Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Wow, this reminds me of Jurassic Park. The velociraptors systematically went around testing the perimeter fence, one piece at a time.

"Clever girl." lol.
 
That's not what's happening.
At work, for the past two days, several times a day when I open Safari and go to a site like the drudge report, the screen gets taken over by the malware attack and fake scan and it won't allow you to click cancel or navigate elsewhere.
You can only accept the download or shut down Safari and try again.
I found 18 downloads of the malware file in my downloads folder and I never accepted any download. Naturally, I deleted them all, but if the open downloads button had been ticked in Safari, it would have been a disaster.
This is a strong attack that could easily hurt some less computer-capable people.

Malware on the Drudge report. Another reason to ignore that site.
 
Well hopefully the cat and mouse game leads to clues to finding who actually is behind the malware.

We need a survey asking people who actually run this thing if they:
A. Have always been Mac OS users.
B. Have converted from Windows OS.

My guess would be 'A' ... windows users were trained over many many years to expect this **** to happen, Mac users feel safe. (I feel safe too, but I use common sense and lived in the Windows world for too long)
 
im confused...is the image shown what the new mac defender virus window looks like (that then installs when you click it), or are they just showing the legit removal window to really remove it.
 
We had an intern somehow get this on a Mac at work... thankfully the uninstallation process was relatively painless and took about a minute.

Every time I get them on a PC I feel like it's an all day chore. Sometimes system restore doesn't even fix it.
 
you obviously don't know much about system design. a central registry is a single point of failure. distributed config files (whether .plist, .ini, or what have you) is much more fault-tolerant. plus, if you were trying to maintain a system, having to open up regedit/do key manipulation is much more annoying and error-prone versus copying over configs or swapping in and out various files

EDIT: also, "searching" domains like HKEY_CURRENT_USER etc is a joke. using distributed configuration files plugs into a much wider array of search tools than having to rely on a registry-editing-specific one. ie for example in OS X i can use spotlight, google desktop, grep, slocate, etc to quickly find what config files i need.

EDIT2: i just noticed that you refer to it as a "registry of files". uh, if that's what you think it is, you may be beyond help...
This is no longer talking about security though, but stability. The whole registry discussion is off-topic here...
 
We had an intern somehow get this on a Mac at work... thankfully the uninstallation process was relatively painless and took about a minute.

Every time I get them on a PC I feel like it's an all day chore. Sometimes system restore doesn't even fix it.

You should be disabling System Restore. Malware can live in there and reinfect the system.
 
Troll?

:(

I use Windows 7 for some of my work. My main machines are OS X and SunOS.

What I am trying to say that MS has showed a lot of effort on the security side which Apple has not, yet.

If you think I'm wrong, fine. But I don't see how I am biased towards Microsoft in this regard.

Sorry my apologies, I did come off a bit harsh. Windows has a huge problem with security and Microsoft knows it, but really doesn't do much about it. Sure they have the security essentials and updates but these are of little use when there are serious problems with the underlying OS. Its like trying to plug a whole in a ship that has the bottom missing. What they need to do is give Windows a re-write and drop some of the extreme legacy code. They don't want to do this for obvious reasons that businesses may have legacy systems, but in all honesty it needs to be done.

This is one of the reasons, note the fact Microsoft never replied to this guy for months:

http://www.zdnet.com/blog/security/microsoft-confirms-17-year-old-windows-vulnerability/5307

Stating Microsoft take security seriously is a troll attempt? And what do you have against the registry, I'd prefer an easily searchable central registry of files rather than a million .ini files scattered the length and breadth of my hard drive.

I shouldn't have said it was a troll attempt, my bad but the registry does need to go. The average user doesn't need it and the fact that programs can go an access each others keys is a big problem. Malware almost always manifests itself in the registry and goes and messes with other programs registry settings. Unfortunately these programs don't rewrite their registry settings so whatever has been changed by malware stays changed until removal (which usually results in reinstalling the affected software) or having to go through tons of registry keys and change values manually.
 
My guess would be 'A' ... windows users were trained over many many years to expect this **** to happen, Mac users feel safe. (I feel safe too, but I use common sense and lived in the Windows world for too long)

The training wasn't good though. The problem goes on and on. Most of the problem is due to people going all over the internet looking for pirated software and media. Microsoft has said that some malware problems are in fact due to pirated copies of their OS.
 
. Naturally, I deleted them all, but if the open downloads button had been ticked in Safari, it would have been a disaster.
This is a strong attack that could easily hurt some less computer-capable people.

No it wouldn't have been a disaster. It would have been a disaster if you clicked through the installer to install it and than enter your credit card information.
 
I'm amazed people are still stupid enough to manually download and run this considering all the press coverage it has received.

Not at all amazing.

Joe MAC Average will click on anything, until it goes away as it interrupts what they are doing.

Not a sign of intelligence, just impatience!
 
Can this malware happen on any web browser or just safari? I mainly use chrome and Mozilla, but my gf uses safari when she comes over my house.
 
The training wasn't good though. The problem goes on and on. Most of the problem is due to people going all over the internet looking for pirated software and media. Microsoft has said that some malware problems are in fact due to pirated copies of their OS.

People looking for pirated software is another story - they play with the fire and will get burned. I was more thinking about users that don't do illegal stuff.
 
Know why no Russians were ever kidnapped in 1970's Lebanon or Syria? Well actually one was, and they were killed by terrorists. So the Russian KGB found out who was responsible, kidnapped THEM, cut of their heads and sent the heads to their families. The kidnappings stopped.
Just sayin'.
 
It auto-downloaded from a pop-up when I was on MSNBC.com about a week ago. I didn't install it of course and immediately let them know. And my mom would have totally installed it.

Sorry, I meant the people who are most likely to be hit by this, are the people who dont visit tech sites so they can be warned about it. Not visit tech sites and be hit by it.

I shouldn't have said it was a troll attempt, my bad but the registry does need to go. The average user doesn't need it and the fact that programs can go an access each others keys is a big problem. Malware almost always manifests itself in the registry and goes and messes with other programs registry settings. Unfortunately these programs don't rewrite their registry settings so whatever has been changed by malware stays changed until removal (which usually results in reinstalling the affected software) or having to go through tons of registry keys and change values manually.

Fair enough, that is the first reasoned argument I've heard against the registry, normally I get people just hating on it without backing anything up.


The training wasn't good though. The problem goes on and on. Most of the problem is due to people going all over the internet looking for pirated software and media. Microsoft has said that some malware problems are in fact due to pirated copies of their OS.

Are you going to persistently blame anyone falling for Mac Malware, on being a former Windows User? You should know that probably most Mac Users were Windows users at one point or another. Until you can back up your argument with facts, there's no sense spouting it at every opportunity.


you obviously don't know much about system design. a central registry is a single point of failure. distributed config files (whether .plist, .ini, or what have you) is much more fault-tolerant. plus, if you were trying to maintain a system, having to open up regedit/do key manipulation is much more annoying and error-prone versus copying over configs or swapping in and out various files

EDIT: also, "searching" domains like HKEY_CURRENT_USER etc is a joke. using distributed configuration files plugs into a much wider array of search tools than having to rely on a registry-editing-specific one. ie for example in OS X i can use spotlight, google desktop, grep, slocate, etc to quickly find what config files i need.

EDIT2: i just noticed that you refer to it as a "registry of files". uh, if that's what you think it is, you may be beyond help...

I didnt mean files, I had .ini files on the brain when I was writing that. As someone who hasn't been hit by Malware since 1998, for me, the benefits of a Registry outweigh the negatives.
 
Last edited:
Apple has no incentive to take this threat seriously. They will use it to leverage people into only using the App Store. It will prepare people for the merging of iOS and Mac OS.

How much more seriously do you want them to take it? Send out black vans loaded with a strike force of anti-malware commandos?
 
Because if Apple don't update the signatures for a month then the daily checking isn't going to help.

Just because it checks daily doesn't mean it actually does anything.

Super. Obviously true. Still not sure how that shows Microsoft is currently doing more to prevent MacDefender type attacks then Apple.
 
The problem is that Mac users have been lulled into a false sense of security, many apple folks have long proclaimed that Macs don't get viruses.

Now I know this is not a virus but to the average consumer, its the same thing. So they continually hear how you don't need antivirus software and you don't have worry about that stuff on the mac platform. They don't think twice about downloading something or clicking on a link. Why worry since Macs are immune.

Many of us knew this was coming and the Mac Defender malware is just the beginning.
 
Know why no Russians were ever kidnapped in 1970's Lebanon or Syria? Well actually one was, and they were killed by terrorists. So the Russian KGB found out who was responsible, kidnapped THEM, cut of their heads and sent the heads to their families. The kidnappings stopped.
Just sayin'.

Right. That was the reason. :rolleyes:
 
My mom, like most of the older generation, is not aware of stuff like this and this morning actually pointed out to me that on her mac something called mdinstaller popped up and tried to install it, I think she installed it because she didn't realize what it was. I was unsure whether or not it was the mac defender virus (now I'm aware it is though). I made her update her computer last night so she already has the new update, does this mean it will automatically remove the software for her or does she have to do something to get it to uninstall.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.