Digital Spy

Search Digital Spy
 

DS Forums

 
 

Just had my first Mac virus


Reply
Thread Tools Search this Thread
Old 05-05-2013, 00:27
cnbcwatcher
Forum Member
 
Join Date: Sep 2008
Location: At college, in L.A.'s office
Posts: 51,214

It happened a few minutes ago. I was browsing the internet while watching TV, as you do, and all of a sudden a warning message pops up saying that a Trojan has been detected and it was put into Sophos AV's quarantine. I've just got rid of it completely now so it can't do any damage. As I type my dad is gloating because I was very smug about how Macs don't get viruses and blah blah blah. I'm rather embarrassed actually I forgot to take a screenshot.

And who says Macs don't get viruses?
cnbcwatcher is offline Follow this poster on Twitter   Reply With Quote
Please sign in or register to remove this advertisement.
Old 05-05-2013, 00:32
max99
Forum Member
 
Join Date: Jun 2005
Posts: 8,671
But was it a Trojan specifically aimed at Macs or did the AV simply detect and quarantine a Windows Trojan from whichever dodgy website you were browsing?
max99 is offline   Reply With Quote
Old 05-05-2013, 00:39
cnbcwatcher
Forum Member
 
Join Date: Sep 2008
Location: At college, in L.A.'s office
Posts: 51,214
I don't know and I was not browsing dodgy websites. I was listening to some music and reading Harry Potter fanfiction (I know ). I don't know if my AV would detect Windows Trojans.
cnbcwatcher is offline Follow this poster on Twitter   Reply With Quote
Old 05-05-2013, 00:52
bspace
Forum Member
 
Join Date: Jul 2004
Posts: 8,507
http://en.wikipedia.org/wiki/Computer_virus

trojan - not virus
bspace is offline   Reply With Quote
Old 05-05-2013, 01:25
Fried Kickin
Forum Member
 
Join Date: Jun 2007
Posts: 50,365
I was waiting for this post.
Fried Kickin is offline   Reply With Quote
Old 05-05-2013, 07:33
IvanIV
Forum Member
 
Join Date: May 2006
Posts: 21,243
That changes everything. Anyway, very likely it was a Windows malware unable to run on OSX.
IvanIV is offline   Reply With Quote
Old 05-05-2013, 22:31
cnbcwatcher
Forum Member
 
Join Date: Sep 2008
Location: At college, in L.A.'s office
Posts: 51,214
That changes everything. Anyway, very likely it was a Windows malware unable to run on OSX.
It could have been, but would a Mac AV warn a user if it detected a Windows virus?
cnbcwatcher is offline Follow this poster on Twitter   Reply With Quote
Old 05-05-2013, 22:32
Stig
Forum Member
 
Join Date: Sep 2003
Location: Sandy Heath, Beds, UK
Posts: 7,024
It could have been, but would a Mac AV warn a user if it detected a Windows virus?
Doesn't Sophos have a log to say what malware it was?

That would solve the arguement.
Stig is offline   Reply With Quote
Old 05-05-2013, 22:52
curiousclive
Forum Member
 
Join Date: Dec 2011
Location: Slough, UK
Posts: 371
Isn't it amazing that if a Mac gets a Trojan it is not a Mac Trojan but a windows one. How can it be a windows one if they are running Mac software unless they were running windows on their Mac?
curiousclive is offline   Reply With Quote
Old 05-05-2013, 22:56
whoever,hey
Forum Member
 
Join Date: Mar 2006
Posts: 29,954
Isn't it amazing that if a Mac gets a Trojan it is not a Mac Trojan but a windows one. How can it be a windows one if they are running Mac software unless they were running windows on their Mac?
Because at the end of the day data is data?

The "AV software" is still just picking up signatures with in the data and identifying it as malicious. These signatures are cross platform.
whoever,hey is offline   Reply With Quote
Old 05-05-2013, 22:58
s2k
Forum Member
 
Join Date: Apr 2006
Posts: 5,088
Oh god are we really doing this again....

Originally Posted by curiousclive
How can it be a windows one if they are running Mac software unless they were running windows on their Mac?
The definition files can include references for threats for other OSes. While the code cant normally be executed on that host it is still a threat in that it could get inadvertently transferred via USB, end up on a bootcamp partition, in a network share etc.
s2k is offline   Reply With Quote
Old 06-05-2013, 03:04
DJGM
Forum Member
 
Join Date: Nov 2005
Location: Whitefield, Manchester
Posts: 3,576
Isn't it amazing that if a Mac gets a Trojan it is not a Mac Trojan but a windows one. How can it be a windows one
if they are running Mac software unless they were running windows on their Mac?
An AV program for Mac can still detect a Windows virus or trojan as a threat. Even if it can't actually cause any problems
on Mac OS X, it could still infect Windows if the Mac user also dual boots with Windows via Boot Camp, or it could be
inadvertently passed on to a friend of the Mac user, if the other person is running Windows.
DJGM is offline   Reply With Quote
Old 06-05-2013, 13:02
ChickenWings
Forum Member
 
Join Date: Dec 2012
Posts: 1,876
Sophos for Mac does by default scan for Windows viruses too, just to settle that argument -- you don't need to be running Windows and the "virus" doesn't need to be able to run on a Mac for Sophos to identify and zap it.

It does this because some corporations run Macs and Windows alongside each other and you don't want to be spreading malware around even if it doesn't affect OS X; it's much better to zap it as soon as it's detected rather than it be propagated through SMB shares and such and spread to the Windows machines.
ChickenWings is offline   Reply With Quote
Old 06-05-2013, 13:26
Stiggles
Forum Member
 
Join Date: Jan 2011
Location: Dundee, Scotland
Posts: 8,079
It happened a few minutes ago. I was browsing the internet while watching TV, as you do, and all of a sudden a warning message pops up saying that a Trojan has been detected and it was put into Sophos AV's quarantine. I've just got rid of it completely now so it can't do any damage. As I type my dad is gloating because I was very smug about how Macs don't get viruses and blah blah blah. I'm rather embarrassed actually I forgot to take a screenshot.

And who says Macs don't get viruses?
Uhm...you!!
Stiggles is offline   Reply With Quote
Old 06-05-2013, 13:31
Maxatoria
Forum Member
 
Join Date: Apr 2011
Posts: 6,220
These days not running some sort of AV is risky as it wouldn't take much to forward a virus to a windows machine and you wouldn't be very popular especially if it was to a potential big customer
Maxatoria is offline   Reply With Quote
Old 06-05-2013, 14:19
cnbcwatcher
Forum Member
 
Join Date: Sep 2008
Location: At college, in L.A.'s office
Posts: 51,214
Doesn't Sophos have a log to say what malware it was?

That would solve the arguement.
I think it does, but I removed the piece of malware very quick before it could do any damage. If it was a Windows virus it could sneak its way into a file and if said file was shared with the Dark Side the damage would be done there.

Isn't it amazing that if a Mac gets a Trojan it is not a Mac Trojan but a windows one. How can it be a windows one if they are running Mac software unless they were running windows on their Mac?
I was using my Macbook Air rather than my Pro and I wasn't running Windows on it. I'm going to run it on my Pro at some point though. It had to be a Mac virus.
cnbcwatcher is offline Follow this poster on Twitter   Reply With Quote
Old 06-05-2013, 14:50
curiousclive
Forum Member
 
Join Date: Dec 2011
Location: Slough, UK
Posts: 371
My point was that everyone is claiming it is a windows Trojan with no proof that it is not a Mac Trojan.
curiousclive is offline   Reply With Quote
Old 06-05-2013, 15:19
max99
Forum Member
 
Join Date: Jun 2005
Posts: 8,671
My point was that everyone is claiming it is a windows Trojan with no proof that it is not a Mac Trojan.
But no one is claiming that. Statistically, it's far more likely to be Windows malware. As Stig said, the log file needs to be examined.
max99 is offline   Reply With Quote
Old 06-05-2013, 18:37
MartinPickering
Forum Member
 
Join Date: Sep 2003
Location: A small Greek island
Posts: 2,948
From a guy who ought to know:-
There is no Mac malware that behaves as a virus, attaching itself to other files.
On this page (amongst the question/answers).
http://www.reedcorner.net/mac-av-detection-rates/

So that limits the types of malware to ... trojans only? (I'm not aware of any OSX malware key loggers.)
And most Mac trojans require installation by the user. So, for anyone with a brain cell, the risk of problems on a Mac is miniscule. (Not zero but really, really low.) Don't forget that the latest MacOS has its own built-in "Gatekeeper" protection. Consequently, I see no point in running anything extra. It's likely to cause more problems than it solves.

See http://www.pcadvisor.co.uk/features/...ity-explained/

I'll just add that I've been running Macs on-line since 1995. No "protection" installed and no malware problems so far. Of course that's only 18 years so it's early days, still.

As far as I'm concerned, Windows users should be running their own protection. I'm not going to risk slowing down my Macs (or causing other problems) just in case I finally manage to 1. download a malware package and 2. become demented enough to pass it to someone else accidentally. The chances of those two occurrences are lower than the chances of my winning the lottery.
MartinPickering is offline   Reply With Quote
Old 06-05-2013, 19:04
s2k
Forum Member
 
Join Date: Apr 2006
Posts: 5,088
I'm not going to risk slowing down my Macs (or causing other problems) just in case I finally manage to 1. download a malware package and 2. become demented enough to pass it to someone else accidentally. The chances of those two occurrences are lower than the chances of my winning the lottery.
This is no different to the people that don't run AV on their Windows PC because they can't visibly see anything wrong with their machine nor care about the carnage it is causing others. It is also the reason why so many people promptly got screwed over by the threats that have hit OS X. The overwhelming arrogance put them in a major false sense of security.

If you don't want to run security software that's your decision, but telling others to do the same because you haven't had any issues yourself is stupid, ignorant and reckless.
s2k is offline   Reply With Quote
Old 06-05-2013, 19:23
whoever,hey
Forum Member
 
Join Date: Mar 2006
Posts: 29,954
From a guy who ought to know:-

On this page (amongst the question/answers).
http://www.reedcorner.net/mac-av-detection-rates/

So that limits the types of malware to ... trojans only? (I'm not aware of any OSX malware key loggers.)
And most Mac trojans require installation by the user. So, for anyone with a brain cell, the risk of problems on a Mac is miniscule. (Not zero but really, really low.) Don't forget that the latest MacOS has its own built-in "Gatekeeper" protection. Consequently, I see no point in running anything extra. It's likely to cause more problems than it solves.

See http://www.pcadvisor.co.uk/features/...ity-explained/

I'll just add that I've been running Macs on-line since 1995. No "protection" installed and no malware problems so far. Of course that's only 18 years so it's early days, still.

As far as I'm concerned, Windows users should be running their own protection. I'm not going to risk slowing down my Macs (or causing other problems) just in case I finally manage to 1. download a malware package and 2. become demented enough to pass it to someone else accidentally. The chances of those two occurrences are lower than the chances of my winning the lottery.
Yep. Sums up the idiocy and arrogance of OSX users.
whoever,hey is offline   Reply With Quote
Old 06-05-2013, 19:32
Maxatoria
Forum Member
 
Join Date: Apr 2011
Posts: 6,220
Theres a difference here between someone willing to take the risk of getting caught and who is willing to take the risk should they get caught without their black turtleneck on when praying to Culpertino 5 times a day and most most corporate IT people who just ensure everything protected be it mac/pc/solaris/some sort of mainframe sat in the back of the server room known as black bessy and served by the pale operators who know the sacred CL commands as its better to ensure everything is protected than hope that should something nasty appear in the world you won't get bad press should you have to issue an apology due to a virus finally getting through
Maxatoria is offline   Reply With Quote
Old 06-05-2013, 20:25
max99
Forum Member
 
Join Date: Jun 2005
Posts: 8,671
And most Mac trojans require installation by the user. So, for anyone with a brain cell, the risk of problems on a Mac is miniscule.
It's been covered here many times before, but you keep ignoring it - the average computer user is utterly clueless when it comes to security. And computers.

From your guy who ought to know:

However, there are some cases where AV software may be needed right now. For example:
[LIST][*]If you need to keep Java turned on in your web browser, AV software may be a good idea to avoid malware that takes advantage of Java vulnerabilities.[*] If you are using a Mac in an environment where AV software is required[*] If you frequently trade files with Windows users and donít want to be accused of passing on a virus[*] If you want the peace of mind and donít mind installing software that may be obtrusive[*] If you canít be bothered to give any thought to what you download, though this is a very dangerous attitude on todayís internet[*] If you are not at all tech savvy and have trouble accurately determining what is trustworthy and what is not[*] If there is a major change in the malware affecting Mac users (in which case I will note it here)[/LIST]
Simple, practical advice. Nothing to do with people having brain cells.
max99 is offline   Reply With Quote
Old 06-05-2013, 21:44
IvanIV
Forum Member
 
Join Date: May 2006
Posts: 21,243
One can still come across a malware that uses vulnerabilities of an OS and/or a browser, but it's a social engineering nowadays, just persuade a user they should run your programme.
IvanIV is offline   Reply With Quote
Old 07-05-2013, 07:31
PPhilster
Inactive Member
 
Join Date: Apr 2013
Posts: 1,693
It happened a few minutes ago. I was browsing the internet while watching TV, as you do, and all of a sudden a warning message pops up saying that a Trojan has been detected and it was put into Sophos AV's quarantine. I've just got rid of it completely now so it can't do any damage. As I type my dad is gloating because I was very smug about how Macs don't get viruses and blah blah blah. I'm rather embarrassed actually I forgot to take a screenshot.

And who says Macs don't get viruses?
There are different types of malware? You didn't have a virus.
PPhilster is offline   Reply With Quote
 
Reply



Thread Tools Search this Thread
Search this Thread:

Advanced Search

 
Forum Jump


All times are GMT. The time now is 04:09.