Trojan virus spreads to as many as 20,000 Macs

By on January 23, 2009 at 5:40 PM.

Trojan virus spreads to as many as 20,000 Macs

Mac users who think they’ve stumbled upon greatness in the form of an alleged copy of iWork ’09 on torrent sites take note – it contains a nasty trojan known as OSX.Trojan.iServices.A. First identified by Integro Security, the trojan works like so:

When installing iWork 09, the iWorkServices package is installed. The installer for the Trojan horse is launched as soon as a user begins the installation of iWork, following the installer’s request of an administrator password. This software is installed as a startup item (in /System/Library/StartupItems/iWorkServices, a location reserved normally for Apple startup items), where it has read-write-execute permissions for root. The malicious software connects to a remote server over the Internet; this means that a malicious user will be alerted that this Trojan horse is installed on different Macs, and will have the ability to connect to them and perform various actions remotely. The Trojan horse may also download additional components to an infected Mac.

It’s important to note that while this is by no means the first trojan virus outbreak that Mac users have had to deal with, it is of special interest. Unlike trojans of years past, this is the first time hackers have taken the time to concoct a malicious script to be embedded in software that a lot of people are keen to get and actively contact remote severs to cause even more damage to infected systems. If you think your system is infected, there is a simple process to cleaning your system but it does require a complete wipe unfortunately. Open Terminal and enter the following:

  1. sudo su (enter password)
  2. rm -r /System/Library/StartupItems/iWorkServices
  3. rm /private/tmp/.iWorkServices
  4. rm /usr/bin/iWorkServices
  5. rm -r /Library/Receipts/iWorkServices.pkg
  6. killall -9 iWorkServices
  7. Wipe, reformat and reinstall OS X from your master disc

Moral of the story: Buy your software or risk paying the price in other ways.

[Via MacRumors]

Read

52 Comments

Hasta la vista, Macworld

By on January 6, 2009 at 2:43 PM.

Hasta la vista, Macworld

There you have it Apple fans, Apple’s final Macworld keynote has come and gone. As expected, Steve Jobs was nowhere to be found – indeed due to health reasons as many had dismissed as false until Jobs’ recent letter was issued on Monday. Phill Schiller had some pretty big shoes to fill but he did a great job and even threw in a joke or two. As for the announcements, the only surprise was iLife ’09 and we think it was a pretty good surprise in fact. Apple looks to have made some great updates to its suite and we can’t wait to upgrade and start playing with all the new features. As far as the three other big announcements – iWork ’09, the new 17″ MacBook Pro and DRM-free iTunes – leaks did an ok job of covering each one to some extent. In terms of the massive list of rumors that weren’t made a reality today, this year’s Macworld had more rumors surrounding it than ever before so most were obviously destined to be squashed. We would have liked to have seen a refreshed iMac and Mac Mini, case manufacturers would have liked to have seen an iPhone nano and Apple’s board would have liked to have seen a more sustained and significant spike in Apple shares today. Hey, you can’t win ‘em all…

13 Comments

Apple starts off keynote with iLife ’09

By on January 6, 2009 at 12:27 PM.

Apple starts off keynote with iLife ’09

Phil Schiller might not be wearing a black turtle neck but he’s still got some goods to dish this morning at the Macorld keynote. To kick things off, Schiller introduced a new version of iLife – iLife ’09. He showed off a newly updated version of iPhoto, featuring new “Faces” technology that will organize your photos of people, by name, using facial recognition! Select a photo and name a person once, then Faces will identify that person each time you add a new photo of him or her. Then there’s “Places”, which sorts photos according to where they were taken according to geotags. The UI features a map (street or satellite views) with pins representing the location of each photo in an album. Don’t worry if your camera doesn’t support geotagging of course, as you’ll be able to add locations manually within the UI.

More →

13 Comments