Trojan thing

I have read that Apple computers suffer from only a small amount of spyware
and have not had any successful viruses written against them. David and/or
Gary is there any truth to these statements.

"Gary S. Terhune" wrote in message
...
: Yes, but how is accessing his infected system really any different than
: accessing the internet, email, etc.?
:
: --
: Gary S. Terhune
: MS MVP Shell/User
: http://www.grystmill.com/articles/cleanboot.htm
: http://www.grystmill.com/articles/security.htm
:
: "David H. Lipman" wrote in message
: ...
: Trojans usually use Social Engineering to get the PC user to install
: them. If Henry is not
: "aware" then his probability is high that he will receive and install
: at least one in WinXP.
: Especially when considering the StartPage Trojan family which Henry
: was infected by.
:
: --
: Dave
:
:
:
:
: "Gary S. Terhune" wrote in message
: ...
: | Not if he's careful to set up the new machine with all the required
: | protection, first. And then be choosy about what he carries over.
: |
: | --
: | Gary S. Terhune
: | MS MVP Shell/User
: | http://www.grystmill.com/articles/cleanboot.htm
: | http://www.grystmill.com/articles/security.htm
: |
: | "David H. Lipman" wrote in message
: | ...
: | I'm sorry to state that if Henry bought a new computer rather than
: | rectifying the Trojan
: | infection on his Win98 platform, I fear that Henry will soon be
: | infected with viral or
: | non-viral Malware on his WinXP platform.
: |
: | --
: | Dave
: |
: |
: |
: |
: | "Henry" wrote in message
: | ...
: | | "Gary S. Terhune" wrote ...
: | | Well, Henry, while I'm sorry you weren't successful in routing
: out
: | the
: | | bugs, I think you'll find the XP solution a rewarding one. Be
: | sure,
: | | however, to get right into the XP groups as you learn you way
: | around
: | | that system They even have a "newusers" XP group.
: | |
: | | Thank you Gary,
: | |
: | | I have made a careful note of all you have said, and will have a
: | study of
: | | the web pages you suggest.
: | |
: | | I have now subscribed to "microsoft.public.windowsxp.newusers"
: which
: | I
: | | assume is the one you meant, and will have a lurk there for a
: while.
: | |
: | | The 98SE machine is now consigned to the spare bedroom for a
: while
: | until I
: | | am happy that I have got everything I need and then will be
: dumped -
: | after I
: | | have found out how to format the c: drive to clear out all our
: | personal
: | | stuff.
: | |
: | | regards
: | |
: | | Henry
: | |
: | | Unsubscribing . . . . .
: | |
: | |
: |
: |
: |
:
:
:

Dave would you be kind enough to explain the Social Engineering that you are
referring to. You can be highly technical since I will not mind. Thanks in
advance and have a great day.

"David H. Lipman" wrote in message
...
: Trojans usually use Social Engineering to get the PC user to install them.
If Henry is not
: "aware" then his probability is high that he will receive and install at
least one in WinXP.
: Especially when considering the StartPage Trojan family which Henry was
infected by.
:
: --
: Dave
:
:
:
:
: "Gary S. Terhune" wrote in message
: ...
: | Not if he's careful to set up the new machine with all the required
: | protection, first. And then be choosy about what he carries over.
: |
: | --
: | Gary S. Terhune
: | MS MVP Shell/User
: | http://www.grystmill.com/articles/cleanboot.htm
: | http://www.grystmill.com/articles/security.htm
: |
: | "David H. Lipman" wrote in message
: | ...
: | I'm sorry to state that if Henry bought a new computer rather than
: | rectifying the Trojan
: | infection on his Win98 platform, I fear that Henry will soon be
: | infected with viral or
: | non-viral Malware on his WinXP platform.
: |
: | --
: | Dave
: |
: |
: |
: |
: | "Henry" wrote in message
: | ...
: | | "Gary S. Terhune" wrote ...
: | | Well, Henry, while I'm sorry you weren't successful in routing out
: | the
: | | bugs, I think you'll find the XP solution a rewarding one. Be
: | sure,
: | | however, to get right into the XP groups as you learn you way
: | around
: | | that system They even have a "newusers" XP group.
: | |
: | | Thank you Gary,
: | |
: | | I have made a careful note of all you have said, and will have a
: | study of
: | | the web pages you suggest.
: | |
: | | I have now subscribed to "microsoft.public.windowsxp.newusers" which
: | I
: | | assume is the one you meant, and will have a lurk there for a while.
: | |
: | | The 98SE machine is now consigned to the spare bedroom for a while
: | until I
: | | am happy that I have got everything I need and then will be dumped -
: | after I
: | | have found out how to format the c: drive to clear out all our
: | personal
: | | stuff.
: | |
: | | regards
: | |
: | | Henry
: | |
: | | Unsubscribing . . . . .
: | |
: | |
: |
: |
: |
:
:

Viruses for Apple including, but NOT limited to....

MacOS/nVIR - http://vil.nai.com/vil/content/v_99830.htm
MacOS/INIT-M - http://vil.nai.com/vil/content/v_99861.htm
MacOS/ZUC - http://vil.nai.com/vil/content/v_99863.htm
MacOS/CDEF - http://vil.nai.com/vil/content/v_99888.htm
MacOS/MBDF - http://vil.nai.com/vil/content/v_99829.htm
MacOS/INIT29 - http://vil.nai.com/vil/content/v_99858.htm
MacOS/WDEF - http://vil.nai.com/vil/content/v_99862.htm
MacOS/SevenDust - http://vil.nai.com/vil/content/v_99884.htm
MacOS/Simpsons@MM - http://vil.nai.com/vil/content/v_99102.htm
W97M/Antimarc@MM - http://vil.nai.com/vil/content/v_98325.htm
MacOS/CODE252 - http://vil.nai.com/vil/content/v_99832.htm
MacOS/MDEF - http://vil.nai.com/vil/content/v_99835.htm
MacOS/CODE32767 - http://vil.nai.com/vil/content/v_99838.htm
MacOS/INIT1984 - http://vil.nai.com/vil/content/v_99857.htm
MacOS/INIT9403 - http://vil.nai.com/vil/content/v_99859.htm
MacOS/Flag - http://vil.nai.com/vil/content/v_99891.htm
MacHC/Merryxmas - http://vil.nai.com/vil/content/v_99893.htm
MacOS/CODE9811 - http://vil.nai.com/vil/content/v_99896.htm
MacOS/Peace - http://vil.nai.com/vil/content/v_99831.htm
MacOS/INIT17 - http://vil.nai.com/vil/content/v_99834.htm
MacOS/NVP - http://vil.nai.com/vil/content/v_99836.htm
MacOS/T4 - http://vil.nai.com/vil/content/v_99839.htm
MacOS/ANTI - http://vil.nai.com/vil/content/v_99887.htm
MacOS/CODE1 - http://vil.nai.com/vil/content/v_99890.htm
MacHC/ThreeTunes - http://vil.nai.com/vil/content/v_99892.htm
MacOS/Frankie - http://vil.nai.com/vil/content/v_99894.htm
W32/Yourde - http://vil.nai.com/vil/content/v_100269.htm (can be carrier not be infected)

Plus "all"; MS-Word and MS-Excel and other MS Office Macro viruses

As for OS-X, it is a Unix BSD based OS that uses Apache and experiences *many* of the
exploits on the Unix/Linux platforms
BSD/Scalper.worm - http://vil.nai.com/vil/content/v_99539.htm
BSD/Exploit-Autofsd - http://vil.nai.com/vil/content/v_99388.htm
BSD/OpenSSH.src - http://vil.nai.com/vil/content/v_99680.htm
Linux/Slapper.worm.a - http://vil.nai.com/vil/content/v_99710.htm
Linux/Slapper.worm.b - http://vil.nai.com/vil/content/v_99710.htm
Linux/Slapper.worm.c - http://vil.nai.com/vil/content/v_99710.htm
UNIX/Exploit-Rogue - http://vil.nai.com/vil/content/v_99775.htm
BSD/Block.worm - http://vil.nai.com/vil/content/v_100670.htm
BSD/Walk.worm - http://vil.nai.com/vil/content/v_100196.htm

Trojans:
ChinaTalk
CPro
Fontfinder
MacMag
Mosaic
NVP
Steroid
SubSeven
Tetricycle
Virus Info


References:
http://vil.nai.com
http://www.ciac.org/ciac/bulletinsBy...bulletins.html
http://www.ciac.org/ciac/bulletinsBy...bulletins.html
http://www.icsalabs.com/html/communi...e/viruses.html
http://www.icsalabs.com/html/communi...rus/reference/
http://www.securemac.com/agax.php


--
Dave




"Dan" wrote in message ...
| I have read that Apple computers suffer from only a small amount of spyware
| and have not had any successful viruses written against them. David and/or
| Gary is there any truth to these statements.
|
| "Gary S. Terhune" wrote in message
| ...
| : Yes, but how is accessing his infected system really any different than
| : accessing the internet, email, etc.?
| :
| : --
| : Gary S. Terhune
| : MS MVP Shell/User
| : http://www.grystmill.com/articles/cleanboot.htm
| : http://www.grystmill.com/articles/security.htm
| :
| : "David H. Lipman" wrote in message
| : ...
| : Trojans usually use Social Engineering to get the PC user to install
| : them. If Henry is not
| : "aware" then his probability is high that he will receive and install
| : at least one in WinXP.
| : Especially when considering the StartPage Trojan family which Henry
| : was infected by.
| :
| : --
| : Dave
| :
| :
| :
| :
| : "Gary S. Terhune" wrote in message
| : ...
| : | Not if he's careful to set up the new machine with all the required
| : | protection, first. And then be choosy about what he carries over.
| : |
| : | --
| : | Gary S. Terhune
| : | MS MVP Shell/User
| : | http://www.grystmill.com/articles/cleanboot.htm
| : | http://www.grystmill.com/articles/security.htm
| : |
| : | "David H. Lipman" wrote in message
| : | ...
| : | I'm sorry to state that if Henry bought a new computer rather than
| : | rectifying the Trojan
| : | infection on his Win98 platform, I fear that Henry will soon be
| : | infected with viral or
| : | non-viral Malware on his WinXP platform.
| : |
| : | --
| : | Dave
| : |
| : |
| : |
| : |
| : | "Henry" wrote in message
| : | ...
| : | | "Gary S. Terhune" wrote ...
| : | | Well, Henry, while I'm sorry you weren't successful in routing
| : out
| : | the
| : | | bugs, I think you'll find the XP solution a rewarding one. Be
| : | sure,
| : | | however, to get right into the XP groups as you learn you way
| : | around
| : | | that system They even have a "newusers" XP group.
| : | |
| : | | Thank you Gary,
| : | |
| : | | I have made a careful note of all you have said, and will have a
| : | study of
| : | | the web pages you suggest.
| : | |
| : | | I have now subscribed to "microsoft.public.windowsxp.newusers"
| : which
| : | I
| : | | assume is the one you meant, and will have a lurk there for a
| : while.
| : | |
| : | | The 98SE machine is now consigned to the spare bedroom for a
| : while
| : | until I
| : | | am happy that I have got everything I need and then will be
| : dumped -
| : | after I
| : | | have found out how to format the c: drive to clear out all our
| : | personal
| : | | stuff.
| : | |
| : | | regards
| : | |
| : | | Henry
| : | |
| : | | Unsubscribing . . . . .
| : | |
| : | |
| : |
| : |
| : |
| :
| :
| :
|
|

The only reason you dont read/hear about Mac viruses is there are so few
Macs (relatively) that information about them is unimportant to news
services. they are equally as vaulnerable. Attacks seem to be based pretty
much on market share. Linux Unix SunOS and all the proprietary OS also have
their viruses, not reported for the same reason, most of the world uses
windows. If all the gnu developed software gets widespread in the market,
how much more active will the virus writers be when they have access to the
actual source code they are trying to circumvent.

--
Adaware http://www.lavasoft.de
spybot http://security.kolla.de
AVG free antivirus http://www.grisoft.com
Etrust/Vet/CA.online Antivirus scan
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/
Catalog of removal tools (1)
http://www.pandasoftware.com/download/utilities/
Catalog of removal tools (2)
http://www3.ca.com/securityadvisor/n...aspx?CID=40387
Blocking Unwanted Parasites with a Hosts file
http://mvps.org/winhelp2002/hosts.htm
links provided as a courtesy, read all instructions on the pages before use

Grateful thanks to the authors/webmasters
_


"Dan" wrote in message
...
I have read that Apple computers suffer from only a small amount of
spyware
and have not had any successful viruses written against them. David
and/or
Gary is there any truth to these statements.

"Gary S. Terhune" wrote in message
...
: Yes, but how is accessing his infected system really any different than
: accessing the internet, email, etc.?
:
: --
: Gary S. Terhune
: MS MVP Shell/User
: http://www.grystmill.com/articles/cleanboot.htm
: http://www.grystmill.com/articles/security.htm
:
: "David H. Lipman" wrote in message
: ...
: Trojans usually use Social Engineering to get the PC user to install
: them. If Henry is not
: "aware" then his probability is high that he will receive and install
: at least one in WinXP.
: Especially when considering the StartPage Trojan family which Henry
: was infected by.
:
: --
: Dave
:
:
:
:
: "Gary S. Terhune" wrote in message
: ...
: | Not if he's careful to set up the new machine with all the required
: | protection, first. And then be choosy about what he carries over.
: |
: | --
: | Gary S. Terhune
: | MS MVP Shell/User
: | http://www.grystmill.com/articles/cleanboot.htm
: | http://www.grystmill.com/articles/security.htm
: |
: | "David H. Lipman" wrote in message
: | ...
: | I'm sorry to state that if Henry bought a new computer rather than
: | rectifying the Trojan
: | infection on his Win98 platform, I fear that Henry will soon be
: | infected with viral or
: | non-viral Malware on his WinXP platform.
: |
: | --
: | Dave
: |
: |
: |
: |
: | "Henry" wrote in message
: | ...
: | | "Gary S. Terhune" wrote ...
: | | Well, Henry, while I'm sorry you weren't successful in routing
: out
: | the
: | | bugs, I think you'll find the XP solution a rewarding one. Be
: | sure,
: | | however, to get right into the XP groups as you learn you way
: | around
: | | that system They even have a "newusers" XP group.
: | |
: | | Thank you Gary,
: | |
: | | I have made a careful note of all you have said, and will have a
: | study of
: | | the web pages you suggest.
: | |
: | | I have now subscribed to "microsoft.public.windowsxp.newusers"
: which
: | I
: | | assume is the one you meant, and will have a lurk there for a
: while.
: | |
: | | The 98SE machine is now consigned to the spare bedroom for a
: while
: | until I
: | | am happy that I have got everything I need and then will be
: dumped -
: | after I
: | | have found out how to format the c: drive to clear out all our
: | personal
: | | stuff.
: | |
: | | regards
: | |
: | | Henry
: | |
: | | Unsubscribing . . . . .
: | |
: | |
: |
: |
: |
:
:
:

My orginal reply may have been filtered-out for content as it never posted ( ??? )
Spaces have been inserted to get past MS filters.

Social Engineering is the concept where the human element is used to override physical and
software security measures. It can be done in a News Group post such as "H i l l a r y D
u f f n u d e
photos" or "O s a m a b i n L a d e n has been caught, see the report". It could be an
email message
that indicates that you have money waiting for you in an account or you entitled to a
refund. It could be a web site giving away free screen savers. It could be a phone call
saying that they are your ISP or bank and they need account information.

Suggested reading:
The Art of Deception, Kevin D. Mitnick & William L. Simon, Wiley publishing, 2002.

Kevin Mitnick is the original hacker and phone phreaker.

--
Dave



--
Dave




"Dan" wrote in message ...
| Dave would you be kind enough to explain the Social Engineering that you are
| referring to. You can be highly technical since I will not mind. Thanks in
| advance and have a great day.

Wow, thanks for the detailed response, Dave. I really appreciate it and had
no idea that these platforms were so vulnerable.

"David H. Lipman" wrote in message
...
: Viruses for Apple including, but NOT limited to....
:
: MacOS/nVIR - http://vil.nai.com/vil/content/v_99830.htm
: MacOS/INIT-M - http://vil.nai.com/vil/content/v_99861.htm
: MacOS/ZUC - http://vil.nai.com/vil/content/v_99863.htm
: MacOS/CDEF - http://vil.nai.com/vil/content/v_99888.htm
: MacOS/MBDF - http://vil.nai.com/vil/content/v_99829.htm
: MacOS/INIT29 - http://vil.nai.com/vil/content/v_99858.htm
: MacOS/WDEF - http://vil.nai.com/vil/content/v_99862.htm
: MacOS/SevenDust - http://vil.nai.com/vil/content/v_99884.htm
: MacOS/Simpsons@MM - http://vil.nai.com/vil/content/v_99102.htm
: W97M/Antimarc@MM - http://vil.nai.com/vil/content/v_98325.htm
: MacOS/CODE252 - http://vil.nai.com/vil/content/v_99832.htm
: MacOS/MDEF - http://vil.nai.com/vil/content/v_99835.htm
: MacOS/CODE32767 - http://vil.nai.com/vil/content/v_99838.htm
: MacOS/INIT1984 - http://vil.nai.com/vil/content/v_99857.htm
: MacOS/INIT9403 - http://vil.nai.com/vil/content/v_99859.htm
: MacOS/Flag - http://vil.nai.com/vil/content/v_99891.htm
: MacHC/Merryxmas - http://vil.nai.com/vil/content/v_99893.htm
: MacOS/CODE9811 - http://vil.nai.com/vil/content/v_99896.htm
: MacOS/Peace - http://vil.nai.com/vil/content/v_99831.htm
: MacOS/INIT17 - http://vil.nai.com/vil/content/v_99834.htm
: MacOS/NVP - http://vil.nai.com/vil/content/v_99836.htm
: MacOS/T4 - http://vil.nai.com/vil/content/v_99839.htm
: MacOS/ANTI - http://vil.nai.com/vil/content/v_99887.htm
: MacOS/CODE1 - http://vil.nai.com/vil/content/v_99890.htm
: MacHC/ThreeTunes - http://vil.nai.com/vil/content/v_99892.htm
: MacOS/Frankie - http://vil.nai.com/vil/content/v_99894.htm
: W32/Yourde - http://vil.nai.com/vil/content/v_100269.htm (can be carrier
not be infected)
:
: Plus "all"; MS-Word and MS-Excel and other MS Office Macro viruses
:
: As for OS-X, it is a Unix BSD based OS that uses Apache and experiences
*many* of the
: exploits on the Unix/Linux platforms
: BSD/Scalper.worm - http://vil.nai.com/vil/content/v_99539.htm
: BSD/Exploit-Autofsd - http://vil.nai.com/vil/content/v_99388.htm
: BSD/OpenSSH.src - http://vil.nai.com/vil/content/v_99680.htm
: Linux/Slapper.worm.a - http://vil.nai.com/vil/content/v_99710.htm
: Linux/Slapper.worm.b - http://vil.nai.com/vil/content/v_99710.htm
: Linux/Slapper.worm.c - http://vil.nai.com/vil/content/v_99710.htm
: UNIX/Exploit-Rogue - http://vil.nai.com/vil/content/v_99775.htm
: BSD/Block.worm - http://vil.nai.com/vil/content/v_100670.htm
: BSD/Walk.worm - http://vil.nai.com/vil/content/v_100196.htm
:
: Trojans:
: ChinaTalk
: CPro
: Fontfinder
: MacMag
: Mosaic
: NVP
: Steroid
: SubSeven
: Tetricycle
: Virus Info
:
:
: References:
: http://vil.nai.com
: http://www.ciac.org/ciac/bulletinsBy...bulletins.html
: http://www.ciac.org/ciac/bulletinsBy...bulletins.html
:
http://www.icsalabs.com/html/communi...e/viruses.html
:
http://www.icsalabs.com/html/communi...rus/reference/
: http://www.securemac.com/agax.php
:
:
: --
: Dave
:
:
:
:
: "Dan" wrote in message
...
: | I have read that Apple computers suffer from only a small amount of
spyware
: | and have not had any successful viruses written against them. David
and/or
: | Gary is there any truth to these statements.
: |
: | "Gary S. Terhune" wrote in message
: | ...
: | : Yes, but how is accessing his infected system really any different than
: | : accessing the internet, email, etc.?
: | :
: | : --
: | : Gary S. Terhune
: | : MS MVP Shell/User
: | : http://www.grystmill.com/articles/cleanboot.htm
: | : http://www.grystmill.com/articles/security.htm
: | :
: | : "David H. Lipman" wrote in message
: | : ...
: | : Trojans usually use Social Engineering to get the PC user to install
: | : them. If Henry is not
: | : "aware" then his probability is high that he will receive and install
: | : at least one in WinXP.
: | : Especially when considering the StartPage Trojan family which Henry
: | : was infected by.
: | :
: | : --
: | : Dave
: | :
: | :
: | :
: | :
: | : "Gary S. Terhune" wrote in message
: | : ...
: | : | Not if he's careful to set up the new machine with all the required
: | : | protection, first. And then be choosy about what he carries over.
: | : |
: | : | --
: | : | Gary S. Terhune
: | : | MS MVP Shell/User
: | : | http://www.grystmill.com/articles/cleanboot.htm
: | : | http://www.grystmill.com/articles/security.htm
: | : |
: | : | "David H. Lipman" wrote in message
: | : | ...
: | : | I'm sorry to state that if Henry bought a new computer rather
than
: | : | rectifying the Trojan
: | : | infection on his Win98 platform, I fear that Henry will soon be
: | : | infected with viral or
: | : | non-viral Malware on his WinXP platform.
: | : |
: | : | --
: | : | Dave
: | : |
: | : |
: | : |
: | : |
: | : | "Henry" wrote in message
: | : | ...
: | : | | "Gary S. Terhune" wrote ...
: | : | | Well, Henry, while I'm sorry you weren't successful in
routing
: | : out
: | : | the
: | : | | bugs, I think you'll find the XP solution a rewarding one. Be
: | : | sure,
: | : | | however, to get right into the XP groups as you learn you way
: | : | around
: | : | | that system They even have a "newusers" XP group.
: | : | |
: | : | | Thank you Gary,
: | : | |
: | : | | I have made a careful note of all you have said, and will have
a
: | : | study of
: | : | | the web pages you suggest.
: | : | |
: | : | | I have now subscribed to "microsoft.public.windowsxp.newusers"
: | : which
: | : | I
: | : | | assume is the one you meant, and will have a lurk there for a
: | : while.
: | : | |
: | : | | The 98SE machine is now consigned to the spare bedroom for a
: | : while
: | : | until I
: | : | | am happy that I have got everything I need and then will be
: | : dumped -
: | : | after I
: | : | | have found out how to format the c: drive to clear out all our
: | : | personal
: | : | | stuff.
: | : | |
: | : | | regards
: | : | |
: | : | | Henry
: | : | |
: | : | | Unsubscribing . . . . .
: | : | |
: | : | |
: | : |
: | : |
: | : |
: | :
: | :
: | :
: |
: |
:
:

Great, I will see if I can check a copy of this book out from the library.
Thank you, David. I really appreciate the information. Have a great night!

"David H. Lipman" wrote in message
...
:: Suggested reading:
: The Art of Deception, Kevin D. Mitnick & William L. Simon, Wiley
publishing, 2002.
:
: Kevin Mitnick is the original hacker and phone phreaker.
:
: --
: Dave
:
:
:
: --
: Dave
:
:
:
:
: "Dan" wrote in message
...
: | Dave would you be kind enough to explain the Social Engineering that you
are
: | referring to. You can be highly technical since I will not mind. Thanks
in
: | advance and have a great day.
:
:

No problem Dan. I study computer infectors and keep that list handy. Note that it is not
all-inclusive nor up to date. Note also the numbers don't compare. For every one MAC/Apple
infector there are a few dozen Win32 infectors.

--
Dave




"Dan" wrote in message ...
| Wow, thanks for the detailed response, Dave. I really appreciate it and had
| no idea that these platforms were so vulnerable.

You do likewise Dan !

--
Dave




"Dan" wrote in message ...
| Great, I will see if I can check a copy of this book out from the library.
| Thank you, David. I really appreciate the information. Have a great night!

Duly Noted, Smile

"David H. Lipman" wrote in message
...
: No problem Dan. I study computer infectors and keep that list handy. Note
that it is not
: all-inclusive nor up to date. Note also the numbers don't compare. For
every one MAC/Apple
: infector there are a few dozen Win32 infectors.
:
: --
: Dave
:
:
:
:
: "Dan" wrote in message
...
: | Wow, thanks for the detailed response, Dave. I really appreciate it and
had
: | no idea that these platforms were so vulnerable.
:
: