Tag Info

Hot answers tagged

24

You can follow these instructions from F-Secure to uninstall/remove the malware: Run the following command in Terminal: defaults read /Applications/Safari.app/Contents/Info LSEnvironment Take note of the value, DYLD_INSERT_LIBRARIES Proceed to step 8 if you got the following error message: "The domain/default pair of ...


16

Web browsing The largest potential danger comes from the "Internet". My mac is online most of it's operating time and web browsers are among the most used applications on my Mac. Therefore, the most important rules are: surf the web carefully don't just download any software you find Browser choice The browser choices, configurations and extensions ...


10

Your first point ("Kept up with OS X system patches") is probably the most important. If you trace the history of exploits on OS X, most have come from: Java Flash PDFs Safari Giving privileges to unknown apps or clicking on unknown links I'm not a security expert, but it seems like limiting your exposure to those things will decrease your exposure ...


9

Flashback Checker This is for your relatives and friends that want to avoid using the Terminal. Download this free app from Github. As referenced in this Macworld article, the single-function app will quickly check your machine for the infection. The app doesn't remove the malware, which will be left up to the user by manually following the instructions ...


8

That is more or less it. I also like to run potentially unsafe stuff in a VM of some kind (I use Parallels, but for this the free VirtualBox works well enough); Parallels 7 can automatically install a virtual Mac image from the Lion recovery image, which is very convenient for this kind of sandboxing. (Yes, running Lion in a VM is now legal.)


7

I'm fairly certain the green light is hard-wired to the camera, there's no way to activate the camera without activating the light, precisely for privacy reasons. If you're really concerned about it, you can always just use a piece of electrical tape to cover the camera (or fold a piece of cardboard over the top of the lid for a non-sticky solution). ...


6

From Wikipedia: The Trojan [FlashBack] targets a Java vulnerability on Mac OS X. The system is infected after the user is redirected to a compromised bogus site, where JavaScript code causes an applet containing an exploit to load. An executable file is saved on the local machine, which is used to download and run malicious code from a remote ...


6

Presently there aren't any known Viruses for iOS. The security exploit that you mentioned, the PDF exploit and the TIFF image exploit before it, were patched shortly after the exploit was made public. Is it impossible for a virus to sneak through? Absolutely not, though if you're running the most recent iOS release the chances you'll get a virus or have ...


6

Sadly, malicious code can be so small and obfuscated in an infinite number of ways so you can't simply make a rule to test a package to tell if it's good or bad. Statistically, people have established some guidelines like trying to know the source (typing in the web address directly and not trusting a link, not downloading it from an alternate site, ...


6

You can disable the XProtect updates in System Preferences => Security => General, and there uncheck the box "Automatically update safe downloads list." Now you can change the version info in /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist


6

This message is the case when either: Your device is enrolled under MDM and after deployment it will display something like image below.(https://www.apple.com/iphone/business/it/management.html) Your passcode is too obvious and needs to be changed Microsoft Exchange can force a passcode on your iPhone. Obvious codes start with the following numbers: ...


5

It appears the site is distributing malware. If you opened the page on your computer you should first install a good antivirus/antimalware program, try Sophos which is good and free. If it was on your iPad (as your tag suggests) there's probably a bit less cause for alarm as there is currently no known virus which can infect an iPad. Next it's probably a ...


5

The simple way is to boot to recovery mode and use disk utility to first erase the "Macintosh HD" partition, then start the installer. No need to zero the drive since you won't be recovering any deleted files at this point. A verified correct installer of Lion will then get downloaded from the Internet. Here is a guide for you... OSX Recovery OS X ...


5

Go to Settings app > General > Profiles Delete any configuration profile that you don't want to keep, then delete any that control passcode. If Profiles is not near the end of the list (below VPN and above Reset >) then you may have no profiles and can continue to the next step. Next, go to Settings app -> Passcode enter your passcode, turn passcode ...


4

If your device is not jailbroken the odds of malware on iOS are basically 0, at least for what you're describing. There is currently no way anything could be installed without going through the App Store. Even then, a malicious app could only access its own files in its own sandbox. So, no installed app on iOS could modify anything outside of it. This is ...


4

Kaspersky's removal tool ...checks if your Mac is affected and removes the trojan if necessary. You can download it on http://support.kaspersky.com/downloads/utils/flashfake_removal_tool.zip Check online using your UUID You can check if you Mac is affected using your UUID (Universally unique identifier) on http://flashbackcheck.com/ Go to: ...


4

That is because the Dock process isn’t getting enough resources and/or is crashing. TheDock process is not just responsible for your Dock, but also Mission Control, Launchpad, Dashboard and the Desktop background. If this happens most frequently during periods of heavy use, then it is not getting enough resources or its resources are being swapped to disk. ...


4

Admin Alert is related to Dell KACE, an "appliance-based approach to systems management", and the admin alert icon appearing in the dock is apparently a bug.


3

I have not heard of any exploit that would produce this behaviour. The fact that the pages DO load, and only switch to another page AFTER they have loaded, indicates to me that the problem lies within the page itself. For instance some "evil" Javascript is inserted into the page causing it to redirect. If the problem was in the OS, for instance messing ...


3

I get these messages when I connect to the China Unicom network. I think the "Cancel/Accept" dialog is hardcoded into iOS for the purpose of accepting the carrier's terms of use. These messages come from the sim card, and I think only the carrier can send them. It's sleazy for the carrier to use this functionality for advertising.


3

Use common sense. That is the most important thing to do when using any system, any time. I have been using Macs for about ten years. I have never installed any Firewalls or virus scanners, always worked in an admin account full-time, always downloaded and installed all kinds of apps and never have I had ANY problems regarding security. Most of the ...


3

It fixes the vulnerability that Flashback used to install itself; this Gizmodo article gives some more info to check: 1. Run the following command in Terminal: defaults read /Applications/Safari.app/Contents/Info LSEnvironment 2. Take note of the value, DYLD_INSERT_LIBRARIES 3. Proceed to step 8 if you got the following error message: "The domain/default ...


3

Your Calender must be set to automatically accept invitations from email. CHECK FOR THIS SETTING: Automatically retrieve CalDAV invitations from Mail Select this checkbox to have Calendar get event invitations from Mail. Go to Preferences in your Calender and turn it off. (for now) Next set junk filtering in your gmail. Also block this ...


3

Hidden files are hidden from ls unless you use the -a or -A flag: -A List all entries except for . and ... Always set for the super-user. -a Include directory entries whose names begin with a dot (.). Source: ls man page Therefore, files can be hidden by starting the filename with a . but ls will still show the file if it is run with -a or -A. Note ...


2

The more you change your life to accommodate these "improvements" the more it's letting you effect you. Sure you now run a lower risk of contamination by some malware, but your system is crippled by anti virus scans, your passwords are epically long and irritating to type, you don't try as many new applications because ur paranoid, and you cripple your web ...


2

The recent Java update from Apple fixed the current malware vulnerability. If you want even more peace of mind for future malware protection you can disable Java on your mac. You can always easily re-enable it if your program requires Java. Here are the steps to disable it on your system: In Safari, go to Preferences > Security > Web Content and uncheck ...


2

It looks like /usr/libexec/oah/translate is Rosetta, an Apple program to allow programs developed for PowerPC architecture to run on the newest Intel Mac. So I don't think it's a malware, just Mac OS using Rosetta to run Entourage.


2

It means someone has bypassed the security on your Mac and can install new programs, steal data like passwords, banking web site locations and perhaps other sensitive personal emails and information. It also means then can install other software on your Mac if it connects to the Internet to further do similar acts of I'll repute. Lastly, it could crash ...


2

Quick one-liner to paste into Terminal.app: defaults read /Applications/Safari.app/Contents/Info LSEnvironment &> /dev/null && echo "You seem to have Type 1"; defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES &> /dev/null && echo "You seem to have Type 2" Unless this outputs anything, you're clean (at least of the ...


2

Java for Mac OS X 10.6 Update 8 Apple released an official software update that will remove the flashback malware from your computer. Just run software update on your Mac to install it. Here are the details from the Apple support article: This Java security update removes the most common variants of the Flashback malware. Java for OS X Lion 2012-003 ...



Only top voted, non community-wiki answers of a minimum length are eligible