New Mac malware variant surfaces, poses as PDF

chscag · chscag #1 (**permalink**)

09-24-2011, 03:20 PM

New Mac malware variant surfaces, poses as PDF

vansmith · vansmith #2 (**permalink**)

09-24-2011, 04:07 PM

Quote:

We’ve written in the past about not clicking on links or downloading attachments in email messages from people you don’t know, and about unchecking Safari’s Open ‘Safe’ Files After Downloading option (Safari -> Preferences -> General); as long as you practice common sense, you should be safe from most malicious attacks

This continues to be, by far, the worst "feature" of Safari especially when one considers that it is checked by default. No other browser has such a feature enabled by default and for good reason.

Quote:

So even though Trojan-Dropper:OSX/Revir.A may not pose an immediate danger, it is a reminder that you should stay alert and take sensible precautions in case it—or something like it—morphs into a real threat

Where have I heard this before? I'll give you a hint...it's me.

baggss · baggss #3 (**permalink**)

09-24-2011, 04:38 PM

I thought with the last update to Safari that "feature" was now unchecked by default...

vansmith · vansmith #4 (**permalink**)

09-24-2011, 05:49 PM

That might very well be - I can't remember if I went and unchecked it or if it was like that by default.

dtravis7 · dtravis7 #5 (**permalink**)

09-24-2011, 06:04 PM

Quote:

Originally Posted by vansmith

This continues to be, by far, the worst "feature" of Safari especially when one considers that it is checked by default. No other browser has such a feature enabled by default and for good reason.

Not sure. I do know for sure at one point it was not being checked but in Lion it was on both installs. One Snow Leopard I did for a friend Clean Install on new HDD did not have it checked. It should NEVER be checked. There is no reason for it to be! They should eliminate that checkbox.

Quote:

Originally Posted by vansmith

Where have I heard this before? I'll give you a hint...it's me.

And a few others here!

Grin Me too! (Dennis takes off his Foil Hat)!

@Baggss, I thought so but the last two Clean Installs of Lion had it checked.

MacLicious · MacLicious #6 (**permalink**)

09-25-2011, 07:02 AM

Thanks! Didn't know about that. I have unchecked it.

technologist · technologist #7 (**permalink**)

09-25-2011, 07:05 PM

I just checked my XProtect.plist, and there's an entry for OSX.Revir.A.
XProtect.meta.plist indicates the last update was downloaded to my machine Fri, 23 Sep 2011 18:03:15 GMT.

So this has been neutered already. Not an issue.

chscag #1 (permalink)
Member Since: Jan 23, 2008 Location: Fort Worth, Texas Posts: 32,375 Mac Specs: 21.5" iMac 2.5 GHz i5, iPad 3rd Gen., 3 iPods	09-24-2011, 03:20 PM New Mac malware variant surfaces, poses as PDF Community Guidelines
	QUOTE Thanks

vansmith #4 (permalink)
Member Since: Oct 19, 2008 Location: Ottawa Posts: 15,452 Mac Specs: 2012 13" MBP (2.5 i5, 8GB)	09-24-2011, 05:49 PM That might very well be - I can't remember if I went and unchecked it or if it was like that by default. Important Links: Community Guidelines : Use the reputation system if you've been helped. M-F Blog :: Write for the blog :: M-F IRC Channel - Chats every Sunday at 8PM EST.
	QUOTE Thanks

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Official antivirus, malware, and firewall FAQ	schweb	Switcher Hangout	120	07-28-2011 04:27 PM
Mac Users Get More ISP Choices	schweb	Apple Rumors and Reports	1	03-06-2003 10:57 AM

New Mac malware variant surfaces, poses as PDF

Internet Services

Web Development

Digital Marketing

Consumer Tech

MacLicious #6 (permalink)
Member Since: Nov 26, 2009 Location: Ontario, Canada Posts: 262	09-25-2011, 07:02 AM Thanks! Didn't know about that. I have unchecked it.
	QUOTE Thanks

technologist #7 (permalink)
Member Since: Mar 30, 2004 Location: USA Posts: 4,744 Mac Specs: 12" Apple PowerBook G4 (1.5GHz)	09-25-2011, 07:05 PM I just checked my XProtect.plist, and there's an entry for OSX.Revir.A. XProtect.meta.plist indicates the last update was downloaded to my machine Fri, 23 Sep 2011 18:03:15 GMT. So this has been neutered already. Not an issue.
	QUOTE Thanks

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)