| In the past, Macintosh users have been mostly | | | | InputManagers folder. |
| spared from malicious worms and viruses. This is both | | | | NOTE: This is not a solution, but a workaround. If |
| because Mac OS X is fairly secure, as a UNIX | | | | you have an antivirus program which has an actual |
| application, and the fact that they have had smaller | | | | fix, or if Apple provides a security update, we advise |
| market share. On Valentine's Day 2006 this changed | | | | that you rely on these solutions instead of the above |
| a bit. | | | | fix to solve the issue. |
| A 'latestpics.tgz' file which claims to be a tar-zipped | | | | To secure your Mac, follow the tips below: |
| screenshot package (from the Mac OS 10.5), was | | | | >> Run AV. |
| posted to a popular site of Mac Rumors. Visitors of | | | | >> Make your computer ask for a password |
| this site discovered it was a worm rather quickly - it | | | | whenever waking from sleep or a screen saver. |
| was fairly benign, in that it didn't actually inflict | | | | Apple Menu > System Preferences > Security > |
| damage on the machine, but rather infects your iChat | | | | Require password... |
| list of buddies. This trojan only works on | | | | >> Use a non-administration account. Simply add an |
| PowerPC-based Macs, not Intel machine. This only | | | | admin account for installing software and other tasks. |
| affects Macs of OS X 10.4 or after. | | | | Apple Menu > System Preferences > Accounts > |
| AV companies such as Sophos and Symantec have | | | | add admin account, then demote to standard. Log |
| already responded, though there's also a simple | | | | out and log in while remembering new password. |
| workaround to use. Apple will most likely have an | | | | >> Use a good password which has numbers, letters |
| official security patch for this problem by the time | | | | and symbols in it. Disable auto-login. |
| you read this. In the meanwhile, just add a folder | | | | /Applications/Utilities/Keychain Access, click on the |
| action which will alert you if something has been | | | | key in the 'change keychain password dialogue' and |
| added to your input manager folder - the worm will | | | | select a password type & length in the assistant. |
| work on that piece of the operating system. | | | | >> Disable unnecessary sharing; turn on firewall |
| In order to activate the alert feature: | | | | Apple Menu, System Preferences, Sharing Services. |
| Go to --> Library/InputManagers/ | | | | Uncheck all those you don't need. |
| Right click (or Ctrl click) on the folder. Select 'enable | | | | Apple Menu, System Preferences, Sharing, Firewall, |
| folder actions' if this is not already enabled. | | | | Start! |
| Right click (or Ctrl click) on the folder another time. | | | | With these tips, you should be on your way to |
| Select 'attach a folder action.' Select 'add - new item | | | | securing your Mac computer from this another other |
| alert script' from the Folder Action Strips folder | | | | malicious virues, worms, and trojans. Remember, this |
| (default). | | | | is just a work-around; if there is another official fix |
| By doing this small task, you will be alerted if an item | | | | from Apple, we recommend that you use this fix to |
| tries to insert itself like a trojan into your | | | | help solve the problem. |