Trojan detected message while using Safari

Bubbelz wrote:

A) downloads are exported to the download manager ...

Are you perhaps talking about the quarantine function built into the OS X system level download services? All downloads that don't come from sites with valid Certificate Authority are quarantined if they contain executable code.

If so, note that this only applies to download-capable apps that use those system services, like Safari or most other browsers written for OS X. If you are using some client application that instead uses its own download routines, you are relying on whatever it provides for quarantine or other security measures.

Note that this also would apply to malware that (once installed & running) used its own download routines to download other malicious code. In this scenario, the initial malware app could just be a 'foot in the door' to hold it open for more lengthy & powerful code to come.

I use this 3rd party software: http://mac.eltima.com/download-manager.html and no I barely don't use torrents. No it doesn't provide protection, but it requires me to confirm each download. So no sneak download can start without my knowledge..

I remember Little Snitch, but hadn't downloaded it, I'll look at it again, thanks 🙂

R C-R wrote:

ds store wrote:

The problem is Safari doesn't confirm with the user before a download occurs with a opt out option, other browsers do.

That's the only change Safari needs to make and all these trojans will go away.

Not true. As long as users can be tricked into downloading & installing them, trojans will not go away.

Safari isn't contributing to the conditioning of the user to be wary of Trojans.

It's leading users into a false sense of security that they can download and run anything on their machines without consequence, that "OS X will protect me".

Well OS X isn't perfect, if the MacDefender Trojan proceeded to delete all the users files if they didn't pay the $99, you would be hearing a lot of wailing and Apple bashing right about now.

You said an opt out option added to Safari would make all these trojans go away. It won't. All the trojans have to do is add a functional "Download now" button to the simulated scan to convince users to download & run it to remove the imaginary infections it finds. If users aren't convinced by the simulated scan, they have no reason to install it, whether it downloads automatically or not.

@Phyllis, is this what you saw? I stumbled upon it while searching wallpapers. Make sure you've updated your Mac, Apple released an update to their malware detection. I blurred out the links and two (in the US) possibly illegal bookmarks.