Re: Decent AV for Mac OS X

From	Paul Sture <paul@sture.ch>
Subject	Re: Decent AV for Mac OS X
Newsgroups	comp.sys.mac.system, comp.sys.mac.apps
References	(2 earlier) <jll88v$8kk$1@reader1.panix.com> <HelpfulHarry-0604121142090001@203-118-187-186.dsl.dyn.ihug.co.nz> <4f7ee461$0$2240$c3e8da3$3a1a2348@news.astraweb.com> <HelpfulHarry-0704121030540001@203-118-187-203.dsl.dyn.ihug.co.nz> <1ki6jyx.1sm4dk513j2ksfN%dempson@actrix.gen.nz>
Organization	PostgreSQL and SQLite
Date	2012-04-07 11:55 +0200
Message-ID	<4hf559-ibv.ln1@news.sture.ch> (permalink)

Cross-posted to 2 groups.

Show all headers | View raw

On Sat, 07 Apr 2012 12:28:56 +1200, David Empson wrote:

> John Gruber of Daring Fireball (who is a pretty reliable source, in my
> opinion) said that several of his readers have reported they were
> affected by this. The problem really is out there, but the number of
> infected machines may be up for debate.
> 
> http://daringfireball.net/
> 
> Find the heading for Thursday 5 April 2010, then below that "Flashback
> Trojan Reportedly Controls Half a Million Macs and Counting"
> 
> "UPDATE 2: Via email and public Twitter replies, I've seen reports from
> about a dozen or so DF readers who've been hit by this. And they all
> seem like typical DF readers — sophisticated, experienced, if not
> downright expert Mac users. It's not an epidemic, but it's definitely
> real, and insidious."
> 
> The details of what it does are out there if you read the reports from
> the anti-virus vendors. For the moment it appears to be limited to
> "phone home" and injecting code into certain web sites, but once the
> trojan is installed it can download new code at will from the home base,
> so could do anything in future.

Another Ars Technica report from yesterday evening (I assume US time)

<http://arstechnica.com/apple/news/2012/04/new-analysis-backs-half-
million-mac-infection-estimate.ars>

And Ars Technica has expanded on F-Secure's original text (though I note 
that like the rest they have still blindly copied the first bit of the 
instructions - points 2 and 3 are the wrong way round).

<http://arstechnica.com/apple/news/2012/04/how-to-check-forand-get-rid-
ofa-mac-flashback-infection.ars>

Disabling Java on your Mac with screen shots:

<http://www.f-secure.com/weblog/archives/00002330.html>
-- 
Paul Sture

Thread

Decent AV for Mac OS X *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-05 18:46 -0400
  Re: Decent AV for Mac OS X Jolly Roger <jollyroger@pobox.com> - 2012-04-05 15:58 -0700
    Re: Decent AV for Mac OS X briang@panix.com (Brian Gordon) - 2012-04-05 23:01 +0000
      Re: Decent AV for Mac OS X HelpfulHarry@BusyWorking.com (Helpful Harry) - 2012-04-06 11:42 +1200
        Re: Decent AV for Mac OS X Warren Oates <warren.oates@gmail.com> - 2012-04-06 08:41 -0400
          Re: Decent AV for Mac OS X HelpfulHarry@BusyWorking.com (Helpful Harry) - 2012-04-07 10:30 +1200
            Re: Decent AV for Mac OS X Patty Winter <patty1@wintertime.com> - 2012-04-06 23:48 +0000
              Re: Decent AV for Mac OS X HelpfulHarry@BusyWorking.com (Helpful Harry) - 2012-04-07 12:46 +1200
            Re: Decent AV for Mac OS X dempson@actrix.gen.nz (David Empson) - 2012-04-07 12:28 +1200
              Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-07 11:55 +0200
                Re: Decent AV for Mac OS X Jolly Roger <jollyroger@pobox.com> - 2012-04-07 08:28 -0700
              Re: Decent AV for Mac OS X Patty Winter <patty1@wintertime.com> - 2012-04-07 17:09 +0000
                Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-07 14:19 -0400
      Re: Decent AV for Mac OS X jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2012-04-06 14:58 +1200
        Re: Decent AV for Mac OS X *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-05 23:46 -0400
          Re: Decent AV for Mac OS X *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-06 00:10 -0400
        Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-07 14:28 -0400
          Re: Decent AV for Mac OS X jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2012-04-08 09:46 +1200
            Re: Decent AV for Mac OS X *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-07 18:33 -0400
              Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-08 12:51 +0200
                Re: Decent AV for Mac OS X Ant <ant@zimage.comANT> - 2012-04-08 06:41 -0700
                Re: Decent AV for Mac OS X Wes Groleau <Groleau+news@FreeShell.org> - 2012-04-08 14:00 -0400
                Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-09 08:35 +0200
              Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-08 14:17 -0400
            Re: Decent AV for Mac OS X dempson@actrix.gen.nz (David Empson) - 2012-04-08 10:34 +1200
              Re: Decent AV for Mac OS X *Hemidactylus* <ecphoric@hotmail.com> - 2012-04-07 19:08 -0400
                Re: Decent AV for Mac OS X PhillipJones <pjones1@kimbanet.com> - 2012-04-07 22:11 -0400
              Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-09 08:57 +0200
                Re: Decent AV for Mac OS X Michelle Steiner <michelle@michelle.org> - 2012-04-09 08:23 -0700
                Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-10 09:30 +0200
                Re: Decent AV for Mac OS X HelpfulHarry@BusyWorking.com (Helpful Harry) - 2012-04-11 09:22 +1200
                Re: Decent AV for Mac OS X jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2012-04-11 10:03 +1200
                Re: Decent AV for Mac OS X dorayme <dorayme@optusnet.com.au> - 2012-04-11 08:16 +1000
                Re: Decent AV for Mac OS X HelpfulHarry@BusyWorking.com (Helpful Harry) - 2012-04-11 13:18 +1200
                Re: Decent AV for Mac OS X dorayme <dorayme@optusnet.com.au> - 2012-04-11 12:24 +1000
            Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-08 12:45 +0200
              Re: Decent AV for Mac OS X "Geoffrey S. Mendelson" <gsm@mendelson.com> - 2012-04-08 11:49 +0000
              Re: Decent AV for Mac OS X jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2012-04-09 11:36 +1200
            Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-08 13:53 -0400
              Re: Decent AV for Mac OS X Wes Groleau <Groleau+news@FreeShell.org> - 2012-04-08 14:02 -0400
                Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-08 14:19 -0400
                Re: Decent AV for Mac OS X Wes Groleau <Groleau+news@FreeShell.org> - 2012-04-08 14:50 -0400
                Re: Decent AV for Mac OS X Steve Thompson <smt@vgersoft.com> - 2012-04-08 14:59 -0400
                Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-08 15:18 -0400
                Re: Decent AV for Mac OS X Paul Sture <paul@sture.ch> - 2012-04-09 09:02 +0200
  Re: Decent AV for Mac OS X Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-04-05 19:56 -0400
  Re: Decent AV for Mac OS X "Mr. Strat" <rag@nospam.techline.com> - 2012-04-06 09:58 -0700

csiph-web