec to watch the video?
 
Some pirated copies of iWork 09 and/or CS4 will install this trojan. Either via torrent download or pirated disk copy.
 
Someone was tricked into entering their admin password :p . In one sense, this is a good thing, it means our macs are secure enough that malware writers have started exploiting flaws in the users, not the system. No offence to the OP, it can happen to anybody so be careful about what you are installing when you need to use your admin password because entering your password for some disguised malware is like opening your front door to robbers and inviting them in.
 
Goettel said:
Someone was tricked into entering their admin password :p . In one sense, this is a good thing, it means our macs are secure enough that malware writers have started exploiting flaws in the users, not the system. No offence to the OP, it can happen to anybody so be careful about what you are installing when you need to use your admin password because entering your password for some disguised malware is like opening your front door to robbers and inviting them in.
Click to expand...

oh, there was no doubt i put in the password, but im doing alot of stuff on my machine all the time....many of my programs ask for admin access...im so used to typing it in...

guess ill have to be more careful....
 
Skeptical of what?
Click to expand...


I find it hard to believe that this variant of a trojan is not listed anywhere else but here on MR. :rolleyes:

I understand that OS X is vulnerable to such issues and that some do exist, however, I searched Google as well as other Anti-Virus vendors and nobody is listing this trojan.


Until I see some evidence from a more reputable source I continue to remain skeptical....
 
Pentad said:
I find it hard to believe that this variant of a trojan is not listed anywhere else but here on MR. :rolleyes:

I understand that OS X is vulnerable to such issues and that some do exist, however, I searched Google as well as other Anti-Virus vendors and nobody is listing this trojan.


Until I see some evidence from a more reputable source I continue to remain skeptical....
Click to expand...

is there a bigger Apple/Mac forum that you're aware of where something like this could/would be discussed instead? It's gotta start somewhere...
 
is there a bigger Apple/Mac forum that you're aware of
Click to expand...

I could reference a number of sites and we could debate their qualifications but in the end I think information like this starts at a much higher level and then trickles down to places like this.
 
Pentad said:
I could reference a number of sites and we could debate their qualifications but in the end I think information like this starts at a much higher level and then trickles down to places like this.
Click to expand...

I don't mean subjectively...honestly, is there a more active forum that MR? I visit MacNN and AI and there's hardly any activity. Am I missing out on some other helpful forum?
 
Pentad said:
I find it hard to believe that this variant of a trojan is not listed anywhere else but here on MR. :rolleyes:

I understand that OS X is vulnerable to such issues and that some do exist, however, I searched Google as well as other Anti-Virus vendors and nobody is listing this trojan.


Until I see some evidence from a more reputable source I continue to remain skeptical....
Click to expand...


really....i guess you do not know how to use a search engine then....or is it somthing else?

i found many sites listing it....

http://www.intego.com/news/ism0902.asp

http://www.symantec.com/security_response/writeup.jsp?docid=2009-012620-2836-99

http://www.sophos.com/security/analyses/viruses-and-spyware/osxiworksb.html

there are a few for you to chew on
 
MacModMachine:

Let me try to explain why you should be embarrassed by your last post:


1. You see, you started a thread claiming you have a new variant of the trojan iServices.B called iServices.B2

Your words:

"…decided to purchase and scan with virus barrier X6 and up came a iservices.b2 trojan…"

"right, but that is iservices.b , i have i services.b2…"


2. After a great deal of searching on Google and appropriate vendor sites, nobody else has any information on this variant. I post that I am skeptical of your claims.


3. Some people confuse my skepticism with 'fanboyism' and I clarify that I do not believe that OS X is invincible, but that this claim of iServices.B2 seems odd since it only appears as a post here on MR and is localized to your computer.

To be honest (and no offense to MR), there are more technical Mac sites (some public, some darknets) and many anti-malware sites that would have this kind of information first. I'm not saying its impossible but what are the odds? Really?


4. Finally, you post that I do not have the ability to use a search engine and reference sites that only help *my* argument of being skeptical.

See, the sites you referenced have no mention of iServices.B2 on them. None. Zero. Zip. Please review...

If you wanted to help *your* argument you would have posted sites that reference or some how give evidence to a new trojan called iServices.B2 that is laying siege to your computer.

This is called empirical evidence and its used to help promote your argument.

As a university professor, we have a saying: "The bigger the claim the larger the empirical data."



If any of the above makes sense then you will understand my skepticism from the beginning and your last post only deepens my skepticism more.


-P
 
Pentad said:
MacModMachine:

Let me try to explain why you should be embarrassed by your last post:


1. You see, you started a thread claiming you have a new variant of the trojan iServices.B called iServices.B2

Your words:

"…decided to purchase and scan with virus barrier X6 and up came a iservices.b2 trojan…"

"right, but that is iservices.b , i have i services.b2…"


2. After a great deal of searching on Google and appropriate vendor sites, nobody else has any information on this variant. I post that I am skeptical of your claims.


3. Some people confuse my skepticism with 'fanboyism' and I clarify that I do not believe that OS X is invincible, but that this claim of iServices.B2 seems odd since it only appears as a post here on MR and is localized to your computer.

To be honest (and no offense to MR), there are more technical Mac sites (some public, some darknets) and many anti-malware sites that would have this kind of information first. I'm not saying its impossible but what are the odds? Really?


4. Finally, you post that I do not have the ability to use a search engine and reference sites that only help *my* argument of being skeptical.

See, the sites you referenced have no mention of iServices.B2 on them. None. Zero. Zip. Please review...

If you wanted to help *your* argument you would have posted sites that reference or some how give evidence to a new trojan called iServices.B2 that is laying siege to your computer.

This is called empirical evidence and its used to help promote your argument.

As a university professor, we have a saying: "The bigger the claim the larger the empirical data."



If any of the above makes sense then you will understand my skepticism from the beginning and your last post only deepens my skepticism more.


-P
Click to expand...
iservices.b2 is a VARIATION of iservices.b

i guess i made up the screenshot too.



ok....professor....back to sleep or the dream will end.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back