Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: David Newsgroups: uk.comp.sys.mac,alt.computer.workshop Subject: Re: So ...... is this real, or imagined? Date: Sun, 16 Feb 2025 20:44:36 +0000 Lines: 46 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Trace: individual.net p346i7kfgEbWEai1WrAetQrHw8uxOikJnTI5By0vAxTu78pC6S Cancel-Lock: sha1:AwO82SjI7kRO7/D21dBYl4x0m7I= sha256:L1BXHu7y7n1ZVRE57aaYDEUbyKmiWGBjatkOyV5rkBM= User-Agent: Mozilla Thunderbird Content-Language: en-GB In-Reply-To: Xref: csiph.com uk.comp.sys.mac:180225 On 16/02/2025 19:55, FromTheRafters wrote: > on 2/16/2025, David supposed : >> On 16/02/2025 15:37, FromTheRafters wrote: >>> on 2/16/2025, David supposed : >>>> On 16/02/2025 11:34, FromTheRafters wrote: >>>>> David wrote : >>>>>> This is a screenshot:- >>>>>> >>>>>> https://i.ibb.co/HLgy7hNf/Screenshot-2025-02-11-at-10-07-47.png >>>>>> >>>>>> I've erased my hard drive, just in case! >>>>> >>>>> Sheesh! >>>> >>>> I have it down to a fine art now! Just for kicks, I did a scan with >>>> EtreCheck too - after I'd erased my drive. Would you like to see it? >>> >>> It's not ramnit again is it? :) >> >> No. You SAW what it was!  Trojan OSX.RustAgent > > Can't find anything on that specific name. It looks like it was just a > couple of attempts to get you to make a mistake, if it had executed > there would have been more files to quarantine. Phew! >> *Can trojans hide from antivirus*? > > Of course, AV's are always playing catch-up to malware purveyors. There > has to be a bad thing, for there to be a thing to detect such bad thing. I wanted my friends here to be absolutely sure about that! >> //The Warezov mail worm used this technique and caused serious issues to >> users. Rootkit technologies – that are generally employed by Trojans – >> can intercept and substitute system functions to make the infected file >> invisible to the operating system and antivirus programs.// > > What does this have to do with what was reported? It was simply an example of a Trojan that DID cause harm. Nothing more. -- David