The Official Mac AntiVirus and Firewall FAQ

[dtravis7]

A good Antivirus on the Windows side should be all you need. Any Virus's that come along will be for Windows and the AV in Windows should zap them. I use Antivir here on my windows machines and have many times downloaded files on my Macs and networked copied them to the Windows systems. Antivir many times went off and did it's job just like it would if I were using Windows to download the file.

 

[New2TheMac]

I noticed when doing a new install that one of the Apple updates listed was a security update. When going online without this security update installed is my computer vulnerable? I installed the update but it took 2 hours to do all of the updates. During those 2 hours was my then not-updated computer vulnerable to attack/hacking?

 

[TattooedMac]

I noticed when doing a new install that one of the Apple updates listed was a security update. When going online without this security update installed is my computer vulnerable? I installed the update but it took 2 hours to do all of the updates. During those 2 hours was my then not-updated computer vulnerable to attack/hacking?

No not at all. It was just that, a update. There is security already on your Mac, they where just giving you a update, so when you where dl it, you where safe, and had no threats from the outside.... Rest easy my friend, all is good in the apple world

 

[New2TheMac]

I have a firewall question. If I select block all incoming connections under firewall settings I noticed stealth mode has a check next to it but is greyed out. Does this mean stealth mode is on, and if so why does it get greyed out when block all incoming connections is checked?

 

[cwa107]

I have a firewall question. If I select block all incoming connections under firewall settings I noticed stealth mode has a check next to it but is greyed out. Does this mean stealth mode is on, and if so why does it get greyed out when block all incoming connections is checked?

Because it's redundant. If you block ALL incoming connections, then you're already blocking ICMP echo (ping), which is what stealth mode does essentially.

For the most part, the software firewall is really not a huge necessity. If it doesn't leave your home network, it's really not of concern at all.

By default, with the firewall off, OS X doesn't respond on any known ports and is mostly transparent (you'd have to be a very motivated hacker to find it). With it turned on and in stealth mode, there's nothing to worry about.

 

[handofdoom]

dont do it

i installed clamx and it through my system in to a tail spin. i wont install anit virus on my imac.

Many many switchers coming from
Windows world are always concerned about whether or not they need a firewall or antivirus software for their Mac. The short answer: maybe, it's a personal choice.

Having a firewall is always a necessity to protect your computer and network from hackers who could steal data or harm your machines. Luckily Mac OSX has it's own built-in firewall that can be activated in the Sharing pref pane in System Preferences.

Now when it comes to antivirus software it gets trickier and there isn't as much agreement. Here are the normal pros and cons...

Pros:

• If you use the machine in a mixed network antivirus software will help stop you from further infecting the network. While your Mac can't be infected by a Windows virus, it can pass it on.
• Even though there is not a virus for Mac OSX that doesn't mean there will never be one. Having antivirus software installed makes you proactive in your protection.
• Most users see no performance decrease or issues when running antivirus software.

Cons:

• There has never been a virus or spyware released for Mac OSX to date.
• It eats up resources on some machines
• In certain situations it could cause stability issues or kernel panics

As you can see there are good reasons on both sides so in the end you need to make up your mind on which your most comfortable with.

If you decide to add an antivirus program to your computer here are some that are available for OSX:

Norton AntiVirus for Mac
McAfee Virex for Mac
ClamXav (free)

 

[fiery]

You should add Intego to the anti-virus software list. I have been using it for years with no problem.

Intego: Leading Internet Security and Privacy Software for Mac

 

[.aMaZe]

Good thing, I seen this thread. I am downloaded the free one right now. I never thought that a Mac can get a virus or something

 

[alexsd123]

Because it's redundant. If you block ALL incoming connections, then you're already blocking ICMP echo (ping), which is what stealth mode does essentially.

For the most part, the software firewall is really not a huge necessity. If it doesn't leave your home network, it's really not of concern at all.

By default, with the firewall off, OS X doesn't respond on any known ports and is mostly transparent (you'd have to be a very motivated hacker to find it). With it turned on and in stealth mode, there's nothing to worry about.

I have a question,

I have the stealth mode enabled in my system preferences but when I check out my system profiler, it says:
Stealth Mode: No

Anyone have any ideas as to why it is not going into stealth mode?? I tried changing around my settings and I don't have any program that would interfere with my firewall.

Thanks

 

[Joy]

I have a macbook pro OS X 10.6.3

I've done the 30 free trial days with 'Protect Mac Antivirus'

It is telling me now that my 30 days is up.

My question is: Do I really need to buy this antivirus for my macbook??

This thread is so long I am too lazy to read all of the posts. Thanks in advance for any opinions!

 

[cwa107]

I have a macbook pro OS X 10.6.3

I've done the 30 free trial days with 'Protect Mac Antivirus'

It is telling me now that my 30 days is up.

My question is: Do I really need to buy this antivirus for my macbook??

This thread is so long I am too lazy to read all of the posts. Thanks in advance for any opinions!

In short, no. If you back up just a few posts, you'll see why I say this.

 

[bobtomay]

I have a macbook pro OS X 10.6.3

I've done the 30 free trial days with 'Protect Mac Antivirus'

It is telling me now that my 30 days is up.

My question is: Do I really need to buy this antivirus for my macbook??

This thread is so long I am too lazy to read all of the posts. Thanks in advance for any opinions!

Let me repeat...

No.

Dump that stuff and get out of the Windows mindset. Use the uninstaller that came with that software to remove it from your Mac.

 

[Joy]

Thank-you CWA and Bob. I've successfully UNinstalled it.

 

[colleenAZ]

Thank-you CWA and Bob. I've successfully UNinstalled it.

Hi Joy,
i was using intego virus barrier for a few years, that one works well with the osx ..... i found that out after trying alot of others, including norton which i was a big fan of when i has a windows machine. un installing norton was a total PITA
when i was using windows i wouldnt have gone with norton internet security pkg .... but like most others say, you can get out of that frame of mind now that your on a mac.
i was using intego just to be proactive. none of the scans i ran ever came up with anything.
i really dont think you need an antivirus, but if it makes you feel better to have one, and you want to be proactive, intego has virus x6, works great with the osx and i never had any issues at all. its a good program.

 

[Kaham]

Right, so after the search option left me with way too many results, I've decided to stop looking for the answer. Therefore my apologies if this has been asked before; finding it was nearly impossible (or I suck at finding search keywords).

Obviously, to protect my MacBook, the first thing I've done after unboxing (besides launching and gasping at its neatness) was turning on the firewall (the OS X Snow Leopard one).

All was good and well, until I started noticing a very annoying notice everytime I launch iTunes (say 1-2 times a day at the very least). The firewall then asks me if I wish to allow incoming connections. I'm getting kind of annoyed that I have to keep allowing this over and over again. I've already browsed to the advanced firewall settings, which marked iTunes with an "allow". Did I overlook anything, or is there another way to allow these incoming iTunes connections once and for all?

Cheers!

 

[whitehorse84]

here's a good one.

I have a co-worker on a mac who emailed me a few excel files (onto my PC note book) and immediately had a virus warning pop up, so obviously he has something on his mac that's trying to come over.

SO, he emailed the same files to my friend on her macbook pro and now whenever she tries to send certain word documents to people they never get there.

Any ideas?

 

[TechieJustin]

here's a good one.

I have a co-worker on a mac who emailed me a few excel files (onto my PC note book) and immediately had a virus warning pop up, so obviously he has something on his mac that's trying to come over.

SO, he emailed the same files to my friend on her macbook pro and now whenever she tries to send certain word documents to people they never get there.

Any ideas?

The recipient's email provider obliterates anything with a virus.
download and install ClamXav - it should be able to disinfect even PC viruses.
Or maybe zip them up and post the ZIP file here and let one of us see what we can do.
The mac may not be infected, I find it unlikely that it is. Whoever send those files to him is most likely infected.

Its fascinating the reactions people have when you tell them their PC has a virus. Its like telling a girl who has a 'good' reputation she has an STD. "Oh no, that can't happen to me!"

 

[whitehorse84]

Thanks Techie!

So I ran ClamXav and scanned her desktop and documents folder and it came up with 68 infected files which I moved/quarantined to a folder I made up in the documents section of the mac.

So, now what? How do I remove the infection without loosing the files she has?

 

[TechieJustin]

Thanks Techie!

So I ran ClamXav and scanned her desktop and documents folder and it came up with 68 infected files which I moved/quarantined to a folder I made up in the documents section of the mac.

So, now what? How do I remove the infection without loosing the files she has?

clamxav can't disinfect files apparently. I think at this point you have to bring the files via USB drive to a PC and disinfect them there.
However, you might want to check this out
FAQ < Main < TWiki
More than likely her files are toasted.
Think of it as a brain tumor. You can go in there and pull the tumor out, but the damage left behind is so severe it isn't worth it.
How did she take it when you said her machine is infected with God knows what? That's another thing, the infected machine needs to be wiped - not disinfected - I mean the hard drive wiped and Windows reinstalled.

 

[ajundra]

Hi Guys

I find it astonishing that mac users still believe they're completely safe. I work as a system administrator at a Swiss university. We have about 550 pc users and more than 2500 mac users. All pcs have AV software installed, where only about 150 macs have it. Now guess what. More than 80% of all recorded infections come from those 150 macs. In the past year I head to support three users that where cut off from the internet by their providers because they were sending out viruses en masse. All three are mac only users. They don't have Windows on their machines. In the 12 years I do this job, I never experienced anything like that with a pc user. How's that possible you ask? Well, these three macs obviously didn't have any AVs installed. They also didn't get their malware from pcs since it was an OSX trojan/spam proxy. They picked it up somewhere on the internet. There are websites which specifically target both operating systems. Sophos has some analysis and demo videos on their website if you're interested.

Another case: We use Windows pcs as printer release stations for plotters and other specialised equipment. Everyone can just plug in their usb sticks and print their files. I'm bormbarded almost daily with emails from the AV on those machines because most of the usb sticks carry some form of the Conficker worm or other autorun virus. The sticks are cleaned everytime. And yet, everytime the users come back, they have the same virus on their stick. These are almost exclusively mac users. Somehow this stuff manages to use their macs as a platform for spreading itself to external disks. Even if this particular virus does not affect the macs directly, we don't know what else they have on their machine. If it can spread, it can also download more malware. I made some tests. 18 of the scanned machines where infected with RSPlug-F. That's a mac only virus. It doesn't exist on Windows.

Now think again. Do you need AVs on mac or not? If you're a techsavy and experienced user, you may have a few more virus-free years ahead. Otherwise... think again.

Kind regards,
Roberto


PS: There's absolutely no need to nuke that computer. Every Windows AV will happily disinfect those files. Just make sure you also clean the normal.dot. It's most likely the source of the infections.