[OS X TeX] OT: effective Macintosh Trojan in the wild

[Bernhard Barkow]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 5. Mai 2005, at 11:12, Maarten Sneep wrote:
>
>> As an antivirus on OS X I only used Virex, and actually purchased  
>> my .Mac subscription essentially to get it. With Tiger Apple  
>> recommend against it (by saying it's only for Panther), though  
>> without telling the why.
>>
>
> I tried to install it (7.2, through my ISP), and it can't connect  
> to retrieve updates to its definitions. There may be some other  
> parts that interfere with normal operation of the OS.
>
> On May 5, 2005, at 10:19 AM, Thorsten Scheffner wrote:
>
>> I read the discussion about viruses on mac and want to add one  
>> scanner: I use clamAV ( http://www.clamav.net ) as antivirus tool  
>> with ClamXav ( http://www.versiontracker.com/dyn/moreinfo/macosx/ 
>> 24449 ) as gui frontend. It is a freeware scanner for unix, mac  
>> and win. It is really slow, a scan of my 30 GB-volume took about  
>> 2,5 hours and it does not find viruses on the classic enviroment.  
>> But it seems to "know" a lot of different viruses. Worth a look, I  
>> think.
>>
>
> ClamAV is commonly used to scan incoming mail for virusses. Its  
> main advantage (especially for mail scanning) is that the  
> definitions can be updated very quickly: they actually advise you  
> to update them every 30 minutes or so (they use differences between  
> updates, so the network load isn't that bad). In emergency  
> situations (Sober.ZZZ suddenly appears), you can add your own  
> scanning signature.
>
> I noticed that I now have a deamon user for ClamAV on Tiger (I did  
> a clean install), so Apple knows about it in any case.
>
This seems to be a leftover from Tiger Server, where you can filter  
email on a OS X-based mail server through ClamAV or Amavis etc.
ClamAV's features sound promising, it would be nice to have a plugin  
for Apple Mail to use it for filtering emails only (on the client);  
as far as I found out you can only schedule it to scan certain files  
periodically or have it as a server-based filter. Or is there an  
option which I didn't see?

Bernhard
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFCee3dqJ8JxFkhAg0RAhDIAKDlm0XaFkkdduojRUvZeBlt/WD3NgCg5Mby
CkusoAZKxIe7LADVugI7vmQ=
=1LcW
-----END PGP SIGNATURE-----
--------------------- Info ---------------------
Mac-TeX Website: http://www.esm.psu.edu/mac-tex/
           & FAQ: http://latex.yauh.de/faq/
TeX FAQ: http://www.tex.ac.uk/faq
List Post: <mailto:MacOSX-TeX at email.esm.psu.edu>