Page 1 of 3
New Trojan can install without password
Posted: Mon Apr 02, 2012 1:44 pm
by cuttime
What a revoltin' development this is! Basically turn off Java if you don't need it.
http://www.macworld.com/article/1166169 ... c.rss_main

New Trojan can install without password
Posted: Mon Apr 02, 2012 4:00 pm
by kgdrum
WOW!
Scary stuff,
2 questions:how do you turn off Java?
Are there programs we generally use that need to have Java running?
Re: New Trojan can install without password
Posted: Mon Apr 02, 2012 4:07 pm
by cuttime
Utilities>Java Preferences>Uncheck under General.
I don't think think this is necessary on new machines under Lion or ML.
New Trojan can install without password
Posted: Mon Apr 02, 2012 4:11 pm
by kgdrum
What about Snow Leopard?
Re: New Trojan can install without password
Posted: Mon Apr 02, 2012 4:34 pm
by cuttime
I'm running SL on my machine and it has Java installed.
New Trojan can install without password
Posted: Mon Apr 02, 2012 4:36 pm
by kgdrum
So that means you can't disable?
This stuff is a bit beyond my understanding.
Re: New Trojan can install without password
Posted: Mon Apr 02, 2012 4:38 pm
by cuttime
Check the Utilities folder for that Java preference. If the pref is there, Java is installed and you can disable it from there.
New Trojan can install without password
Posted: Mon Apr 02, 2012 4:46 pm
by kgdrum
And what do we actually need Java for?
drummer jokes welcome

Re: New Trojan can install without password
Posted: Mon Apr 02, 2012 8:12 pm
by cuttime
Java is there to run applets embedded in web pages. Personally I haven't missed it.
Re: New Trojan can install without password
Posted: Tue Apr 03, 2012 4:34 pm
by cuttime
Looks like Apple already has a fix for this in 10.6.8 systems via software update.

New Trojan can install without password
Posted: Tue Apr 03, 2012 5:58 pm
by kgdrum
Hi Cuttime,
Good news!
Is this a recent software update to look for?
Thanks
Re: New Trojan can install without password
Posted: Tue Apr 03, 2012 6:44 pm
by cuttime
New Trojan can install without password
Posted: Tue Apr 03, 2012 8:50 pm
by kgdrum
Updated,thanks for the insight & assistance

Re: New Trojan can install without password
Posted: Wed Apr 04, 2012 12:05 pm
by Phil O
I turned off Java on my Snow Leopard system with Java Preferences.app when I first heard about the vulnerabilities. After applying the update, Firefox would not launch. Turning Java on and then off again solved the problem - just a heads up for anyone using Firefox.
Phil
Re: New Trojan can install without password
Posted: Thu Apr 05, 2012 5:19 pm
by mikehalloran
Here's how to yell if you are affected and what to do about it.
http://gizmodo.com/5899352/mac-flashbac ... 0-infected
If you have any of the following installed, it won't get you.
/Library/Little Snitch
/Developer/Applications/Xcode.app/Contents/MacOS/Xcode
/Applications/VirusBarrier X6.app
/Applications/iAntiVirus/iAntiVirus.app
/Applications/avast!.app
/Applications/ClamXav.app
/Applications/HTTPScoop.app
/Applications/Packet Peeper.app
If any of these are found, the malware will skip the rest of its routine and proceed to delete itself.