It's technical name is AS.MW2004.Trojan, but it disguises itself as an installer for MS Office for Mac 2004.:
- The AS.MW2004.Trojan is a compiled AppleScript applet, a 108 KB self-contained application, with an icon resembling an installer for Microsoft Office 2004 for Mac OS X. This AppleScript runs a Unix command that removes files, using AppleScript's ability to run such commands. The AppleScript displays no messages, dialogs or alerts. Once the user double-clicks this file, their home folder and all its contents are deleted permanently.
The Trojan horse has the following icon:
The file is making appearances in Gnutella, and Mac users are, of course, advised only to download and open files from trusted source. To be clear, that means: not Gnutella
Intego has updated their VirusBarrier X program to protect against the Trojan.
Bill's been using Macs since the late 80s. When he's not making smartass remarks to amuse Kirk Hiner, he enjoys fighting for the user.
Tags: Apple ď
(0) Trackbacks ď

Other Sites