Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacUser09

macrumors 6502
Original poster
Sep 26, 2009
288
54
UK

GGJstudios

macrumors Westmere
May 16, 2008
44,545
943
Came across this article from July 2012 by accident today:

http://www.zdnet.com/new-mac-malware-spies-on-you-via-adium-firefox-safari-skype-7000001665/

Out of interest, I looked to see if I had one of the two files mentioned on my Mac., and lo and behold, I do: The /System /Library /Framework /Foundation. framework.XPCServices one.

I am running ML 10.8.3, and have Java disabled, so I don't think it will effect me, but should I delete this file?
Yes, delete it.

If you haven't already, read the What security steps should I take? section of the Mac Virus/Malware FAQ for tips on practicing safe computing.
 

A.logs

macrumors newbie
Dec 21, 2014
1
0
Title

Uhm I think I got what he had...

Can I just delete the foundation.framework file and everything in it?

Thanks
 

AlecZ

macrumors 65816
Sep 11, 2014
1,173
123
Berkeley, CA
I have the /System/Library/Frameworks/Foundation.framework/XPCServices/ directory, but I really have no idea how. I haven't run anything in Java on this Mac besides Minecraft, and it's a fairly recent installation of Mavericks. I'm suspecting that this isn't actually malware. The article's from 2012, and it says Mountain Lion isn't vulnerable.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.