PDA

View Full Version : iWork Trojan


MacAttack
05-15-2009, 06:16 PM
I used to be a PC user, so when I switched to Mac, I never quite got used to the idea of not having antivirus. It helped to know, however, that there was nothing out there that could infect my Mac anyway. Though I have iAntivirus now, I'm still worried about the fact that there IS a trojan out there affecting Macs. I've been checking every installer, just in case it's not just being put into pirated software... ugh.
Anyway, I was wondering if iAntiVirus blocked this new trojan, so I can start installing software without digging through it's contents first.

Thanks!
RevanRules
05-15-2009, 06:42 PM
Yes, iAntivirus has been checking for the iWork trojan for quite a while now. You can see it in the threat database, and there are some other threads in the forum about this.
MacAttack
05-15-2009, 06:51 PM
Yes, iAntivirus has been checking for the iWork trojan for quite a while now. You can see it in the threat database, and there are some other threads in the forum about this.

Sorry, I searched for it, and nothing came up. I also looked in the database for osx.trojan.iservices.a (what the iWork trojan is officially known as), and couldn't find it.
My apologies for the duplicate thread. :)
emperordarius
05-15-2009, 11:21 PM
osx.trojan.iservices.a is not it's name. It's just the identification name that some company gave to it. Different companies give different names.

iAntivirus detects the threats as:

Backdoor.OSX.IService.a
Backdoor.OSX.IService.b
Backdoor.OSX.IService.c
MacAttack
05-16-2009, 12:49 AM
osx.trojan.iservices.a is not it's name. It's just the identification name that some company gave to it. Different companies give different names.

iAntivirus detects the threats as:

Backdoor.OSX.IService.a
Backdoor.OSX.IService.b
Backdoor.OSX.IService.c

Ah.
Thanks... now, why is there 3? I had only heard about the one in iWork, and one in Photoshop. Was there another?
emperordarius
05-16-2009, 08:57 AM
Ah.
Thanks... now, why is there 3? I had only heard about the one in iWork, and one in Photoshop. Was there another?

The third must be another more rare variant, probably just to help maintaining the Botnet.