Apple releases Mac OS X update to catch MAC Defender malware

13

Comments

  • Reply 41 of 76
    jmgregory1jmgregory1 Posts: 474member
    Quote:
    Originally Posted by solipsism View Post


    Remove com.apple.preference.security.plist from ~/Library/Preferences.



    It's not there to remove - any other ideas?
  • Reply 42 of 76
    nomadmacnomadmac Posts: 96member
    Quote:
    Originally Posted by jmgregory1 View Post


    It's not there to remove - any other ideas?



    Instead of the Users folder (~), try Macintosh HD/Library/Preferences
  • Reply 43 of 76
    jmgregory1jmgregory1 Posts: 474member
    Quote:
    Originally Posted by NomadMac View Post


    Instead of the Users folder (~), try Macintosh HD/Library/Preferences



    Thanks for the suggestion, but it's nowhere to be found. Tried reinstalling the update again, restarted and it still crashes - just when trying to access security settings. All other sys prefs work fine.
  • Reply 44 of 76
    nomadmacnomadmac Posts: 96member
    Quote:
    Originally Posted by jmgregory1 View Post


    Thanks for the suggestion, but it's nowhere to be found. Tried reinstalling the update again, restarted and it still crashes - just when trying to access security settings. All other sys prefs work fine.



    Hmm, there's a

    com.apple.security.plist.bak

    in mine.
  • Reply 45 of 76
    jmgregory1jmgregory1 Posts: 474member
    Quote:
    Originally Posted by NomadMac View Post


    Hmm, there's a

    com.apple.security.plist.bak

    in mine.



    The closest I have is com.apple.security.systemidentities.plist or com.apple.security.certreq.plist. Very strange why this one pref (that appears to be corrupted) is crashing the whole sys prefs.
  • Reply 46 of 76
    pbpb Posts: 4,255member
    Quote:
    Originally Posted by jbruni View Post


    The plural of virus is viruses. There is no such word as virii.



    Yes, there is; it is the Latin plural. Generally it is not accepted in English but this is sometimes a subject of debate.
  • Reply 47 of 76
    pbpb Posts: 4,255member
    Quote:
    Originally Posted by Robin Huber View Post


    I don't think we are dealing with a virus, but a piece of malware.



    It is precisely an example of well-designed and executed social engineering. Nothing new in OS X or any operating system in this world. That's all.
  • Reply 48 of 76
    pbpb Posts: 4,255member
    Quote:
    Originally Posted by Suddenly Newton View Post


    Hooray! Although I've already turned off the "automatically open safe file types" option in Safari.



    Good for you, and for me since I did so years ago. "Safe files" looked always funny to me, to put it mildly, and I have never left a Mac I had access to, or any account on it, with this on.



    But does the security update turns this option off? Or it sitll leaves it on?
  • Reply 49 of 76
    noirdesirnoirdesir Posts: 1,027member
    Quote:
    Originally Posted by Bsginc View Post


    FTR, why don't Google, Bing and other search sites quarantine sites which enable malware like this. Particularly when the sites allow themselves to be a regular transport mechanism for malware.



    They already do this, have you never come across a warning from Google saying 'This site may harm your computer, do you want to continue?'?

    Unfortunately, these warnings seem to cover only a fairly small percentage of all malicious websites.
  • Reply 50 of 76
    tallest skiltallest skil Posts: 43,388member
    Quote:
    Originally Posted by PB View Post


    Yes, there is; it is the Latin plural. Generally it is not accepted in English but this is sometimes a subject of debate.



    It is incorrect. Also, pseudo-Latin. It's a colloquialism. Even more so than 'proven', which I prefer to the hickier-sounding 'proved'.
  • Reply 51 of 76
    solipsismsolipsism Posts: 25,726member
    Quote:
    Originally Posted by PB View Post


    Yes, there is; it is the Latin plural. Generally it is not accepted in English but this is sometimes a subject of debate.



    Virus was first used in English in 1392 from the Latin virulentus. There is no virii, it's a vernacular used by technophiles in the last few decades.



    Also, while many Latin words that end in -us are oft made plural replacing the -us with an -i it doesn't mean it's always correct to do so.



    Those who say differently are just talking out their ani.
  • Reply 52 of 76
    pxtpxt Posts: 683member
    Quote:
    Originally Posted by Bsginc View Post


    Just like Windows.... Oh, wait, I mean, just like Windows could have done and should have done years ago.



    FTR, why don't Google, Bing and other search sites quarantine sites which enable malware like this. Particularly when the sites allow themselves to be a regular transport mechanism for malware. As long as search sites like Google, Bing and others don't help to stop it, more people will continue to visit these same sites over and over and over again. By helping to stop it, instead of making it easier, search sites can make distribution of malware more difficult.



    It won't solve the problem, but anything that makes it more difficult for malware or educates users to be more careful makes it better for the rest of us.



    The ultimate Mac vs PC advertising campaign could have been if Apple had bought one of the anti-virus companies. Imagine the buttons: (A) Quarantine, (B) Get a Mac.
  • Reply 53 of 76
    pxtpxt Posts: 683member
    Quote:
    Originally Posted by melgross View Post


    I have to admit that I use the Symantic suite for Mac, and I've been using their predecessors for quite some time, since System 8. While with System 7, 8, and 9, we did get a few virii a year, and some few pieces of malware, we haven't had any actual problems with OS X. But, I do get Windows junk. Since I don't want to pass that on to my Windows using friends(yes, I do have some), I use this to mainly eradicate those. But better safe than sorry. The way I have it set, it doesn't slow the machine down.



    Perhaps that could be an online service built into OSX. Right click a file and have it sent to Apple for virus checking. At least as an option in MobileMe - it's all good added value for a paid online service.
  • Reply 54 of 76
    pxtpxt Posts: 683member
    A couple of things I thing Apple should have done differently here.



    (1) The malware definitions list should be streamed into OSX from Apple as a data update not requiring an OS update.



    (2) Uninstalling apps, including stopping all its processes, should be a single button click as is its installation, and therefore should also not require an OS update. This way Apple support *would* be able to tell people how to get rid of it plus already-infected users can have a little window pop-up saying that they have downloaded some malware from the blacklist and may we click the delete button for you.



    There are no novice users; they are customers.
  • Reply 55 of 76
    nvidia2008nvidia2008 Posts: 9,262member
    Quote:
    Originally Posted by PXT View Post


    A couple of things I thing Apple should have done differently here.



    (1) The malware definitions list should be streamed into OSX from Apple as a data update not requiring an OS update.



    (2) Uninstalling apps, including stopping all its processes, should be a single button click as is its installation, and therefore should also not require an OS update. This way Apple support *would* be able to tell people how to get rid of it plus already-infected users can have a little window pop-up saying that they have downloaded some malware from the blacklist and may we click the delete button for you.



    There are no novice users; they are customers.



    Yeah I don't understand. How would one scan their computer for it if they have downloaded it? This appears to just check upon download. What if you already have it? How do you know if you have it? I don't, but switchers from Windows will be wondering about all of the above.



    Repeat, HOW DO I SCAN FOR MALWARE ON THE MAC?



    Edit: I suppose one can try http://www.bleepingcomputer.com/viru...move-mac-guard, the removal script/app that you download is considered "Safe"



    WE ARE IN A BOLD NEW WORLD OF MAC ANTIVIRUS. Welcome.



    Apple says "In the coming days, Apple will deliver a Mac OS X software update that will automatically find and remove Mac Defender malware and its known variants." http://support.apple.com/kb/HT4650



    But there is no notification upon installing the software update that it scanned anything... Like I said, new users, ie. customers as someone pointed out, will be confused.
  • Reply 56 of 76
    nvidia2008nvidia2008 Posts: 9,262member
    Quote:
    Originally Posted by solipsism View Post


    Virus was first used in English in 1392 from the Latin virulentus. There is no virii, it's a vernacular used by technophiles in the last few decades.



    Also, while many Latin words that end in -us are oft made plural replacing the -us with an -i it doesn't mean it's always correct to do so.



    Those who say differently are just talking out their ani.



    From watching a lot of My Little Pony : Friendship Is Magic and reading all the related websites I am now certain the plural of Pegasus is Pegasi. Twenty years ago my friend was playing some computer game involving Pegasi and he didn't believe my pluralisation (<--not a word?) back then. Well, finally, vindication after all this time! Muah ah ha ha ha ha ha
  • Reply 57 of 76
    jexusjexus Posts: 373member
    Quote:
    Originally Posted by Bsginc View Post


    The information is appreciated. However, your sarcasm was neither necessary nor appreciated. Instead, responses like yours tend to cut off discussion. And, FWIW, once WOT gets big enough, it will be be perverted by dishonest and greedy people just like everything else on the web is once it attracts enough attention. The basic problem needs to be fixed and not just avoided by finding (for now) safe alternatives.



    That said, your reply fails to address the larger issue of why search engines leave their users out in the cold by not helping to stop the crap. Makes one wonder if, perhaps, they don't derive some of their revenue from malware developers. Perhaps like those who suck off legitimate searches to get their bogus sites at the top of key word searches perhaps?



    http://www.ehow.com/how_5893619_browse-safely.html

    http://www.ehow.com/how_6853223_chec...s-malware.html

    http://www.getsafeonline.org/nqcontent.cfm?a_id=1125

    http://www.getsafeonline.org/nqcontent.cfm?a_id=1159

    http://www.getsafeonline.org/nqcontent.cfm?a_id=1160



    These were all on the FIRST page(and linked from inside each other) of searching on google for "how to browse safely"



    Google or any other search engine is not responsible for neglect or ignorance on the part of the user, so your response is false and invalid.



    Google EVEN has their own tool to scan websites with that is available to the public(firefox and chrome to my knowledge).



    You'll be glad to hear that AI is clean



    http://www.google.com/safebrowsing/d...pleinsider.com
  • Reply 58 of 76
    nvidia2008nvidia2008 Posts: 9,262member
    Quote:
    Originally Posted by NomadMac View Post


    Thanks, Mario.



    I believe I dismissed the dialog box when I downloaded it several days ago. I don't know how to reset the warnings. If you would be so kind to educate me.



    I did take the file, put it on a keychain drive, dropped the avSetup.pkg file into the Download folder on a different Mac that I had just updated and restarted. I then launched avSetup.pkg and there was no warning.



    I guess it actually has to download the file for the Security update to work?

    Doesn't seem that effective to me if that's a requirement. Or do you think the OS modifies the installer somehow?



    See... This is my point... Doesn't look like the latest "built-in anti malware" in OS X is working.
  • Reply 59 of 76
    pxtpxt Posts: 683member
    Quote:
    Originally Posted by nvidia2008 View Post


    Yeah I don't understand. How would one scan their computer for it if they have downloaded it? This appears to just check upon download. What if you already have it? How do you know if you have it? I don't, but switchers from Windows will be wondering about all of the above.



    Repeat, HOW DO I SCAN FOR MALWARE ON THE MAC?



    Edit: I suppose one can try http://www.bleepingcomputer.com/viru...move-mac-guard, the removal script/app that you download is considered "Safe"



    WE ARE IN A BOLD NEW WORLD OF MAC ANTIVIRUS. Welcome.



    Apple says "In the coming days, Apple will deliver a Mac OS X software update that will automatically find and remove Mac Defender malware and its known variants." http://support.apple.com/kb/HT4650



    But there is no notification upon installing the software update that it scanned anything... Like I said, new users, ie. customers as someone pointed out, will be confused.



    There is a lot that Apple can do before going to full-scale anti-virus scanning.



    The first part I would implement is that uninstalling an app should be as easy as installing one.



    There should be an Applications app where a user can see their installed apps and click a single button to uninstall it, as well as stopping all its processes.



    This business of having to find all the pieces and manually get rid of them is really poor.



    First Apple should implement good OS/IT practises, *then* we can see how big a problem there is.
  • Reply 60 of 76
    nvidia2008nvidia2008 Posts: 9,262member
    Oh come on, Google does take some steps, but search engines are there for all to use and abuse.



    I've noticed the SEO gaming in the past six months has been quite bad, there are tons of these fake "news" sites or blogs which just aggregate all kinds of content to appear as a legitimate news or blog site.



    Quote:
    Originally Posted by Jexus View Post


    http://www.ehow.com/how_5893619_browse-safely.html

    http://www.ehow.com/how_6853223_chec...s-malware.html

    http://www.getsafeonline.org/nqcontent.cfm?a_id=1125

    http://www.getsafeonline.org/nqcontent.cfm?a_id=1159

    http://www.getsafeonline.org/nqcontent.cfm?a_id=1160



    These were all on the FIRST page(and linked from inside each other) of searching on google for "how to browse safely"



    Google or any other search engine is not responsible for neglect or ignorance on the part of the user, so your response is false and invalid.



    Google EVEN has their own tool to scan websites with that is available to the public(firefox and chrome to my knowledge).



    You'll be glad to hear that AI is clean



    http://www.google.com/safebrowsing/d...pleinsider.com



Sign In or Register to comment.