Java Web Plugin Update
18/04/13 10:02
Safari 6.0.4 and 5.1.9 allow users to enable Apple’s Java web technology to run on a website-by-website basis. This should further help protect users against rogue websites on the internet that seek to exploit Java vulnerabilities, like OSX.Flashback. Note: the vulnerabilities that Flashback exploited have long since been fixed by Apple.
When a user first encounters a website that requires Java they are prompted to allow or block the Java plug-in from loading.
Thereafter they can manage the settings for each website via the System preferences Security page by clicking the Manage Website Settings button.
Four options are available in the preferences for each website entry in the list:
Ask before Using Safari asks each time you use the website whether you wish to allow or block Java from running.
Block Always A dialog appears informing the user that Java is blocked, clicking the text will present the user with the option to allow it to run.
Allow The Java plug-in version will be allowed to run on this website as long as it does not contain any known vulnerabilities. You will be prompted if there is a Java update to download.
Allow Always Java will run unprompted. It is advised that you only configure this setting for known trusted websites.
Further details of the Safari update can be found in the following Apple knowledge base article
Check and download the latest Java plug-in via the Apple website here
Support recommends: For the majority of users the safest option is to completely disable Java in their web browser as they won’t require this technology for day-to-day internet browsing. Instructions on how to disable Java can be found here
OSX.Yontoo.B Adware
22/03/13 11:20
Several users have reported coming across an Adware trojan that purports to be a video codec required to view HD movies downloaded from the internet.
The trojan has been designed to install plugins in Safari, FireFox and Chrome and is delivered as a zip file to your downloads folder that gets expanded to an OS X installer (in our example named, otherx.zip and Custom Installer, respectively.)
Once installed the plugin hijacks web browsing and inserts adware into whatever webpages you are viewing.
If you’re fortunate, Safari will detect the installer as a rogue adware plugin through the in-built XProtect malware detection technology.
Else, you’ll see a standard OS X Installer screen that is the beginning of the installation of a couple of browser extensions.
Safari Extensions installed by Yontoo.
Users should always be wary of requests to install any third-party software from websites, this approach has been used many times before to infect computers, and only install software that is absolutely necessary from trusted websites that they have sought out.
If in doubt, our advice is simple, don’t install it. After all, it’s unlikely that the latest Blockbuster will be available on an obscure website because you download an unknown piece of software!
The trojan has been designed to install plugins in Safari, FireFox and Chrome and is delivered as a zip file to your downloads folder that gets expanded to an OS X installer (in our example named, otherx.zip and Custom Installer, respectively.)
Once installed the plugin hijacks web browsing and inserts adware into whatever webpages you are viewing.
If you’re fortunate, Safari will detect the installer as a rogue adware plugin through the in-built XProtect malware detection technology.
Else, you’ll see a standard OS X Installer screen that is the beginning of the installation of a couple of browser extensions.
Safari Extensions installed by Yontoo.
Users should always be wary of requests to install any third-party software from websites, this approach has been used many times before to infect computers, and only install software that is absolutely necessary from trusted websites that they have sought out.
If in doubt, our advice is simple, don’t install it. After all, it’s unlikely that the latest Blockbuster will be available on an obscure website because you download an unknown piece of software!
OS X 10.8.3
15/03/13 10:23
OS X Mountain Lion
The latest update of the Apple’s operating system is now available via the Mac App Store. Users should either run Software Update from the top left of their computer screen or run the App Store application to initiate the update.
The update is recommended for all Mountain Lion users and includes new features and fixes that improve the stability, security and compatibility of your Mac, such as:
Boot camp support for installing Windows 8
Boot camp support for Macs with 3TB hard drives
The ability to redeem iTune vouchers by using your Mac’s built-in camera.
Fixes for problems in several applications, Notes, Contacts, Microsoft Exchange
Safari 6.0.3 has also been released with this update that improves scrolling in Facebook and zoomed in pages
A full list of the changes can be found on the Apple website here OS X 10.8.3 update
Security Update 2013-001
As well as the feature improvements in OS X, several security enhancements have also been included in this release, most to prevent an attack of some kind in various technology components like Apache, Core Types, webkit, Identity Service and the kernel.
A full list of the security content can be found here It is highly recommend that users perform an update check and download and install the latest security patches to increase their computer’s protection.
ProtectMac AntiVirus 1.3.2
21/02/13 17:48
ProtectMac AntiVirus Version 1.3.2 has been released.
Users who have Check For Updates enabled (set by default) in the ProtectMac Updating preferences will be automatically updated to Version 1.3.2. To check for new updates at any time, users can choose Check For Updates from the ProtectMac menu bar icon or the ProtectMac Updating preferences.
- Version1.3.2 includes:
- Changes to the scanning functionality that prevent your computer from going to sleep if a scan is occurring.
- Improvements to the License Key entry screen
Select About ProtectMac AntiVirus... from the application’s menu to check the version of ProtectMac AntiVirus installed.
ProtectMac AntiVirus 1.3.1
09/11/12 14:41
ProtectMac AntiVirus, version 1.3.1 is now available. The new version includes enhancements to the scanning engine, improvements to the Reveal in Finder feature and the ability to enable and disable ProtectMac AntiVirus directly from the menu bar.
Users who have ProtectMac AntiVirus installed and Check For Updates enabled (set by default) in the ProtectMac Updating preferences will be automatically updated to Version 1.3.1.
Users can also manually check for new updates by selecting Check For Updates from the ProtectMac menu bar icon or via the ProtectMac Updating preferences.
Select About ProtectMac AntiVirus... from the application’s menu to check the version of ProtectMac AntiVirus installed.
ProtectMac AntiVirus OS X Mountain Lion Version
25/07/12 17:29
A new version of ProtectMac AntiVirus, version 1.3, has been released that is fully compatible with OS X Mountain Lion.
Anyone who already has ProtectMac AntiVirus installed and Check For Updates enabled (set by default) in the ProtectMac Updating preferences will be automatically updated to Version 1.3.
To verify the version of ProtectMac AntiVirus installed select About ProtectMac AntiVirus... from the application’s menu.
Users can manually check for new updates at anytime by selecting Check For Updates from the ProtectMac menu bar icon at the top right of their computer screen or via the ProtectMac Updating preferences.
ProtectMac AntiVirus Version 1.3 is now available as two installers, one for OS X Tiger 10.4 and one for OS X 10.5 or later, including Mountain Lion. Both installers are available via the Downloads page and allow users to run a fully featured of version of the software freely for 30 days. A product license key can be entered during the 30-day period or any time afterwards to reenable all the features of the antivirus security.
Apple release OS X Mountain Lion
25/07/12 10:35
OS X Mountain Lion
The latest version of the Apple’s desktop operating system, OS X Mountain Lion, is now available via the Mac App Store (You can’t miss it:). At a cost of $19.99 Apple have priced the upgrade attractively for all 10.6.8 users and above. One note of caution, at a hefty 4.05GB you’ll need to have fast internet and plenty of patience to get hold of it!
The new OS version contains several major additions and many more lessor improvements to entice the discerning Mac user, in fact Apple boast over 200 new features in the last OS X upgrade.
Mountain Lion also moves closer to resemble iOS with new messages, notifications, reminders and game center. With a heavy influence on ’synching and sharing’ users can expect to find it easier to access information on iCloud across their many Apple devices and post messages and images directly to their favourite social network like Facebook, Twitter, Flickr and Vimeo. Voice, too, is scheduled to play a bigger part in the new OS.
OS X Mountain Lion also come with Apple’s GateKeeper technology, which helps protect your computer from malicious or unauthorized applications and only allows legitimate software to be installed from either the Mac App Store or from recognised third-party Apple Developers.
**ProtectMac AntiVirus v1.3 fully supports GateKeeper and OS X Mountain Lion.
Mountain Lion General Requirements:
- 10.6.8 or later
- Intel Computer
- 2GB RAM minimum (more is better)
- 8GB of disk space
- Some features require an Apple ID
- Some features require Internet access
Compatible computers:
- iMac (Mid 2007 or newer)
- MacBook (Late 2008 Aluminium, or Early 2009 or newer)
- MacBook Pro (Mid/Late 2007 or newer)
- Xserve (Early 2009)
- MacBook Air (Late 2008 or newer)
- Mac mini (Early 2009 or newer)
- Mac Pro (Early 2008 or newer)
Full Technical Specification
Apple Java Security Update - Flashback checker and cleanup
12/04/12 22:59
Apple has released an additional security update for all Mac OS X 10.6 and OS X Lion 10.7 users that is designed to help counteract and cleanup the Flashback Trojan threat that has been circulating over the past few weeks. The update performs several task:
1. It deactivates the Java browser plugin and Java web start if it is unused for 35 days (this appears to be OS X Lion only).
2. It runs a Flashback malware removal tool to cleanup any infections of the most common variants of Flashback on the user ’s computer (and as far as we can determine it deletes itself after running).
Note: the removal tool will not display any feedback if there’s no Flashback threat present.
3. And finally, it updates the XProtect list of malware for the most common variants of Flashback so as to prevent any further downloads of the current Flashback threat.
We recommend that users not wait 35 days for the Java browser plugin to be disabled automatically and do it now from within their web browser. Information on how to disable Java within your web browser can be found here.
We also recommend that you keep your Mac updated with the latest security updates from Apple via Software Update at all times. If you have a version of Java installed earlier than 1.6.0_31-b04-415 then select ‘Software Update’ from the Apple menu at the top-left of your computer screen. Better still check your ’Software Update’ System preferences and ensure that they are set to check daily and ‘Download updates automatically’ from Apple.
To establish which version of Java you have installed on your Mac, run the 'Java Preferences' application in the /Applications/Utilities/ folder or type 'java -version' in Apple's Terminal utility.
Note: Java is not delivered by default with OS X Lion, the first time a user attempts to run a Java applet the system will prompt them to install the necessary component.
Further information about the Java security update can be found here http://support.apple.com/kb/HT5247
1. It deactivates the Java browser plugin and Java web start if it is unused for 35 days (this appears to be OS X Lion only).
2. It runs a Flashback malware removal tool to cleanup any infections of the most common variants of Flashback on the user ’s computer (and as far as we can determine it deletes itself after running).
Note: the removal tool will not display any feedback if there’s no Flashback threat present.
3. And finally, it updates the XProtect list of malware for the most common variants of Flashback so as to prevent any further downloads of the current Flashback threat.
We recommend that users not wait 35 days for the Java browser plugin to be disabled automatically and do it now from within their web browser. Information on how to disable Java within your web browser can be found here.
We also recommend that you keep your Mac updated with the latest security updates from Apple via Software Update at all times. If you have a version of Java installed earlier than 1.6.0_31-b04-415 then select ‘Software Update’ from the Apple menu at the top-left of your computer screen. Better still check your ’Software Update’ System preferences and ensure that they are set to check daily and ‘Download updates automatically’ from Apple.
To establish which version of Java you have installed on your Mac, run the 'Java Preferences' application in the /Applications/Utilities/ folder or type 'java -version' in Apple's Terminal utility.
Note: Java is not delivered by default with OS X Lion, the first time a user attempts to run a Java applet the system will prompt them to install the necessary component.
Further information about the Java security update can be found here http://support.apple.com/kb/HT5247
Apple release Java update to combat Security vulnerability
03/04/12 15:35
Apple has released a security update for all Mac OS X 10.6.8 and OS X Lion 10.7.3 users.
The update fixes multiple vulnerabilities in Java 1.6.0_29, the mosts serious of which has been exploited recently and could allow virus writers remote access to infected computers. Reports by Digital Trends suggest as many as 600,000 Macs worldwide have been compromised by the Flashback threat, OSX.Flashback.
Mac users can become infected by visiting a malicious webpage containing a specially crafted java applet that will run and install the threat.
To establish which version of Java you have installed on your Mac, run apple’s Terminal utility and type “java -version”. If you have a version earlier than 1.6.0_31 then select ‘Software Update’ from the Apple menu at the top-left of your computer screen.
Note: Java is not delivered by default with OS X Lion, the first time a user attempts to run a Java applet the system will prompt them to install the necessary component.
We strongly recommend that you keep your Mac updated with the latest security updates from Apple via Software Update at all times. Depending on whether you already have Java installed on your computer will determine if this latest security update is downloaded.
One additional measure users can take is to disable Java within their web browser.
Full details of the security update can be found on the Apple website http://support.apple.com/kb/HT5228
The update fixes multiple vulnerabilities in Java 1.6.0_29, the mosts serious of which has been exploited recently and could allow virus writers remote access to infected computers. Reports by Digital Trends suggest as many as 600,000 Macs worldwide have been compromised by the Flashback threat, OSX.Flashback.
Mac users can become infected by visiting a malicious webpage containing a specially crafted java applet that will run and install the threat.
To establish which version of Java you have installed on your Mac, run apple’s Terminal utility and type “java -version”. If you have a version earlier than 1.6.0_31 then select ‘Software Update’ from the Apple menu at the top-left of your computer screen.
Note: Java is not delivered by default with OS X Lion, the first time a user attempts to run a Java applet the system will prompt them to install the necessary component.
We strongly recommend that you keep your Mac updated with the latest security updates from Apple via Software Update at all times. Depending on whether you already have Java installed on your computer will determine if this latest security update is downloaded.
One additional measure users can take is to disable Java within their web browser.
Full details of the security update can be found on the Apple website http://support.apple.com/kb/HT5228
Microsoft Word vulnerabilty threat
30/03/12 11:24
Malicious Word documents that take advantage of an old vulnerability in Microsoft Office have been discovered doing the rounds.
The trojan, OSX.Word.Malware, is installed when a user opens a ‘specifically crafted’ Word doc, allowing the hacker to take complete control of an infected computer.
The ‘critical’ vulnerability affects Mac versions of the following Microsoft products, Microsoft Office 2004 for Mac, Microsoft Office 2008 for Mac and OpenXML File Format Converter for Mac.
Users who keep their installations of Microsoft Office up to date with the latest security patches from Microsoft are not at risk from this threat.
Note: This vulnerability was first reported in 2009 and affects both Mac OS X and Windows computers. Further details can be found in the Microsoft Security Bulletin MS09-027 - Critical
Be careful when opening unsolicited Word documents, especially ones pertaining to Tibet, and if you have not applied the Microsoft patch then it is recommend that you update your installation of Microsoft Office immediately.
The trojan, OSX.Word.Malware, is installed when a user opens a ‘specifically crafted’ Word doc, allowing the hacker to take complete control of an infected computer.
The ‘critical’ vulnerability affects Mac versions of the following Microsoft products, Microsoft Office 2004 for Mac, Microsoft Office 2008 for Mac and OpenXML File Format Converter for Mac.
Users who keep their installations of Microsoft Office up to date with the latest security patches from Microsoft are not at risk from this threat.
Note: This vulnerability was first reported in 2009 and affects both Mac OS X and Windows computers. Further details can be found in the Microsoft Security Bulletin MS09-027 - Critical
Be careful when opening unsolicited Word documents, especially ones pertaining to Tibet, and if you have not applied the Microsoft patch then it is recommend that you update your installation of Microsoft Office immediately.
Java Trojan circulating
23/03/12 11:06
A trojan threat, Trojan.OSX.Generic, that manipulates of a Java vulnerability within Mac OS X has been discovered.
The threat, also known as Tibet, is delivered when a user visits a ‘poisoned’ website; a Java applet is downloaded and if the computer is not protected the backdoor trojan will be installed.
Like most trojans, the purpose of this threat is to gather personal and sensitive information and potentially allow a remote user control of your computer.
Users who keep their computer up to date with the latest security patches from Apple via Software Update are not at risk from this threat.
Although it may cause viewing issues on a small number of websites, one additional measure users can take is to disable Java in Safari’s Security preferences.
The threat, also known as Tibet, is delivered when a user visits a ‘poisoned’ website; a Java applet is downloaded and if the computer is not protected the backdoor trojan will be installed.
Like most trojans, the purpose of this threat is to gather personal and sensitive information and potentially allow a remote user control of your computer.
Users who keep their computer up to date with the latest security patches from Apple via Software Update are not at risk from this threat.
Although it may cause viewing issues on a small number of websites, one additional measure users can take is to disable Java in Safari’s Security preferences.
Imuler variant discovered Trojan.OSX.Imuler
19/03/12 13:14
A variant of the Imuler trojan horse has been discovered that pretends to be an image file but is in fact a trojan application that installs itself when double-clicked.
If the trojan is run, not only can it allow remote hackers access to your computer, it deletes the original file you downloaded and replaces it with a jpeg image of the icon, making it more difficult to realise something suspicious has has actually been downloaded.
The idea of disguising a file to appear as something else has been used by hackers for many years. On Mac OS X typically the file extension is not shown so the user is inclined to simply double-click the file, trusting that the icon reflects the true nature of the contents. Unfortunately, in this instance that is sadly not the case.
As a general rule you should only download files from trusted websites and don’t assume that because a file icon looks like a document or an image that it really is what it’s pretending to be.
ProtectMac AntiVirus detects this variant as Trojan.OSX.Imuler
If the trojan is run, not only can it allow remote hackers access to your computer, it deletes the original file you downloaded and replaces it with a jpeg image of the icon, making it more difficult to realise something suspicious has has actually been downloaded.
The idea of disguising a file to appear as something else has been used by hackers for many years. On Mac OS X typically the file extension is not shown so the user is inclined to simply double-click the file, trusting that the icon reflects the true nature of the contents. Unfortunately, in this instance that is sadly not the case.
As a general rule you should only download files from trusted websites and don’t assume that because a file icon looks like a document or an image that it really is what it’s pretending to be.
ProtectMac AntiVirus detects this variant as Trojan.OSX.Imuler
Flash Player Trojan variant discovered
24/02/12 10:40
A variant of the backdoor Trojan that encourages users to install or update Adobe Flash Player has been circulating some of the more dubious websites.
If the backdoor Trojan runs on your computer it has the potential for remote hackers to control your Mac and retrieve sensitive information, such as usernames and passwords.
Whilst visiting a compromised website users are typically prompted to install or update their installation of Flash Player so as to enable them to view a particular topical or salacious video - users will never see these type of Adobe notifications under normal circumstances even if you have Flash Player already installed.
If the backdoor Trojan runs on your computer it has the potential for remote hackers to control your Mac and retrieve sensitive information, such as usernames and passwords.
Whilst visiting a compromised website users are typically prompted to install or update their installation of Flash Player so as to enable them to view a particular topical or salacious video - users will never see these type of Adobe notifications under normal circumstances even if you have Flash Player already installed.
Mac OS X Lion does not come with Adobe Flash Player by default, so don’t be tempted to click these alerts even if you do want to view a legitimate video. We always recommend that if you require any Adobe free products that you download them directly from the Adobe.
Obviously you should always be extremely careful when downloading any files from the internet and only download files from trusted sites.
Note, reports of this trojan also being installed automatically in the background have occurred on systems where the user has not installed the latest Apple security updates. We strongly recommend that you always enable Apple's Software Update feature in the System Preferences to Check for Updates daily and Download updates automatically.
Anyone who believes they may have come across a compromised website hosting this Trojan should send the details to support@protectmac.com
Mac OS X 10.7.3 update
01/02/12 14:58
Apple has released and update to Mac OS X Lion10.7. The release includes a sizeable security update to most technologies that fixes multiple vulnerabilities in the operating system. Full details of the security update can be found in the Apple knowledge-base article: http://support.apple.com/kb/HT1222
The OS update includes Safari v5.1.3 as well as additional support for new languages and resolutions for compatibility and performance issues.
Further details of the new version of Mac OS X can be found on the Apple website.
The OS update includes Safari v5.1.3 as well as additional support for new languages and resolutions for compatibility and performance issues.
Further details of the new version of Mac OS X can be found on the Apple website.
Security Update 2012-001 Released
01/02/12 14:56
A security update for Mac OS X has been released for all Mac OS X 10.6.8, OS X Lion version 10.7 to 10.7.2 users. The publication coincides with the release of Mac OS X 10.7.3
The update fixes over 50 vulnerabilities in the Mac operating system, ranging from core technology amendments that resolve arbitrary code execution to multiple vulnerabilities in QuickTime and PHP. The update covers most technologies from Apache to X11.
Full details of the security update can be found on the Apple website http://support.apple.com/kb/HT1222
The update fixes over 50 vulnerabilities in the Mac operating system, ranging from core technology amendments that resolve arbitrary code execution to multiple vulnerabilities in QuickTime and PHP. The update covers most technologies from Apache to X11.
Full details of the security update can be found on the Apple website http://support.apple.com/kb/HT1222
New Mac OS X Trojan distributed via BitTorrent file-sharing sites
01/11/11 12:13
A new Mac OS X Trojan has been discovered on BitTorrent sites. The threat, dubbed OSX.DevilRobber or OSX.Miner, has appeared within legitimate copies of GraphicConverter v7.4, Flux v3.2.5 and CorelPainter v12, which the virus writer has modified and posted on the file-sharing websites. The Trojan is installed on your computer when the parent application’s installer is run.
The threat appears to be quite sophisticated, adopting a multi-pronged approach to harvesting personal details from your computer, including stored information from encryption software and Safari, and sends this to a remote server. In addition, the Trojan utilizes your Graphics processor (GPU) to perform calculations required to undertake bitcoin mining, hence the name. If it discovers a bitcoin wallet it will save that, too.
If your Mac becomes infected by this Trojan then the first thing you may notice is a sluggishness as it performs the bitcoin permutations required for ‘mining’. Check for the presence of a folder in your login user area called ~/Library/mdsa1331/ and a launch agent file in ~/Library/LaunchAgents/ that looks unfamiliar. The current version of the trojan creates a startup file, which at first glance appears to have come from Apple, com.apple.legion.plist.
Interestingly, the Trojan script exits if it detects that LittleSnitch, a network analyzing tool, is installed on your Mac. Presumably this is because it will highlight network traffic and raise awareness of the Trojan’s presence in the wild.
As always, we advise extreme caution when downloading software from file-sharing websites as you don’t always get what you expect. Unfortunately in this case you get a lot more than you bargained for!
ProtectMac AntiVirus detects this new Trojan as OSX.DevilRobber.
Security Update 2011-006 Released
12/10/11 11:44
Apple has published a security update for Mac OS X to compliment the latest release of Lion 10.7.2. This update also improves the security of Macs running Mac OS X 10.6.8.
There is numerous security fixes included in this update to improve the stability and security of your computer relating to core technologies, networking, file viewing and downloading and in particular Quicktime and the Application Firewall. Full details of the security update can be found on the Apple website http://support.apple.com/kb/HT5002
Update 26 Oct 2011: The Quicktime fixes are also available for Windows computers.
There is numerous security fixes included in this update to improve the stability and security of your computer relating to core technologies, networking, file viewing and downloading and in particular Quicktime and the Application Firewall. Full details of the security update can be found on the Apple website http://support.apple.com/kb/HT5002
Update 26 Oct 2011: The Quicktime fixes are also available for Windows computers.
Mac OS X 10.7.2 update
12/10/11 11:44
Apple has released and update to Mac OS X 10.7, which also includes Safari 5.1.1. This update is recommended for all users running OS X Lion and includes general operating fixes that improve the stability and security of your computer. The release also includes support for Apple’s iCloud technology that automatically stores your content and information on iCloud and syncs to all your Apple devices.
The main products and technology affected by this update are:
Further details of the new version of Mac OS X can be found on the Apple website.
The main products and technology affected by this update are:
- Email, calendars, contacts, Safari bookmarks and reading list are all automatically saved to iCloud and data pushed to all your Apple devices
- Back to your Mac provides remote access to your Mac from any other Mac.
- Find my Mac helps locate your Mac computer and display the location on a map, allowing remote locking or wiping of the computers’s content
Further details of the new version of Mac OS X can be found on the Apple website.
Apple add protection for OSX.Revir and OSX.Flashback
28/09/11 18:33
Apple has updated their built-in File Quarantine component, XProtect, with detection for the trojans that were reported late last week and earlier this week. XProtect detects the latest threats as OSX.Revir.A and OSX.FlashBack.A. and gives the user option of opening them (we don’t recommend this), canceling the operation or moving the files to Trash.
XProtect was introduced in Snow Leopard Mac OS X version 10.6
XProtect was introduced in Snow Leopard Mac OS X version 10.6
Flash Player Trojan discovered
27/09/11 10:55
A backdoor Trojan that pretends to be an Adobe Flash Player plugin has been found on compromised websites. If the Trojan runs on your computer it has the potential for remote hackers to control your Mac and retrieve sensitive information.
Users who visit a compromised website will see a link to a Flash Player Installer and because of the downloaded file extension, Safari will categorize the file as ‘safe’ and automatically run the malicious software on your computer when downloaded.
We recommend that users consider disabling the ‘Open “Safe” files after downloading’ option in the Safari General preferences to prevent Safari automatically opening downloaded files such as this and other threats like OSX.MacDefender
If users require Flash Player for Mac OS X then we also recommend that they download it directly from the Adobe website. Users should always be extremely careful when downloading any files from the internet and only download files from trusted sites.
ProtectMac AntiVirus detects the Flash Player Trojan as Trojan.Flashback.
Users who visit a compromised website will see a link to a Flash Player Installer and because of the downloaded file extension, Safari will categorize the file as ‘safe’ and automatically run the malicious software on your computer when downloaded.
We recommend that users consider disabling the ‘Open “Safe” files after downloading’ option in the Safari General preferences to prevent Safari automatically opening downloaded files such as this and other threats like OSX.MacDefender
If users require Flash Player for Mac OS X then we also recommend that they download it directly from the Adobe website. Users should always be extremely careful when downloading any files from the internet and only download files from trusted sites.
ProtectMac AntiVirus detects the Flash Player Trojan as Trojan.Flashback.
New Trojan disguised as a PDF document
24/09/11 10:05
A trojan threat that is posing as a PDF document has been discovered. The threat displays a (Chinese) PDF document when run in an attempt to hide from the user that it's an application, connecting to a remote server and further downloading a backdoor trojan, which will allow hackers remote access to your computer.
Whilst the idea of disguising a threat as a PDF document has been seen before on Windows computers, this is the first time that the virus writers have adopted this approach on Mac OS X. At the moment the risk that this threat poses is low, the quality of the code suggests that it is a proof-of-concept that is not yet spreading in the wild.
ProtectMac AntiVirus detects the PDF-style application as OSX.Revir-1 and the backdoor trojan as OSX.iMuler-1
ProtectMac recommends that users are always extremely careful when downloading any files from the internet and only download from trusted sites. As we've seen with this threat and Microsoft Word files, because a file appears to be a document does not make it harmless.
Whilst the idea of disguising a threat as a PDF document has been seen before on Windows computers, this is the first time that the virus writers have adopted this approach on Mac OS X. At the moment the risk that this threat poses is low, the quality of the code suggests that it is a proof-of-concept that is not yet spreading in the wild.
ProtectMac AntiVirus detects the PDF-style application as OSX.Revir-1 and the backdoor trojan as OSX.iMuler-1
ProtectMac recommends that users are always extremely careful when downloading any files from the internet and only download from trusted sites. As we've seen with this threat and Microsoft Word files, because a file appears to be a document does not make it harmless.
Security Update 2011-005 Released
10/09/11 12:48
Apple has released a security update for Mac OS X 10.6.x and 10.7.x.
The update contains a fix to the Certificate Trust Policy to resolve a security vulnerability whereby an attacker might be able intercept user credentials or other sensitive information.
Description: Fraudulent certificates were issued by multiple certificate authorities operated by DigiNotar. This issue is addressed by removing DigiNotar from the list of trusted root certificates, from the list of Extended Validation (EV) certificate authorities, and by configuring default system trust settings so that DigiNotar's certificates, including those issued by other authorities, are not trusted.
The latest security update can be downloaded via Mac OS X Software Update. Note, after downloading you will be required to restart you computer for the update to take affect.
Further information on Security Update 2011-005 can be found on the Apple website http://support.apple.com/kb/HT1222
The update contains a fix to the Certificate Trust Policy to resolve a security vulnerability whereby an attacker might be able intercept user credentials or other sensitive information.
Description: Fraudulent certificates were issued by multiple certificate authorities operated by DigiNotar. This issue is addressed by removing DigiNotar from the list of trusted root certificates, from the list of Extended Validation (EV) certificate authorities, and by configuring default system trust settings so that DigiNotar's certificates, including those issued by other authorities, are not trusted.
The latest security update can be downloaded via Mac OS X Software Update. Note, after downloading you will be required to restart you computer for the update to take affect.
Further information on Security Update 2011-005 can be found on the Apple website http://support.apple.com/kb/HT1222
ProtectMac AntiVirus Version 1.2 Released
20/07/11 14:23
A new version of ProtectMac AntiVirus has been released that is fully compatible with OS X Lion.
Users with the option Check For Updates enabled (set by default) in the ProtectMac Updating preferences will download and have Version 1.2 installed automatically whenever an update check is next performed on their computer. Or they can download and install it immediately by selecting Check For Updates from the ProtectMac menu bar icon at the top right of their computer screen.
Version 1.2 installer can be downloaded directly from here for users who need to install afresh on OS X Lion.
Note, ProtectMac AntiVirus Version 1.2 is capable of running on Mac OS X 10.4.7 through to 10.7, OS X Lion.
Users with the option Check For Updates enabled (set by default) in the ProtectMac Updating preferences will download and have Version 1.2 installed automatically whenever an update check is next performed on their computer. Or they can download and install it immediately by selecting Check For Updates from the ProtectMac menu bar icon at the top right of their computer screen.
Version 1.2 installer can be downloaded directly from here for users who need to install afresh on OS X Lion.
Note, ProtectMac AntiVirus Version 1.2 is capable of running on Mac OS X 10.4.7 through to 10.7, OS X Lion.
OS X Lion Now Available
20/07/11 14:13
Apple has released a major upgrade to their flagship operating system, Mac OS X. Unlike previous upgrades, OS X Lion (version 10.7) is only available from the Mac App Store as a 3.49 GB download and at a cost of $29.99. However, pay once and you can download and upgrade Lion on all your personal Macs running Snow Leopard 10.6.A full description of all the features and capabilities of the new operation system, including how to download and install OS X Lion, can be found on the Apple website http://www.apple.com/macosx/
Requirements:
- Mac OS X 10.6.6 or later. It is recommend that you upgrade to the latest version of Snow Leopard, version 10.6.8, via Software Update before purchasing and installing OS X Lion
- Mac computer with an Intel Core 2 Duo, i3, i5, i7 or Xeon processor. To establish your Mac’s processor type click on the Apple icon at the top left of your computer screen and choose ‘About this Mac’ from the menu options.
- 2GB of memory
- 7GB of disk space
It is also recommended that users backup important files and data on their computer before upgrading to Mac OS X 10.6.8, purchasing and installing OS X Lion.
*ProtectMac AntiVirus Version 1.2 and later is fully compatible with OS X Lion
Mac OS X 10.6.8 published
05/07/11 14:18
The latest version of Mac OS X, 10.6.8, is now available via Software Update. This update is recommended for all users running Snow Leopard and includes general fixes to improve the stability, compatibility and the security of Mac OS X. The release includes fixes that specifically:
Full details of the update are described in the following Apple knowledge base article http://support.apple.com/kb/HT4561
Information on security updates within Mac OS X can be found here http://support.apple.com/kb/HT1222
Note: Mac OS X updates and the security updates can also be downloaded directly from the Apple website http://support.apple.com/downloads/
Apple recommends that you back up your system before upgrading to 10.6.8.
- Resolves an issue that may cause Preview to unexpectedly quit.
- Improves support for IPv6.
- Improves VPN reliability.
- Identifies and removes known variants of MacDefender malware.
- Corrects timezone data in iCal for Lisbon-Portugal.
- Adds the ability to use Kerberos authentication to a web proxy server.
- Fixes an issue when saving documents from Xcode or TextEdit when using an NFS home directory.
- Fixes an issue when importing certain media files into Final Cut Pro
Full details of the update are described in the following Apple knowledge base article http://support.apple.com/kb/HT4561
Information on security updates within Mac OS X can be found here http://support.apple.com/kb/HT1222
Note: Mac OS X updates and the security updates can also be downloaded directly from the Apple website http://support.apple.com/downloads/
Apple recommends that you back up your system before upgrading to 10.6.8.
MacShield variant bypasses Mac OS X detection
01/06/11 21:47
After Apple released detection for MacDefender in Mac OS X, the virus writers have posted a new variant of the fake software a few hours later that evades the Apple detection functionality.
Whilst visiting a compromised website users will see a fake virus scan occurring within their web browser, typical of all variants. The JavaScript then downloads an installer package, mdinstall.pkg, which automatically expands and runs an intermediate file (mdDownloader) that downloads a MacDefender variant called MacShield to the Applications folder.
ProtectMac AntiVirus customers are protected against these threats OSX.MacDefender, Trojan-Downloader.OSX.Fav.A
***To prevent downloaded archives and files from being opened automatically it is recommended that you disable the ‘Open “safe”files after downloading’ option in their General Safari preferences.
Whilst visiting a compromised website users will see a fake virus scan occurring within their web browser, typical of all variants. The JavaScript then downloads an installer package, mdinstall.pkg, which automatically expands and runs an intermediate file (mdDownloader) that downloads a MacDefender variant called MacShield to the Applications folder.
ProtectMac AntiVirus customers are protected against these threats OSX.MacDefender, Trojan-Downloader.OSX.Fav.A
***To prevent downloaded archives and files from being opened automatically it is recommended that you disable the ‘Open “safe”files after downloading’ option in their General Safari preferences.
Apple add MacDefender detection to Mac OS X
01/06/11 20:25
Apple has released Security Update 2011-003 to detect and remove the MacDefender trojan within Mac OS X. Further information on the security update can be found within the Apple knowledgebase article http://support.apple.com/kb/HT4657
The trojan which has appeared across the internet in recent weeks poses as antivirus software, downloading itself to user’s Macs and installing the fake product in their Applications folder. The fake software then alerts the user to non-existent malware it has detected on their computer and attempts to persuade them to license the software so as to be able to remove the threats.
Mac users can opt out of the malware updates by unchecking the new option “Automatically update safe downloads list” in the General, Security Preferences.
The trojan which has appeared across the internet in recent weeks poses as antivirus software, downloading itself to user’s Macs and installing the fake product in their Applications folder. The fake software then alerts the user to non-existent malware it has detected on their computer and attempts to persuade them to license the software so as to be able to remove the threats.
Mac users can opt out of the malware updates by unchecking the new option “Automatically update safe downloads list” in the General, Security Preferences.
ProtectMac AntiVirus customers are protected against these threats OSX.MacDefender, Trojan-Downloader.OSX.Fav.A
Mac Defender downloader discovered with new variant
25/05/11 13:40
A Mac Trojan downloader (Trojan-Downloader.OSX.Fav.A) designed to download and install a variant of MacDefender called MacGuard has been discovered.
The downloader arrives on your computer using the same mechanism that MacDefender and earlier versions of the trojans used. Namely, whilst browsing a compromised website users will see what appears to be a scan of their computer occurring within their web browser. The JavaScript on the website downloads a small zip file to the Applications folder containing the downloader application, avRunner.
The downloader arrives on your computer using the same mechanism that MacDefender and earlier versions of the trojans used. Namely, whilst browsing a compromised website users will see what appears to be a scan of their computer occurring within their web browser. The JavaScript on the website downloads a small zip file to the Applications folder containing the downloader application, avRunner.
The malicious application then runs and downloads a MacDefender variant called MacGuard and installs this into the Applications folder. An item is also added the user's Login Items in System preferences so that MacGuard runs each time on startup.
Web traffic is hijacked, too, such that users are sent to pornographic and phishing websites to further encourage them to license the fake software to eliminate this additional problem.
ProtectMac AntiVirus customers are protected against these threats OSX.MacDefender, Trojan-Downloader.OSX.Fav.A
How to manually removal MacDefender and any variants
Manual removal instructions
Mac users can prevent downloaded archives and files from being opened automatically by disabling the ‘Open “safe”files after downloading’ option in their General Safari preferences.
Apple to release Mac Defender malware check in Mac OS X
25/05/11 09:37
Following the discovery of several fake Mac antivirus products on the internet, Apple have decided to add their own detection to Mac OS X http://support.apple.com/kb/HT4650
“In the coming days, Apple will deliver a Mac OS X software update that will automatically find and remove Mac Defender malware and its known variants. The update will also help protect users by providing an explicit warning if they download this malware.”
The latest security fix will be available for download via Apple’s Software Update mechanism.
“In the coming days, Apple will deliver a Mac OS X software update that will automatically find and remove Mac Defender malware and its known variants. The update will also help protect users by providing an explicit warning if they download this malware.”
The latest security fix will be available for download via Apple’s Software Update mechanism.
Mac Security, Mac Protector and Mac Guard - Mac Defender fake AntiVirus variants
06/05/11 08:49
Variants of the fake Mac AntiVirus software that was discovered earlier this week have appeared on the internet. Calling themselves either Mac Security, Mac Protector, Mac Guard or Apple Web Security, the variants behave in the same way as Mac Defender by pretending to discover viruses on your computer and asking that you purchase the software in order to remove the threats.
One of the main differences between these variants and Mac Defender is that the resultant scanning window that is triggered by the JavaScript code running on the compromised website looks more like a Mac desktop. The script then automatically downloads a Mac Installer meta-package called MacSecurity.mpkg.
One of the main differences between these variants and Mac Defender is that the resultant scanning window that is triggered by the JavaScript code running on the compromised website looks more like a Mac desktop. The script then automatically downloads a Mac Installer meta-package called MacSecurity.mpkg.
ProtectMac AntiVirus customers are protected against these threats OSX.MacDefender, Trojan.OSX.MacDefender
***After removing the trojan with ProtectMac AntiVirus restart your computer.
Fake Mac Defender AntiVirus software
03/05/11 10:44
A new threat that pretends to be a legitimate Mac AntiVirus product called MACDefender has been discovered on compromised websites. Typically the threat is found whilst searching for popular topics and images on the internet. Compromised websites contain JavaScript code that runs and displays a Windows-style scan of your computer.
After closing the alert a zip file named, BestMacAntiVirus2011.mpkg.zip will be downloaded, which extracts a Mac Installer meta-package called MacDefender.mpkg. Unfortunately the only thing that this software is like to remove are your credit card details!
As a general rule it is best not to respond to any prompts that you receive whilst browsing the internet. If you do require antivirus software, or anything for that matter, then it’s best to do the research yourself and choose a well known legitimate company.
ProtectMac AntiVirus customers are protected against this threat OSX.MacDefender.A.
Note: There is a legitimate Mac antivirus product named MacDefender
Security Update for Safari 5.0.5 and Mac OS X 2011-002
15/04/11 13:24
Apple has released a security update for Mac OS X and Safari. These updates contain a fix to the Certificate Trust Policy and Webkit technologies respectively.
The impact of the security vulnerabilities could mean that ’Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution’
The update is available for Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.5 or later and Mac OS X Server v10.6.5 or later.
Further information on Security Update 2011-002 can be found on the Apple website http://support.apple.com/kb/HT1222
The latest security updates can be downloaded via the Mac OS X Software Update mechanism.
The impact of the security vulnerabilities could mean that ’Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution’
The update is available for Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.5 or later and Mac OS X Server v10.6.5 or later.
Further information on Security Update 2011-002 can be found on the Apple website http://support.apple.com/kb/HT1222
The latest security updates can be downloaded via the Mac OS X Software Update mechanism.
Mac OS X 10.6.7 Now Available
21/03/11 19:45
The latest version of Mac OS X, 10.6.7, is now available via Software Update. This update is recommended for all users running Snow Leopard and includes general fixes to improve the stability, compatibility and the security of Mac OS X. The release includes fixes specifically to:
• Improve the reliability of Back to My Mac
• Fix for a file transfer problem to certain SMB servers
• Several minor Mac App Store bugs have been resolved
Full details of the update are described in the following Apple knowledge base article http://support.apple.com/kb/HT4472
The Mac OS X release also includes a number of security enhancements to several application areas. Full details of the security update can be found here http://support.apple.com/kb/HT1222
Note: the Mac OS X update and the security update can also be downloaded directly from the Apple website http://support.apple.com/downloads/
Apple recommends that you back up your system before upgrading to 10.6.7.
• Improve the reliability of Back to My Mac
• Fix for a file transfer problem to certain SMB servers
• Several minor Mac App Store bugs have been resolved
Full details of the update are described in the following Apple knowledge base article http://support.apple.com/kb/HT4472
The Mac OS X release also includes a number of security enhancements to several application areas. Full details of the security update can be found here http://support.apple.com/kb/HT1222
Note: the Mac OS X update and the security update can also be downloaded directly from the Apple website http://support.apple.com/downloads/
Apple recommends that you back up your system before upgrading to 10.6.7.
OSX.MusMinim RAT detected
01/03/11 09:14
MusMinum is a Mac version of a Remote Access Tool which has the ability to open up a backdoor on your computer.
In its current state the threat is quite basic and even warns you in flawed English if you become infected. Furthermore, if the threat is running then it is displayed in the list of processes as "BlackHole" and can often appear on disk in a folder of the same name.
The trojan should pose little risk to Mac users at present, but we are continuing to monitor the situation closely as all indications are that the author is developing a more sophisticated variant.
As the threat is likely to appear as some kind of trojan on the internet, our recommendations as always is to be vigilant when downloading any application from the internet and only visit well-known reputable sites.
In its current state the threat is quite basic and even warns you in flawed English if you become infected. Furthermore, if the threat is running then it is displayed in the list of processes as "BlackHole" and can often appear on disk in a folder of the same name.
The trojan should pose little risk to Mac users at present, but we are continuing to monitor the situation closely as all indications are that the author is developing a more sophisticated variant.
As the threat is likely to appear as some kind of trojan on the internet, our recommendations as always is to be vigilant when downloading any application from the internet and only visit well-known reputable sites.
ProtectMac AntiVirus Version 1.1.5 Released
21/02/11 11:52
A new version of ProtectMac AntiVirus has been published, containing the following enhancements:
Version 1.1.5 will be downloaded automatically by the background update scheduler. The new version can also be downloaded manually via the ‘Check For Updates’ option in the menu bar icon. Users can view the new version details in the ProtectMac AntiVirus application’s About box.
- Scanning of NTFS-formatted disks has been made more reliable.
- Improved performance of the file-access scanner.
- Minor changes have been made to the application GUI.
Version 1.1.5 will be downloaded automatically by the background update scheduler. The new version can also be downloaded manually via the ‘Check For Updates’ option in the menu bar icon. Users can view the new version details in the ProtectMac AntiVirus application’s About box.
ProtectMac AntiVirus Version 1.1.4 Released
18/11/10 11:52
A new version of ProtectMac AntiVirus has been released, containing the following changes:
Version 1.1.4 will be downloaded automatically if users have ‘Checked for Updates’ enabled in the application’s Updating preferences, which is enabled by default. Or the new version can be downloaded manually via the ‘Check For Updates’ option in the menu bar icon. Users can view the version number of ProtectMac AntiVirus in the application’s About box. See Screenshots
- An initial update check is now performed immediately after running for the first time
- Improved checking for invalid Device scan locations.
- Resizing and display of the desktop progress window has been made more reliable.
- Graphical improvements to the user interface and installer window
- Updated scanning technology
Version 1.1.4 will be downloaded automatically if users have ‘Checked for Updates’ enabled in the application’s Updating preferences, which is enabled by default. Or the new version can be downloaded manually via the ‘Check For Updates’ option in the menu bar icon. Users can view the version number of ProtectMac AntiVirus in the application’s About box. See Screenshots
Security Update for Mac OS X 2010-007
11/11/10 11:35
Following the release of Mac OS X 10.6.5, Apple has also made available a security update for Mac OS X. This update contains a number of security fixes and is recommend for all Mac OS X users running 10.4 and above.
Further information on the improvements in Security Update 2010-007 can be found here http://support.apple.com/kb/HT1222
The latest security fixes can be downloaded via Apple’s Software Update mechanism. For users with multiple computers who wish to download the update only once, the update can be found here http://support.apple.com/kb/DL1329
Note, Mac OS X users who have upgraded to Mac 10.6.5 will already have these fixes installed.
Avalanche of Snow Leopard improvements in 10.6.5
11/11/10 11:34
Apple have today released their latest version of Mac OS X, 10.6.5.
This update is considerably large, with over 100 bug fixes, enhancements and stability improvements. The release is recommended for all Snow Leopard users and is available via the normal Apple Software Update channel. The update includes the following
If you need to update multiple computers and would prefer to download the relevant update only once then this can be located on the following webpage http://support.apple.com/downloads/
This update is considerably large, with over 100 bug fixes, enhancements and stability improvements. The release is recommended for all Snow Leopard users and is available via the normal Apple Software Update channel. The update includes the following
- improve reliability with Microsoft Exchange servers
- address performance of some image-processing operations in iPhoto and Aperture
- address stability and performance of graphics applications and games
- resolve a delay between print jobs
- address a printing issue for some HP printers connected to an AirPort Extreme
- resolve an issue when dragging contacts from Address Book to iCal
- address an issue where dragging an item from a stack causes the Dock to not automatically hide
- resolve an issue with Wikipedia information not displaying correctly in Dictionary
- improve performance of MainStage on certain Mac systems
- resolve spacing issues with OpenType fonts
- improve reliability with some Bluetooth braille displays
- resolve a VoiceOver issue when browsing some web sites with Safari 5
If you need to update multiple computers and would prefer to download the relevant update only once then this can be located on the following webpage http://support.apple.com/downloads/
Full details of the new version are described in the following Apple knowledgebase article http://support.apple.com/kb/HT4250
Information on the security features of the update can be viewed here http://support.apple.com/kb/HT1222
Note: the security update can also be downloaded separately and contains fixes for 10.4, 10.5 and 10.6 systems
http://support.apple.com/kb/DL1329
Apple recommends that you back up your system before upgrading to 10.6.5.
OSX.Boonana- Koobface variant discovered
01/11/10 11:33
A Mac version of the Koobface trojan has been discovered circulating the social network and internet sites targeting Mac users.
Using what's become known as' social engineering' the unwary user is encouraged to click on a link in Facebook, Twitter or Myspace that supposes to contain a video of the user.
The multi-platform Java threat is designed to run not only on Mac OS X, but Windows and Linux, too. If the user is persuaded to authorize the java applet, it has the potential to download a number of cross-platform files as well as an installer, which enables the threat to run automatically on each restart .
Infected computers have the potential to be accessed remotely, setup as host servers to spam users or spread the trojan, and contact a number of remote server sites with the intent of downloading further malicious software.
Using what's become known as' social engineering' the unwary user is encouraged to click on a link in Facebook, Twitter or Myspace that supposes to contain a video of the user.
The multi-platform Java threat is designed to run not only on Mac OS X, but Windows and Linux, too. If the user is persuaded to authorize the java applet, it has the potential to download a number of cross-platform files as well as an installer, which enables the threat to run automatically on each restart .
Infected computers have the potential to be accessed remotely, setup as host servers to spam users or spread the trojan, and contact a number of remote server sites with the intent of downloading further malicious software.
So, if you see a request to authorize a java applet whilst accessing your favorite social network or internet site, decline!!
Read more
Mac OS X 10.6.4 Now Available
18/06/10 11:14
The latest version of Mac OS X, 10.6.4, is now available via Software Update. This update is recommended for all users running Snow Leopard and includes the latest Safari web browser release, version 5.0. It also delivers fixes for several application issues and core hardware problems:
• resolve an issue that causes the keyboard or trackpad to become unresponsive
• resolve an issue that may prevent some Adobe Creative Suite 3 applications from opening
• address issues copying, renaming, or deleting files on SMB file servers
• improve reliability of VPN connections
• resolve a playback issue in DVD Player when using Good Quality deinterlacing
• resolve an issue editing photos with iPhoto or Aperture in full screen view
• improve compatibility with some braille displays
Full details of the update are described in the following Apple knowledge base article http://support.apple.com/kb/HT4150
The Mac OS X release also includes a number of security updates, amongst which is an update to Apple’s own malware detection for the HellRTS threat - this is a malicious Trojan pretending to be an iPhoto posting on the internet.
Full details of the security update can be found here http://support.apple.com/kb/HT1222
If you need to update multiple computers and would prefer to download the relevant update only once then this can be located on the following webpage http://support.apple.com/downloads/#macosx106
Apple recommends that you back up your system before upgrading to 10.6.4.
• resolve an issue that causes the keyboard or trackpad to become unresponsive
• resolve an issue that may prevent some Adobe Creative Suite 3 applications from opening
• address issues copying, renaming, or deleting files on SMB file servers
• improve reliability of VPN connections
• resolve a playback issue in DVD Player when using Good Quality deinterlacing
• resolve an issue editing photos with iPhoto or Aperture in full screen view
• improve compatibility with some braille displays
Full details of the update are described in the following Apple knowledge base article http://support.apple.com/kb/HT4150
The Mac OS X release also includes a number of security updates, amongst which is an update to Apple’s own malware detection for the HellRTS threat - this is a malicious Trojan pretending to be an iPhoto posting on the internet.
Full details of the security update can be found here http://support.apple.com/kb/HT1222
If you need to update multiple computers and would prefer to download the relevant update only once then this can be located on the following webpage http://support.apple.com/downloads/#macosx106
Apple recommends that you back up your system before upgrading to 10.6.4.
Premier Opinion, Spyware, Trojan or legitimate software?
02/06/10 16:15
With the much-heralded discovery of the latest Mac computer threat, OSX/opinionspy, on a variety of Mac software download sites, the question arises as to whether it is actually Spyware, a Trojan or legitimate software.
Clearly the makers of the 7art screensavers believe it is legitimate software, designed to allow you to download their screensavers freely, based on the understanding that you are participating in a market survey by providing details of your computer usage and online habits.
The integral component of the Premier Opinion software does ask you to accept (and presumably read) their conditions before continuing with the installation - there’s no opt-out choice just for this component.
Clearly the makers of the 7art screensavers believe it is legitimate software, designed to allow you to download their screensavers freely, based on the understanding that you are participating in a market survey by providing details of your computer usage and online habits.
The integral component of the Premier Opinion software does ask you to accept (and presumably read) their conditions before continuing with the installation - there’s no opt-out choice just for this component.
Admittedly, the software does not attempt to obfuscate itself so it should be quite easy to spot if you have installed it, there is a menu bar icon at the top of your screen and most of the software is located in the Applications folder - there’s also a launchd file in LaunchDaemons.
Arguably, this ‘threat’ could be classified as a Trojan rather than spyware i.e. you thought you were downloading just a screensaver but got more than you bargained for because it’s installed all these other components:
Once you install the screensaver there is a root process called PremierOpinion that does appear to be reasonably active; what exactly it is collecting from your computer and how that information is used will determine how nefarious this application is.
Uninstalling the screensaver does NOT remove the Premier Opinion software, for that you will need to run the Premier Opinion Uninstaller located in the /Application/Premier Opinion folder by default.
So the moral of this story is read the license agreement in installers and be fully aware of what you are signing up to. If in doubt, only download and install software that you actually need from websites that you absolutely trust - are your private details and computer usage profile worth the risk!
Apple go from strength to strength in the first Quarter of 2010
20/04/10 21:49
Apple today posted their financial results for its second fiscal quarter of the year, ending in March 2010. Revenue of $13.5 billion and profit of over $3 billion were attributed to sales of 8.75 million iPhones, 10.89 million iPods and almost 3 million Macs shipped in the first 3 months of 2010.
It was the best non-holiday quarter figures ever by Apple, with revenues up almost 50% and profit up 90%. With the recent release of the iPad and “...more extraordinary products in the pipeline for this year” the future is looking extremely interesting and healthy for the Cupertino-based company.
Read more... Apple Reports Second Quarter Results
It was the best non-holiday quarter figures ever by Apple, with revenues up almost 50% and profit up 90%. With the recent release of the iPad and “...more extraordinary products in the pipeline for this year” the future is looking extremely interesting and healthy for the Cupertino-based company.
Read more... Apple Reports Second Quarter Results
27- inch iMac EFI Firmware Update
15/04/10 14:15
If you are fortunate enough to own one of the new 27-inch quad-core iMacs then you’ll be pleased to know that Apple have released a firmware update for Mac OS X 10.6.3 to address a number of issues with high processor usage and display backlighting problems.
As usual the update is available through Software Update and will be downloaded automatically if you have ‘Check for Updates’ selected in your System Preferences.
As usual the update is available through Software Update and will be downloaded automatically if you have ‘Check for Updates’ selected in your System Preferences.
Mac OS X 10.6.3 and Security Update 2010-003 Released
14/04/10 16:16
Apple has released a security update for Snow Leopard and Leopard users. The upgrade covers a single vulnerability in Apple Type Services (ATS) when viewing or downloading documents that contain ‘maliciously crafted embedded fonts’ , which was recently reported in the media and credited to computer security researcher Charlie Miller. An Apple knowledgebase article describes the content of the update in more detail, http://support.apple.com/kb/HT4131
The size of the Leopard update is considerably larger than the Snow Leopard download as it contains previous security patches. As well as being available via Software Updates, the updates can also be manually downloaded via the links below:
Snow Leopard Update (6.5MB)
Leopard Update - Client (218.6MB)
Leopard Update - Server (379.5 MB)
The size of the Leopard update is considerably larger than the Snow Leopard download as it contains previous security patches. As well as being available via Software Updates, the updates can also be manually downloaded via the links below:
Snow Leopard Update (6.5MB)
Leopard Update - Client (218.6MB)
Leopard Update - Server (379.5 MB)
Mac OS X 10.6.3 and Security Update 2010-002 Released
30/03/10 13:49
Apple has released a major update for Mac OS X. The upgrade to Snow Leopard, 10.6.3, is available through Software Update and will be downloaded automatically if you have ‘Check for Updates’ selected in your System Preferences.
You can also manually download the Update from here if you have multiple computers that need updating and only want to download the update once. Be aware that it is 720MB for the update and 784MB for the Combo Update.
Apple recommends that you back up your system before upgrading to 10.6.3.
The update covers general operating system fixes for a wide variety of applications and core technologies, ranging from Time Machine, Mail, iCal to MobileMe, Airport and Directory Services. Further information can be found on the Apple website About the Mac OS X v10.6.3 Update
In addition, the release includes a significant number of security fixes which are detailed in the following knowledgebase article Security Update 2010-002 Note, the Security Update applies to both 10.5.8 and 10.6
You can also manually download the Update from here if you have multiple computers that need updating and only want to download the update once. Be aware that it is 720MB for the update and 784MB for the Combo Update.
Apple recommends that you back up your system before upgrading to 10.6.3.
The update covers general operating system fixes for a wide variety of applications and core technologies, ranging from Time Machine, Mail, iCal to MobileMe, Airport and Directory Services. Further information can be found on the Apple website About the Mac OS X v10.6.3 Update
In addition, the release includes a significant number of security fixes which are detailed in the following knowledgebase article Security Update 2010-002 Note, the Security Update applies to both 10.5.8 and 10.6
Apple Security Update 2010-01
20/01/10 09:44
Apple has released Security Update 2010-01 to fix a number of vulnerabilities in Adobe Flash Player plug-in and to resolve potential problems with Image rendering. The update is available for Mac OS X 10.5.x and Mac OS X 10.6.x and can be downloaded via Software Update on your Mac.
Mac users can read a full description of the Security fixes on the Apple website http://support.apple.com/kb/HT4004
Mac users can read a full description of the Security fixes on the Apple website http://support.apple.com/kb/HT4004
ProtectMac AntiVirus Version 1.1.2 Released
19/12/09 15:30
A new version of ProtectMac AntiVirus has been released. Version 1.12 will be downloaded automatically if you have ‘Checked for Updates’ enabled in the application’s Updating preferences. See Updating Preferences
The new version contains the following changes:
Customers can check the version of ProtectMac AntiVirus they are running in the Application’s About box. Read more...
The new version contains the following changes:
- Clearing the Recent Finder Scans menu has been made more reliable.
- VoiceOver support has been enhanced.
- Improved the editing of the Scheduled Scan time in different time zones.
Customers can check the version of ProtectMac AntiVirus they are running in the Application’s About box. Read more...
Lose/Lose a game too far?
04/11/09 11:42
A Mac OS X arcade-style, shoot’m-up alien game named Lose/Lose has been doing the rounds recently. One of the aims of the author is to supposedly raise questions about the role of these type of video games, whilst using the files on your disk as collateral: every time you kill an alien a random file on your disk is deleted.
At the moment the game can only be downloaded via the author’s website, if you are happy to ignore the big red warning!
KILLING ALIENS IN LOSE/LOSE WILL DELETE FILES ON YOUR HARD DRIVE PERMANANTLY
Although the player is given several warnings about what the game will do, and it may not have been created with malicious intent, the idea of deleting personal files and system files on someone’s Mac to make a point, clearly has an impact on the security and integrity of their system.
So the moral of the story is, if you don’t want to lose your files don’t run the game!
For more information see OSX.LoseGame on the Macintosh Malware page .
At the moment the game can only be downloaded via the author’s website, if you are happy to ignore the big red warning!
KILLING ALIENS IN LOSE/LOSE WILL DELETE FILES ON YOUR HARD DRIVE PERMANANTLY
Although the player is given several warnings about what the game will do, and it may not have been created with malicious intent, the idea of deleting personal files and system files on someone’s Mac to make a point, clearly has an impact on the security and integrity of their system.
So the moral of the story is, if you don’t want to lose your files don’t run the game!
For more information see OSX.LoseGame on the Macintosh Malware page .
ProtectMac AntiVirus Version 1.1.1 Released
07/10/09 18:15
A new version of ProtectMac AntiVirus has been released. Version 1.1.1 will be downloaded automatically if you have ‘Checked for Updates’ enabled in the application’s Updating preferences. See Updating Preferences
The new version contains the following changes:
Customers can check the version of ProtectMac AntiVirus they are running in the Application’s About box. Read more...
The new version contains the following changes:
- a Service to allow Finder Contextual menu scanning on Snow Leopard
- user interface enhancements
- an update to the license renewal feature in the application, that verifies a customer’s license key and redirects the user to the Renewal page of the online store at a click of a button
- ProtectMac menu integrity check on startup.
Customers can check the version of ProtectMac AntiVirus they are running in the Application’s About box. Read more...
Apple Mac OS X 10.6.1 Update
10/09/09 18:01
Apple has released Mac OS X 10.6.1. The first upgrade to Snow Leopard is available through Software Update and will be downloaded automatically if you have ‘Check for Updates’ selected in your System Preferences.
“The 10.6.1 Update is recommended for all users running Mac OS X Snow Leopard version and includes general operating system fixes that enhance the stability, compatibility and security of your Mac.”
There are specific fixes in several areas:
For detailed information on this update, please visit the Apple support website: http://support.apple.com/kb/HT38103
Corresponding security patches have also been release with 10.6.1 and are described in the following knowledgebase article: http://support.apple.com/kb/HT1222
“The 10.6.1 Update is recommended for all users running Mac OS X Snow Leopard version and includes general operating system fixes that enhance the stability, compatibility and security of your Mac.”
There are specific fixes in several areas:
- compatibility with Sierra Wireless 3G modems
- a fix to prevent DVD playback from stopping unexpectedly
- resolution of a problem where automatic account setup in Mail might fail
- printer compatibility drivers failing to be displayed correctly in the printer browser
- problems removing items form the Dock
- unresponsiveness of Motion 4
For detailed information on this update, please visit the Apple support website: http://support.apple.com/kb/HT38103
Corresponding security patches have also been release with 10.6.1 and are described in the following knowledgebase article: http://support.apple.com/kb/HT1222