| Author |
Message |
|
big_D
What's a life?
Joined: Thu Apr 23, 2009 8:25 pm
Posts: 10691
Location: Bramsche
|
 It seems that a bunch of free screensavers have been infected with OS X/OpinionSpy. http://www.zdnet.com/blog/security/malw ... ag=nl.e589http://blog.intego.com/2010/06/01/integ ... lications/ | | | | Quote: According to the Intego’s security alert, despite the fact that the “market research” program also known as RelevantKnowledge, claims to collect only browsing and purchasing information, a deeper investigation reveals a much more intrusive approach.
More details on what the spyware does once it’s executed, and the list of the screensavers bundled with it:
* It opens an HTTP backdoor using port 8254
* It injects code, without user intervention, into Safari, Firefox and iChat, and copies personal data from these applications. Code injection is a form of behavior similar to that of a virus, and this malware “infects” applications when they are running to be able to carry out its operations. (It infects the applications’ code in the Mac’s memory, and does not infect the actual applications’ files on the user’s hard disk.)
* It regularly sends data, in encrypted form, to a number of servers using ports 80 and 443. It sends data to these servers about files it has scanned locally, and also sends e-mail addresses, iChat message headers and URLs, as well as other data. This data may include personal data, such as user names, passwords, credit card numbers, web browser bookmarks, history and much more
* If a user deletes the original application or screen saver that installed this spyware, the spyware itself will remain installed and continue to operate.
| | | | |
This is a well known Windows spyware module, which looks like it has now been ported to OS X.  Mish Inc's FLV to MP3 converter software is also "infected". (This is deliberately included in a software bundle to help generate revenue for free software - by spying on the users.)
_________________
"Do you know what this is? Hmm? No, I can see you do not. You have that vacant look in your eyes, which says hold my head to your ear, you will hear the sea!" - Londo Molari
Executive Producer No Agenda Show 246
|
| Thu Jun 03, 2010 10:04 am |
 
|
|
|
Nick
Spends far too much time on here
Joined: Thu Apr 23, 2009 11:36 pm
Posts: 3527
Location: Portsmouth
|
Oooooh nasty nasty!
I don't know much about code injection - I will have to go and Wiki it - but could Apple potentially patch the OS to stop code injection nastiness like this?
_________________
|
| Thu Jun 03, 2010 10:40 am |
|
|
|
Amnesia10
Legend
Joined: Fri Apr 24, 2009 2:02 am
Posts: 29240
Location: Guantanamo Bay (thanks bobbdobbs)
|
I do not use screen savers. My screen goes into energy saving mode very quickly. Though it is good to be aware of such problems.
_________________Do concentrate, 007... "You are gifted. Mine is bordering on seven seconds." https://www.dropbox.com/referrals/NTg5MzczNTkhttp://astore.amazon.co.uk/wwwx404couk-21
|
| Thu Jun 03, 2010 11:26 am |
|
|
|
HeatherKay
Moderator
Joined: Thu Apr 23, 2009 6:13 pm
Posts: 7262
Location: Here, but not all there.
|
I use the built-in screen saver engine to show slideshows of images. I haven't downloaded anything to do that.
Still, nasty.
_________________My Flickr | Snaptophobic BloggageHeather Kay: modelling details that matter. "Let my windows be open to receive new ideas but let me also be strong enough not to be blown away by them." - Mahatma Gandhi.
|
| Thu Jun 03, 2010 12:32 pm |
|
|
|
MrStevenRogers
Spends far too much time on here
Joined: Fri Apr 24, 2009 9:44 pm
Posts: 4860
|
i have downloaded a few screen savers and other things over time so i just done a scan …
----------- SCAN SUMMARY -----------
Known viruses: 793605
Engine version: 0.95.3
Scanned directories: 1672
Scanned files: 8516
Infected files: 0
Data scanned: 1880.15 MB
Data read: 14620.06 MB (ratio 0.13:1)
Time: 308.387 sec (5 m 8 s)
No infected files were found.
just to be on the safe side …
_________________
Hope this helps . . . Steve ...
Nothing known travels faster than light, except bad news ...
HP Pavilion 24" AiO. Ryzen7u. 32GB/1TB M2. Windows 11 Home ...
|
| Thu Jun 03, 2010 2:07 pm |
|
|
|
pcernie
Legend
Joined: Sun Apr 26, 2009 12:30 pm
Posts: 45931
Location: Belfast
|
Do we actually need screensavers these days; what has me thinking they make next to no difference on an LCD screen now?  Not that you shouldn't have one if you like the image(s) displayed... I just use the power saving mode in XP as I'm not really fussed either way  _________________Plain English advice on everything money, purchase and service related:
http://www.moneysavingexpert.com/
|
| Thu Jun 03, 2010 2:22 pm |
|
|
|
HeatherKay
Moderator
Joined: Thu Apr 23, 2009 6:13 pm
Posts: 7262
Location: Here, but not all there.
|
Actually, I do have screen burn on my LCD. It's faint, but it's definitely there. This screen must be getting on for seven years old now.  _________________My Flickr | Snaptophobic BloggageHeather Kay: modelling details that matter. "Let my windows be open to receive new ideas but let me also be strong enough not to be blown away by them." - Mahatma Gandhi.
|
| Thu Jun 03, 2010 2:31 pm |
|
|
|
Nick
Spends far too much time on here
Joined: Thu Apr 23, 2009 11:36 pm
Posts: 3527
Location: Portsmouth
|
My screensave comes on for 1 minute before the screen goes into standby. Just as a warning really, because if the screen were to just flick off while I was reading something that would annoy the hell out of me! It takes a good few seconds to turn back on.
_________________
|
| Thu Jun 03, 2010 5:18 pm |
|
|
|
Amnesia10
Legend
Joined: Fri Apr 24, 2009 2:02 am
Posts: 29240
Location: Guantanamo Bay (thanks bobbdobbs)
|
I dont think so. I have my energy saving mode kick in within a minute of inactivity when the screen dims and a few minutes later it goes dark. _________________Do concentrate, 007... "You are gifted. Mine is bordering on seven seconds." https://www.dropbox.com/referrals/NTg5MzczNTkhttp://astore.amazon.co.uk/wwwx404couk-21
|
| Thu Jun 03, 2010 9:50 pm |
|
|
|
big_D
What's a life?
Joined: Thu Apr 23, 2009 8:25 pm
Posts: 10691
Location: Bramsche
|
They don't "burn in", like CRTs used to, but the image can persist for a long time. On my old LG 20.1" TFT, if I played Anarchy for 8 hours, afterwards, the screen would need about 12 - 24 hours for the static elements from the UI to stop ghosting (dark shadow) on the screen. It isn't burn in, like the old CRTs used to get, but some panels do suffer this temporary ghosting effect.
_________________
"Do you know what this is? Hmm? No, I can see you do not. You have that vacant look in your eyes, which says hold my head to your ear, you will hear the sea!" - Londo Molari
Executive Producer No Agenda Show 246
|
| Fri Jun 04, 2010 4:27 am |
|
|
|
l3v1ck
What's a life?
Joined: Fri Apr 24, 2009 10:21 am
Posts: 12700
Location: The Right Side of the Pennines (metaphorically & geographically)
|
I think the last time I used a screensaver was in the 90's.
|
| Fri Jun 04, 2010 12:25 pm |
|
|
|
Amnesia10
Legend
Joined: Fri Apr 24, 2009 2:02 am
Posts: 29240
Location: Guantanamo Bay (thanks bobbdobbs)
|
_________________Do concentrate, 007... "You are gifted. Mine is bordering on seven seconds." https://www.dropbox.com/referrals/NTg5MzczNTkhttp://astore.amazon.co.uk/wwwx404couk-21
|
| Fri Jun 04, 2010 2:45 pm |
|
|
|
HeatherKay
Moderator
Joined: Thu Apr 23, 2009 6:13 pm
Posts: 7262
Location: Here, but not all there.
|
I use the screensaver as a slideshow function. I may be working at my desk, but I'd like something attractive happening on my screen - especially useful in the winter months when it's dark out and the view from the window is less than inspiring.
I have been borrowing images from the Astronomy Picture of the Day web site for some years, and I've got different sets of space and astronomy images I can call on.
In a commercial environment, I've used the screensaver as a rolling portfolio of stuff when clients visited. It's not just about saving the screen.
_________________My Flickr | Snaptophobic BloggageHeather Kay: modelling details that matter. "Let my windows be open to receive new ideas but let me also be strong enough not to be blown away by them." - Mahatma Gandhi.
|
| Fri Jun 04, 2010 2:53 pm |
|
|
