iServices.B2 Trojan causing low battery life and higher temps

Discussion in 'MacBook Pro' started by MacModMachine, Mar 13, 2010.

  1. MacModMachine macrumors 68020

    MacModMachine

    Joined:
    Apr 3, 2009
    Location:
    Canada
    #1
    hi guys....

    i noticed my battery life and temps a higher then normal....decided to purchase and scan with virus barrier X6 and up came a iservices.b2 trojan...i removed it and now i notice my temps 10c lower and battery life about 1 hour more.

    this trojan was sitting resident on my mac for a little while now without my knowledge....i have no idea how it got there.

    intego says it is mostly bundled with pirated software, but i have nothing pirated, everything i purchased.

    now im trying to find where this came from.

    if you have high temps and a low battery life unexpectantly....scan your machine.
     
  2. thebeautyisfake macrumors regular

    Joined:
    Mar 4, 2010
    #2
    Was this on OSX?
    If so, this may well be the greatest thread of all time.
     
  3. ceasetoexist macrumors member

    Joined:
    Nov 1, 2007
    #3
    iServices.B2 query in safari gogle search form opens itunes and tries to access itunes store...how peculiar...
     
  4. Webb macrumors regular

    Webb

    Joined:
    Aug 21, 2007
  5. jawa12083 macrumors member

    Joined:
    Feb 9, 2010
    #5
    Wirelessly posted (iPod Touch 2G 8GB: Mozilla/5.0 (iPod; U; CPU iPhone OS 3_1_2 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7D11 Safari/528.16)

    OP - please answer the guy above me.... We're all in shock
     
  6. MacModMachine thread starter macrumors 68020

    MacModMachine

    Joined:
    Apr 3, 2009
    Location:
    Canada
    #6
    its only on OSX 10.5 , 10.6

    it can infect any machine and it spreads by creating new files and renaming its older ones.

    there are several variations that i think spread with websites now.

    iservices.A
    iservices.B
    iservices.B2 are ones i have found so far.

    :S

    all 3 of my macs had the B2 trojan :S

    google iservices.b

    read all the problems and solutions

    http://mac.blorge.com/2009/01/27/how-to-remove-osxtrojaniservicesa-iservicesb/

    keep in mind....i installed i work from my iwork 09 disc.
     

    Attached Files:

  7. zipa macrumors 65816

    Joined:
    Feb 19, 2010
    #7
    How so?
     
  8. r.j.s Moderator emeritus

    r.j.s

    Joined:
    Mar 7, 2007
    Location:
    Texas
    #8
    IIRC, iServices is an actual trojan you can get by downloading a torrented version of iWork or CS4.

    There are removal tools out there.
     
  9. MacModMachine thread starter macrumors 68020

    MacModMachine

    Joined:
    Apr 3, 2009
    Location:
    Canada
    #9
    right, but that is iservices.b , i have i services.b2 and i have already stated i did not download iwork its purchased on a disc.
     
  10. gfiz macrumors 6502

    gfiz

    Joined:
    Dec 18, 2009
    Location:
    Virginia
    #10
    know you said you're on the up and up...but do you ever download any torrents period?
     
  11. MacModMachine thread starter macrumors 68020

    MacModMachine

    Joined:
    Apr 3, 2009
    Location:
    Canada
    #11
    nope...everything i own is purchased.

    although i do remember giving a website permission to install somthing ....thats got to be where it came from, it was a website for unlocking phones.
     
  12. Pentad macrumors 6502a

    Pentad

    Joined:
    Nov 26, 2003
    Location:
    Indiana
    #12
    Hmm....

    I searched for more information about this via Google and other anti-virus/anti-malware sites but I could not find anything.

    Until I see more evidence I remain skeptical...
     
  13. r.j.s Moderator emeritus

    r.j.s

    Joined:
    Mar 7, 2007
    Location:
    Texas
    #13
    Skeptical of what? There are Mac trojans ...
     
  14. IBradMac macrumors 68000

    IBradMac

    Joined:
    Jun 27, 2008
    Location:
    Ohio
    #14
    Probably so. Did you recently visit a porn site and let it install a codec to watch the video?
     
  15. thebeautyisfake macrumors regular

    Joined:
    Mar 4, 2010
    #15
    Don't be so silly, haven't you seen the adverts? Macs are perfect in every way!
     
  16. Hmac macrumors 68020

    Joined:
    May 30, 2007
    Location:
    Midwest USA
    #16
    Some pirated copies of iWork 09 and/or CS4 will install this trojan. Either via torrent download or pirated disk copy.
     
  17. Goettel macrumors member

    Joined:
    Oct 1, 2008
    #17
    Someone was tricked into entering their admin password :p . In one sense, this is a good thing, it means our macs are secure enough that malware writers have started exploiting flaws in the users, not the system. No offence to the OP, it can happen to anybody so be careful about what you are installing when you need to use your admin password because entering your password for some disguised malware is like opening your front door to robbers and inviting them in.
     
  18. MacModMachine thread starter macrumors 68020

    MacModMachine

    Joined:
    Apr 3, 2009
    Location:
    Canada
    #18
    oh, there was no doubt i put in the password, but im doing alot of stuff on my machine all the time....many of my programs ask for admin access...im so used to typing it in...

    guess ill have to be more careful....
     
  19. Pentad macrumors 6502a

    Pentad

    Joined:
    Nov 26, 2003
    Location:
    Indiana
    #19

    I find it hard to believe that this variant of a trojan is not listed anywhere else but here on MR. :rolleyes:

    I understand that OS X is vulnerable to such issues and that some do exist, however, I searched Google as well as other Anti-Virus vendors and nobody is listing this trojan.


    Until I see some evidence from a more reputable source I continue to remain skeptical....
     
  20. gfiz macrumors 6502

    gfiz

    Joined:
    Dec 18, 2009
    Location:
    Virginia
    #20
    is there a bigger Apple/Mac forum that you're aware of where something like this could/would be discussed instead? It's gotta start somewhere...
     
  21. Pentad macrumors 6502a

    Pentad

    Joined:
    Nov 26, 2003
    Location:
    Indiana
    #21
    I could reference a number of sites and we could debate their qualifications but in the end I think information like this starts at a much higher level and then trickles down to places like this.
     
  22. gfiz macrumors 6502

    gfiz

    Joined:
    Dec 18, 2009
    Location:
    Virginia
    #22
    I don't mean subjectively...honestly, is there a more active forum that MR? I visit MacNN and AI and there's hardly any activity. Am I missing out on some other helpful forum?
     
  23. MacModMachine thread starter macrumors 68020

    MacModMachine

    Joined:
    Apr 3, 2009
    Location:
    Canada
    #23

    really....i guess you do not know how to use a search engine then....or is it somthing else?

    i found many sites listing it....

    http://www.intego.com/news/ism0902.asp

    http://www.symantec.com/security_response/writeup.jsp?docid=2009-012620-2836-99

    http://www.sophos.com/security/analyses/viruses-and-spyware/osxiworksb.html

    there are a few for you to chew on
     
  24. Pentad macrumors 6502a

    Pentad

    Joined:
    Nov 26, 2003
    Location:
    Indiana
    #24
    MacModMachine:

    Let me try to explain why you should be embarrassed by your last post:


    1. You see, you started a thread claiming you have a new variant of the trojan iServices.B called iServices.B2

    Your words:

    "…decided to purchase and scan with virus barrier X6 and up came a iservices.b2 trojan…"

    "right, but that is iservices.b , i have i services.b2…"


    2. After a great deal of searching on Google and appropriate vendor sites, nobody else has any information on this variant. I post that I am skeptical of your claims.


    3. Some people confuse my skepticism with 'fanboyism' and I clarify that I do not believe that OS X is invincible, but that this claim of iServices.B2 seems odd since it only appears as a post here on MR and is localized to your computer.

    To be honest (and no offense to MR), there are more technical Mac sites (some public, some darknets) and many anti-malware sites that would have this kind of information first. I'm not saying its impossible but what are the odds? Really?


    4. Finally, you post that I do not have the ability to use a search engine and reference sites that only help *my* argument of being skeptical.

    See, the sites you referenced have no mention of iServices.B2 on them. None. Zero. Zip. Please review...

    If you wanted to help *your* argument you would have posted sites that reference or some how give evidence to a new trojan called iServices.B2 that is laying siege to your computer.

    This is called empirical evidence and its used to help promote your argument.

    As a university professor, we have a saying: "The bigger the claim the larger the empirical data."



    If any of the above makes sense then you will understand my skepticism from the beginning and your last post only deepens my skepticism more.


    -P
     
  25. MacModMachine thread starter macrumors 68020

    MacModMachine

    Joined:
    Apr 3, 2009
    Location:
    Canada
    #25
    iservices.b2 is a VARIATION of iservices.b

    i guess i made up the screenshot too.



    ok....professor....back to sleep or the dream will end.
     

Share This Page