From collectibles to cars, buy and sell all kinds of items on eBayWelcome! Sign in or register.
aAdvanced Search
Popular products
No suggestions.

Reviews & Guides

Write a guide

Mac OS X First Virus?

by: nsfreedomfight( 19Feedback score is 10 to 49) Top 1000 Reviewer
20 out of 24 people found this guide helpful.
Guide viewed: 3631 times Tags: apple | mac os x | os x | virus | mac



On the evening of the 13th, an unknown user posted an external link to a file on MacRumors Forums claiming to be the latest Leopard Mac OS X 10.5 screenshots. The file was named "latestpics.tgz"

The resultant file decompresses into what appears to be a standard JPEG icon in Mac OS X but is actually a compiled Unix executable in disguise. An initial disassembly (from original discussion thread) reveals evidence that the application is virus-like or was designed to give that impression. Routines listed include:

_infect:
_infectApps:
_installHooks:
_copySelf:

The exact consequences of the application are unclear, but according to the users that originally executed the application have noted that it appeared to self propogate:
If anyone remembers last night, when lasthope spread that picture that opened in terminal. I just turned on my other computer and it said it had an incoming file, from my computer, which was the latest pics file. Any help. I have already secure deleted it off of my harddrive, but how do i know that it will not come back.

Andrew Welch who had done some of the initial disassembly is posting updates to this thread.

According to the initial investigation, the application uses Spotlight to find the other applications on the infected machine and subsequently inserts a stub of code into each application executable.

Update: It appears that there is some debate about the classification of this application, and as it does require user activation, it appears to fall into the Trojan classification, rather than self-propogating through any particular vulnerability in OS X.


Guide ID: 10000000000748931Guide created: 02/16/06 (updated 04/06/08)

 
Was this guide helpful? Report this guide

Ready to share your knowledge with others? Write a guide



 


eBay Pulse | eBay Reviews | eBay Stores | Half.com | Austria | France | Germany | Italy | Spain | United Kingdom | Popular Searches
Kijiji | PayPal | ProStores | Apartments for Rent | Shopping.com | Skype | Tickets


About eBay | Announcements | Security Center | Resolution Center | eBay Toolbar | Policies | Government Relations | Site Map | Help
Copyright © 1995-2009 eBay Inc. All Rights Reserved. Designated trademarks and brands are the property of their respective owners. Use of this Web site constitutes acceptance of the eBay User Agreement and Privacy Policy.
eBay official time