1 7 8 9 10 11 Previous Next 158 Replies Latest reply: May 30, 2011 7:32 PM by babowa Go to original post Branched to a new discussion.
  • 120. Re: is apple security center safe?
    noondaywitch Level 6 Level 6 (8,130 points)

    Drakita; try the NoScript extension for Firefox. As the malware is triggered by JavaScript it should prevent you ever seeing it. (I haven't seen it yet)

  • 121. Re: is apple security center safe?
    Kurt Lang Level 7 Level 7 (31,995 points)

    Safari users can open the preferences, and under the Security tab, remove the check box on "Enable JavaScript".

  • 122. Re: is apple security center safe?
    WZZZ Level 6 Level 6 (12,225 points)

    Except, with NoScript you have to be careful which sites you allow. Once you allow a site, you've enabled JavaScript for that site and you're just as vulnerable as running without NoScript, at least for this thing.

  • 123. Re: is apple security center safe?
    noondaywitch Level 6 Level 6 (8,130 points)

    True; but unless some functionality is missing that one actually requires, there's no incentive to allow scripts from any source.

  • 124. Re: is apple security center safe?
    WZZZ Level 6 Level 6 (12,225 points)

    That's how I use it, but there are times when you just have to take a chance.

  • 125. Re: is apple security center safe?
    R C-R Level 6 Level 6 (14,175 points)

    babowa wrote:

    And although it's been on several different sites, the major ones "infiltrated" appear to be Hotmail, Google Images, and now Yahoo.

     

    It's good to be prepared when online in general, but especially those websites.

    It isn't exactly "on" those sites but it might as well be. You can search Apple Support Communities with the phrase "SEO poisoning" to find several posts that explain how it works, but the bottom line is any web page that might show the results of a popular search term (even if you didn't do the search yourself) might include links to the bogus pages containing the Javascript that try to download the malware.

     

    That includes links in advertisements,"related topics" lists, & so on -- anything that might use one of the major search providers like Google or Yahoo to add content to the page.

  • 126. Re: is apple security center safe?
    babowa Level 7 Level 7 (23,300 points)

    I understand that; in my case, I moved the cursor from this site (somewhere on one of these threads) across/up to the left to my Yahoo Inbox tab (logged in), so I really don't think I hit any ads on the way. I had logged in earlier and have always left my Inbox open/available in a tab; next tab is another web based email account, third tab is ASC.

  • 127. Re: is apple security center safe?
    R C-R Level 6 Level 6 (14,175 points)

    By "Yahoo" do you mean Yahoo! Mail or anything else that runs ads from Yahoo?

     

    Message was edited by: R C-R

  • 128. Re: is apple security center safe?
    babowa Level 7 Level 7 (23,300 points)

    Yes; my workflow is: launch Firefox (completely empty page = home page); first tab: sign in at Yahoo Mail/go to Inbox and leave that open for future checks; next tab: another web based email account (that is where I get all my Apple email notifications; third tab: sign in to ASC and then leave whatever page I'm on open.

     

    Aside from doing other things (and usually having a few other tabs open temporarily), I will come back to those three tabs several times throughout the day, checking for new content here and new emails at Yahoo or my other account.

     

    The only time I encounter ads on these three is at Yahoo, but that Inbox wasn't open at that point - I was on ASC and hitting the tab for the Yahoo Inbox. And, it was too early in the day for me to have gone to any other sites yet.

  • 129. Re: is apple security center safe?
    R C-R Level 6 Level 6 (14,175 points)

    FWIW, Yahoo does not seem to be very good about keeping its ads free of exploits, according to this article from a year ago or so. It is mostly about stuff targeting windows, but the same sort of Javascript based techniques might be at work for this Mac trojan.

     

    At least on Macs, you still have to install it….

  • 130. Re: is apple security center safe?
    jd.simpson Level 1 Level 1 (0 points)

    This Apple Security Center popup appeared on my screen today. I'd read about these things, and realized it was a scam of some sort. But it dropped about seven ZIP files in downloads without my having done anything. I immediately dragged them to Trash and then emptied the trash, without opening or executing anything. Am I okay?

  • 131. Re: is apple security center safe?
    R C-R Level 6 Level 6 (14,175 points)

    If you did not install anything, you should be OK. Please see the notice at the top of Mac OS X v10.6 Snow Leopard (among others) for removal info if you did.

  • 132. Re: is apple security center safe?
    noondaywitch Level 6 Level 6 (8,130 points)

    Should be. You can check the file locations mentioned here; http://www.reedcorner.net/news.php/?p=138

    but if no installer ran there shouldn't be anything to find.

  • 133. Re: is apple security center safe?
    DMerz Level 1 Level 1 (20 points)

    This is my first Apple computer and I love it.  The MS Windows world always had problems with viruses, malware etc.

     

    However, I think it is becoming very evident that these hackers/scammers are going after Mac's too.  I'm glad that these forums here exist.  When I bought my MacBook Pro in Dec. 2010, the Apple sales guys said over and over that no AV/malware software was needed.  I spoke to a more "technical" Apple guy at my local Apple store, just recently, and he said the same thing. 

     

    Don't know if anyone from Apple corporate reads these forums?  But if they do, it might be a good suggestion to not have your sales people "push" so strongly on new Mac buyers that they are invincible to the threats on the internet.  Toning down that message, a bit, might be a good thing to do. 

     

    So, I asked this in a reply on another thread.  What is the consensus on a recommendation for a proper AV software?  I've heard about VirusBarrier X6, Norton IS etc.  Anything with added firewall protection is desired too.  Will sacrifice a little in performance for the sake of safety...

     

    Thanks and look forward to your replies!

  • 134. Re: is apple security center safe?
    babowa Level 7 Level 7 (23,300 points)
    So, I asked this in a reply on another thread.  What is the consensus on a recommendation for a proper AV software?  I've heard about VirusBarrier X6, Norton IS etc.  Anything with added firewall protection is desired too.  Will sacrifice a little in performance for the sake of safety...

     

    As far as I know, the only problem at the moment is the current threat of trojans; that is not a virus, so no AV software will protect you. The only thing that will is you: a trojan needs to be installed by you with your password. It may download without your knowledge, but unless you install it, no harm done - just delete it and empty the trash. I stopped mine before it downloaded. So, if nothing is installed, then how will AV software help?

    You might want to spend some time reading this:

     

    http://www.reedcorner.net/guides/macvirus/