Un virus sous OS X, Divers Options

[_news_]

Commentaires sur:

Un virus sous OS X

[clouvel]

Il semble que la news soit la copie conforme de ce que j'ai lu hier sur Mac bidouille...(droits d'auteur ? ).

MERCI Ejad...c'est vrai en plus.

je n'etais pas allé sur MacBidouille, n'avait donc pas lu la news et j'ai donc validé la news proposée..

C'etait un véritable copier-coller..la news est donc refaite...

Sinon il y avait bien ce matin un communiqué de presse d'Intego..et moi aussi je suis un peu méfiant à propos des infos venant de gens qui vendent des antivirus, ca donnait ça (in english of course) :::::

INTEGO SECURITY ALERT
Intego Announces Protection against a new Mac OS X Trojan Horse:
AS.MW2004.Trojan

Austin, TX: 11:30 am, May 12, 2004 - Intego, the Macintosh security
specialist, was notified by Macworld (UK) on May 10, 2004 about a Trojan
horse, discovered by one of its readers who downloaded and ran an
application from the Gnutella peer-to-peer network. Intego carried out tests
on the information received and has identified a Trojan horse -
AS.MW2004.Trojan - that affects Mac OS X. This Trojan horse, when
double-clicked, permanently deletes all the files in the current user's home
folder. Intego has notified Apple, Microsoft and the CERT, and has been
working in close collaboration with these companies and organizations.

The AS.MW2004.Trojan is a compiled AppleScript applet, a 108 KB
self-contained application, with an icon resembling an installer for
Microsoft Office 2004 for Mac OS X. This AppleScript runs a Unix command
that removes files, using AppleScript's ability to run such commands. The
AppleScript displays no messages, dialogs or alerts. Once the user
double-clicks this file, their home folder and all its contents are deleted
permanently.

Intego advises all Macintosh users to only download and run applications
from trusted sources. However Intego has updated its VirusBarrier X software
to address this vulnerability. Intego VirusBarrier X eradicates this Trojan
horse, using its virus definitions dated May 11, 2004, and Intego remains
diligent to ensure that VirusBarrier X will also eradicate any future
viruses that may try to exploit this same technique. All Intego
VirusBarrier X users should make sure that their virus definitions are up to
date by using the NetUpdate preference pane in the Mac OS X System
Preferences.

QUESTIONS AND ANSWERS FROM MICROSOFT ABOUT THE
AS.MW2004.Trojan TROJAN HORSE

How did Microsoft find out about this Trojan horse?
Intego, the Macintosh security specialist, notified us.

Do you offer any Web downloads that use this icon?
No. Microsoft does not offer any Web downloads that use the icon identified
as Trojan horse, MW2004. Microsoft Office 2004 for Mac should only be
installed from retail CDs, and the authentic install icon will only be found
in the product install wizard.