New Trojan can install without password

Macintosh software/hardware discussion and troubleshooting

Moderator: James Steele

User avatar
cuttime
Posts: 4514
Joined: Sun May 15, 2005 10:01 pm
Primary DAW OS: MacOS

New Trojan can install without password

Post by cuttime »

What a revoltin' development this is! Basically turn off Java if you don't need it.

http://www.macworld.com/article/1166169 ... c.rss_main

:vomit:
828x MacOS 15.5 M1 Studio Max 1TB 64G DP11.34
User avatar
kgdrum
Posts: 4068
Joined: Tue Nov 16, 2004 10:01 pm
Primary DAW OS: MacOS
Location: NYC

New Trojan can install without password

Post by kgdrum »

WOW!

Scary stuff,
2 questions:how do you turn off Java?
Are there programs we generally use that need to have Java running?
2012 Mac Pro 3.46GHz 12 core 96 gig,Mojave, DP11.01,Logic 10.51, RME UCX,Great River ME-1NV,a few microphones,UAD2, Komplete 12U,U-he,Omni & way too many VI's,Synths & FX galore!, Mimic Pro w/ SD3,Focal Twin 6 monitors, Shunyata...........
User avatar
cuttime
Posts: 4514
Joined: Sun May 15, 2005 10:01 pm
Primary DAW OS: MacOS

Re: New Trojan can install without password

Post by cuttime »

Utilities>Java Preferences>Uncheck under General.

I don't think think this is necessary on new machines under Lion or ML.
828x MacOS 15.5 M1 Studio Max 1TB 64G DP11.34
User avatar
kgdrum
Posts: 4068
Joined: Tue Nov 16, 2004 10:01 pm
Primary DAW OS: MacOS
Location: NYC

New Trojan can install without password

Post by kgdrum »

What about Snow Leopard?
2012 Mac Pro 3.46GHz 12 core 96 gig,Mojave, DP11.01,Logic 10.51, RME UCX,Great River ME-1NV,a few microphones,UAD2, Komplete 12U,U-he,Omni & way too many VI's,Synths & FX galore!, Mimic Pro w/ SD3,Focal Twin 6 monitors, Shunyata...........
User avatar
cuttime
Posts: 4514
Joined: Sun May 15, 2005 10:01 pm
Primary DAW OS: MacOS

Re: New Trojan can install without password

Post by cuttime »

I'm running SL on my machine and it has Java installed.
828x MacOS 15.5 M1 Studio Max 1TB 64G DP11.34
User avatar
kgdrum
Posts: 4068
Joined: Tue Nov 16, 2004 10:01 pm
Primary DAW OS: MacOS
Location: NYC

New Trojan can install without password

Post by kgdrum »

So that means you can't disable?
This stuff is a bit beyond my understanding.
2012 Mac Pro 3.46GHz 12 core 96 gig,Mojave, DP11.01,Logic 10.51, RME UCX,Great River ME-1NV,a few microphones,UAD2, Komplete 12U,U-he,Omni & way too many VI's,Synths & FX galore!, Mimic Pro w/ SD3,Focal Twin 6 monitors, Shunyata...........
User avatar
cuttime
Posts: 4514
Joined: Sun May 15, 2005 10:01 pm
Primary DAW OS: MacOS

Re: New Trojan can install without password

Post by cuttime »

Check the Utilities folder for that Java preference. If the pref is there, Java is installed and you can disable it from there.
828x MacOS 15.5 M1 Studio Max 1TB 64G DP11.34
User avatar
kgdrum
Posts: 4068
Joined: Tue Nov 16, 2004 10:01 pm
Primary DAW OS: MacOS
Location: NYC

New Trojan can install without password

Post by kgdrum »

And what do we actually need Java for?

drummer jokes welcome ;-)
2012 Mac Pro 3.46GHz 12 core 96 gig,Mojave, DP11.01,Logic 10.51, RME UCX,Great River ME-1NV,a few microphones,UAD2, Komplete 12U,U-he,Omni & way too many VI's,Synths & FX galore!, Mimic Pro w/ SD3,Focal Twin 6 monitors, Shunyata...........
User avatar
cuttime
Posts: 4514
Joined: Sun May 15, 2005 10:01 pm
Primary DAW OS: MacOS

Re: New Trojan can install without password

Post by cuttime »

Java is there to run applets embedded in web pages. Personally I haven't missed it.
828x MacOS 15.5 M1 Studio Max 1TB 64G DP11.34
User avatar
cuttime
Posts: 4514
Joined: Sun May 15, 2005 10:01 pm
Primary DAW OS: MacOS

Re: New Trojan can install without password

Post by cuttime »

Looks like Apple already has a fix for this in 10.6.8 systems via software update. :woohoo:
828x MacOS 15.5 M1 Studio Max 1TB 64G DP11.34
User avatar
kgdrum
Posts: 4068
Joined: Tue Nov 16, 2004 10:01 pm
Primary DAW OS: MacOS
Location: NYC

New Trojan can install without password

Post by kgdrum »

Hi Cuttime,
Good news!
Is this a recent software update to look for?
Thanks
2012 Mac Pro 3.46GHz 12 core 96 gig,Mojave, DP11.01,Logic 10.51, RME UCX,Great River ME-1NV,a few microphones,UAD2, Komplete 12U,U-he,Omni & way too many VI's,Synths & FX galore!, Mimic Pro w/ SD3,Focal Twin 6 monitors, Shunyata...........
User avatar
cuttime
Posts: 4514
Joined: Sun May 15, 2005 10:01 pm
Primary DAW OS: MacOS

Re: New Trojan can install without password

Post by cuttime »

Recent as of a couple of hours ago!

http://reviews.cnet.com/8301-13727_7-57 ... j=MacFixIt
828x MacOS 15.5 M1 Studio Max 1TB 64G DP11.34
User avatar
kgdrum
Posts: 4068
Joined: Tue Nov 16, 2004 10:01 pm
Primary DAW OS: MacOS
Location: NYC

New Trojan can install without password

Post by kgdrum »

Updated,thanks for the insight & assistance ;-)
2012 Mac Pro 3.46GHz 12 core 96 gig,Mojave, DP11.01,Logic 10.51, RME UCX,Great River ME-1NV,a few microphones,UAD2, Komplete 12U,U-he,Omni & way too many VI's,Synths & FX galore!, Mimic Pro w/ SD3,Focal Twin 6 monitors, Shunyata...........
User avatar
Phil O
Posts: 7347
Joined: Thu Jul 28, 2005 10:01 pm
Primary DAW OS: MacOS
Location: Scituate, MA

Re: New Trojan can install without password

Post by Phil O »

I turned off Java on my Snow Leopard system with Java Preferences.app when I first heard about the vulnerabilities. After applying the update, Firefox would not launch. Turning Java on and then off again solved the problem - just a heads up for anyone using Firefox.

Phil
DP 11.34. 2020 M1 Mac Mini [9,1] (16 Gig RAM), Mac Pro 3GHz 8 core [6,1] (16 Gig RAM), OS 15.3/11.6.2, Lynx Aurora (n) 8tb, MOTU 8pre-es, MOTU M6, MOTU 828, Apogee Rosetta 800, UAD-2 Satellite, a truckload of outboard gear and plug-ins, and a partridge in a pear tree.
User avatar
mikehalloran
Posts: 16257
Joined: Sun Jan 25, 2009 5:08 pm
Primary DAW OS: MacOS
Location: Sillie Con Valley

Re: New Trojan can install without password

Post by mikehalloran »

Here's how to yell if you are affected and what to do about it.

http://gizmodo.com/5899352/mac-flashbac ... 0-infected

If you have any of the following installed, it won't get you.

/Library/Little Snitch
/Developer/Applications/Xcode.app/Contents/MacOS/Xcode
/Applications/VirusBarrier X6.app
/Applications/iAntiVirus/iAntiVirus.app
/Applications/avast!.app
/Applications/ClamXav.app
/Applications/HTTPScoop.app
/Applications/Packet Peeper.app

If any of these are found, the malware will skip the rest of its routine and proceed to delete itself.
DP 11.34; 828mkII FW, micro lite, M4, MTP/AV USB Firmware 2.0.1
2023 Mac Studio M2 8TB, 192GB RAM, OS Sequoia 15.4, USB4 8TB externals, Neumann MT48, M-Audio AIR 192|14, Mackie ProFxv3, Zoom F3 & UAC 232 32bit float recorder & interface; 2012 MBPs (x2) Catalina, Mojave
IK-NI-Izotope-PSP-Garritan-Antares, LogicPro X, Finale 27.4, Dorico 5, Notion 6, Overture 5, TwistedWave, DSP-Q 5, SmartScore64 NE Pro, Toast 20 Pro
Post Reply