Mac virus alert

[Rob_H]

I've just stupidly clicked on a link in an email form a friend. It came up when a page opened that it was to do with a Canadian Health care company. It then dawned on me that it was a virus - I checked the email and it was copied to everyone beginning with C in her address book. At this point a small bug or insect started running around the desktop (inside the screen) and my Time machine back up started unexpectedly. The computer then said that my startup folder did not have enough space in it - I had checked the space on the hard drive and and there was only 315mb left - yesterday there was 26GB! Googling it brings up similar problems with this company or name emailing everyone in someone's contact list. The person who sent me the email says she hasn't used that particular address for over a year. I didn't have AV software running as viruses are so rare on the Mac but Mrs H is now in PC world buying one. Just a word of warning as I broke my own golden rule about not clicking links in unexpected emails.

 

[RogerS]

Rob. I don't think that it is a virus as I can't find anything on the net about any email virus for the Mac. Before you take off the shrink-wrap I suggest you run ClamXAV which is free. That will tell you if you have anything wrong with your mac.

Don't forget that Time Machine backups can occur at any time.

 

[Rob_H]

Roger, I still have a small bug running around the screen which came when I clicked on the link so something is running on the Mac. I tried Clam and it found Backdoor.OSX.iWorm and Win32.Henky.5668 - scarily Kaspersky has found Trojan-downloader.wma.getcodec and the others so far and only on 1% of files searched.....

 

[RogerS]

Most obvious question...are you running Windows on your Mac?

 

[ByronBlack]

You shouldn't be having any Win32 files running on the mac, that is quite odd.

Also becareful of the virus software you install, my dad put some one his machine and it killed it, we had to completely reinstall OS X to get it back to normal again.

The best thing you can do is run the apple software updater regularly.

 

[Rob_H]

Most obvious question...are you running Windows on your Mac?

I did last year using Virtual Machines, but not for about a year a more.

 

[RogerS]

I can't find any reference to this on the Internet, Rob. Googling the first 'virus' you mention gives this thread!

Just remembered something. Those viruses that ClamXAV is picking up are from emails that PC owners have sent you. ClamXAV is scanning your emails and finding them there.

Your Mac hasn't got a virus, that's for sure.

Can you go to your console and send us a dump of the log?

EDIT: You could also download the free trial of this AV. make sure clamxav is disabled.

http://www.kaspersky.co.uk/trials

 

[Racers]

Hi,

We had a Email at work warning Mac users about this virus dated 07-06-2010.

We have been alerted to new malware that is circulating on the Internet which is specifically attacking Mac computers. Malware is designed to infiltrate your computer without your informed consent and can be hostile, intrusive, or annoying.

This current version is hidden in downloads from freeware sites on the Internet, however, there could be other sites that are affected. It is known that this version is harvesting information like usernames but could potentially be picking up passwords and other information you want to keep secure.

Pete

 

[RogerS]

That's an old one, Pete. You have to go and physically download a dodgy codec and then instal that. In other words, the user has to enter the admin password. If people are dumb enough to do that then guess they get what they deserve.

So unless Rob has downloaded a dodgy codec and installed it ...wink...wink....say no more :wink: :wink: There are no current viruses for the Mac. Proof of concepts..yes..the trojan like the one in your email..yes.

 

[Rob_H]

Definitely haven't downloaded a dodgy codec. I would like to know what the animated bug running around the screen is which started when I clicked the link- very small but still there. Also can't account for the 26GB of HD space disappearing overnight.

 

[ByronBlack]

Definitely haven't downloaded a dodgy codec. I would like to know what the animated bug running around the screen is which started when I clicked the link- very small but still there. Also can't account for the 26GB of HD space disappearing overnight.

Can't you restore with a time machine backup?

 

[RogerS]

Which version of the OS are you on, Rob?

We need your console messages.

 

[Rob_H]

Which version of the OS are you on, Rob?

We need your console messages.

10.5.8

How do I get the console messages?

 

[RogerS]

Which version of the OS are you on, Rob?

We need your console messages.

10.5.8

How do I get the console messages?

pm sent

 

[RogerS]

Could your 'bug' be a thunderbug inside the screen? As in a living organism?

 

[Benchwayze]

Could your 'bug' be a thunderbug inside the screen? As in a living organism?

A possibility, especially as I heard Macs were immune to viruses.

Is that true btw?

John

 

[RogerS]

In a purist sense, no. No computer can be said to be immune from viruses. And since the mac started ..what 15 years ago? ..there have been a tiny tiny number ..10?

There are companies that pore over the Mac OS and highlight weaknesses. There have been some 'proof of concept' viruses. But in the real world? If you are running the latest version of whichever flavour of Mac OS you're on, no.

There are trojans out there. Which you might pick up by deciding to install that codec so you can watch a bit of free porn. But that requires a direct action by you ..the administrator ..to enter your admin password. So if you are that dumb then frankly you deserve all you get. Or you might pick one up because you downloaded an illegal copy of iWorks or something rather than pay for legitimate software. Again..tough.

 

[Benchwayze]

Roger!!!! :shock: :shock:
I you suggesting I download free porn? :shock: :shock: :shock:

I'll have you know I pay for mine, just like any other honest to goodness citizen!
:lol: :lol: :lol:

John

 

[Eric The Viking]

Roger!!!! :shock: :shock:
I you suggesting I download free porn? :shock: :shock: :shock:

I'll have you know I pay for mine, just like any other honest to goodness citizen!
:lol: :lol: :lol:

John

A wise Hobbit sets up his Mac, so that the user account he generally uses for Internet access does NOT have administration privileges.

If you haven't done so, go to System Preferences, Accounts, create a new user ("BW1" say) and in Security tab, un-check "Allow user to admonish* this computer." If you then login as that new user, you should be able to browse, but because of the Mac/UNIX security model, no process you start, even unaware, can do dangerous things to your machine (as that needs administrator ('root') equivalence, which that account doesn't have).

If it's a nuisance, you can set up fast account switching, but that does slightly compromise the security - it's safer to login as the restricted user ("managed" in 10.4), and logout/login again as administrator when you need to.

If you really have got a virus, the above won't help, but they are very rare indeed on Macs. You can do roughly the same for a PC, but it's far messier and arguably not as secure even then.

I like Macs .


*I meant 'Administer'. It started as a typo, but I realised it's what I do all the time, when I'm sitting at a PC (like now).

 

[Benchwayze]

Hang on folks...

Let me clear this up. Please?

This isn't my original thread. I just commented on it.

I don't have a MAC. (Not even a dirty one! :wink: )

I don't have to ask anyone before I do anything on my PC. (Well... no one except maybe Bill Gates?)

I don't have a virus on my PC, but I have had them. I have to run AV software, which slows my PC right down on boot up. Which annoys me, as it requires me to switch on, and then go do something else; like making far too much coffee whlist I wait.

I had heard that Macs don't suffer from virus attack, and that is the main reason I commented. I asked the question about viruses, because for some time now, I have been considering a Mac.

And my flippant response to Roger was just that; flippant and tongue in cheek! (Well I hope it came over that way...

Gordon Bennet!

John :wink: