Suspicious download from website.

[MKSinSA]

Thanks, for the info

I clicked the program all the way through installation just to see what would happen. It seemed a good one to test since it was publicized by MacWorld. I did go back and lock up the security panel and have been researching the keychain.

Thanks again!

I don't pay complete attention as to when I get asked for credentials, but it's possible you recently did an admin task which temporarily unlocked your keychain and so it didn't need to ask again currently (similar to using sudo in Terminal). I think I have my keychain set to auto-lock after 5 or 10 minutes. That's just one thought.

I know I at least always get prompted for admin credentials when overwriting something in the Applications folder, but I also run as a standard user rather than admin user.

Also, just copying a application into the Application folder doesn't make it "installed" per se. If the application needs to write to any places outside your home directory it will definitely need to prompt you for your admin credentials. Most malicious software would need to place files in areas outside your home directory to do the most damage. Not that it can't do some harm when limited to your home directory.

Anyways, that's my thoughts.

 

[angelwatt]

So in your text "I don't think gaining admin privilege is a necessity for all attacks, remember 2 months back reported thousands of mac zombies infected? No admin password required" it appears that gaining admin privilege was a necessity and an admin password was required. Other than that, your message was quite correct

Except that wasn't my text. Check your quotes