Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Mac › Fully working Mac fake A/V!
New Posts  All Forums:Forum Nav:

Fully working Mac fake A/V!

post #1 of 13
Thread Starter 
Saw this at work today....

One of those fake a/v pc programs from a website redirect popped up on a mac computer. To my surprise it downloaded a .pkg file which is a mac installer file and popped up and started to install! Luckily it asked for the admin password and I was able to cancel the install.

Anyone else seen fake A/V on a macintosh?

The mac had up to date Sophos on it and it did nothing to stop the thing. FAIL!
SuperMegaPwnsauce
(16 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 4770k Asus Z87-PRO MSI GTX 1080 Gaming X Gskill Ripjaws X 19200 16GB 
Hard DriveCoolingOSMonitor
Samsung 850 EVO 500GB SSD BeQuiet! Dark Rock Pro 3 Windows 10 Home 64Bit  Dell S2716DG 2K 144hz G-Sync 
KeyboardPowerCaseMouse
Logitech G910 Orion Spectrum Seasonic Flagship PRIME TITANIUM 650W Fractal Design Define R5 W/ 3 Phanteks PH-F140S... Logitech G Pro 
Mouse PadAudioAudio
PC Gaming Master Race Glorious XXXL Pad & Razer... Creative Sound Blaster Z & Schiit M&M 2 Uber/Mu... HifiMan HE400i & Antlion ModMic 4.0 
  hide details  
Reply
SuperMegaPwnsauce
(16 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 4770k Asus Z87-PRO MSI GTX 1080 Gaming X Gskill Ripjaws X 19200 16GB 
Hard DriveCoolingOSMonitor
Samsung 850 EVO 500GB SSD BeQuiet! Dark Rock Pro 3 Windows 10 Home 64Bit  Dell S2716DG 2K 144hz G-Sync 
KeyboardPowerCaseMouse
Logitech G910 Orion Spectrum Seasonic Flagship PRIME TITANIUM 650W Fractal Design Define R5 W/ 3 Phanteks PH-F140S... Logitech G Pro 
Mouse PadAudioAudio
PC Gaming Master Race Glorious XXXL Pad & Razer... Creative Sound Blaster Z & Schiit M&M 2 Uber/Mu... HifiMan HE400i & Antlion ModMic 4.0 
  hide details  
Reply
post #2 of 13
Wow. I have never had anything like that on my Mac. What was the name of the installer?
The Downgrade
(13 items)
 
  
CPUMotherboardGraphicsRAM
455 unlocked to quad ASRock 990FX Extreme4 GT430 Adata 1600 4GB 
Hard DriveOptical DriveOSMonitor
C300 SSD LITESCRIBE DVD RW 7 Home Premium 64 ASUS 24" 
PowerCase
ABS 850W Dark Beret Powder Coated Rocketfish 
  hide details  
Reply
The Downgrade
(13 items)
 
  
CPUMotherboardGraphicsRAM
455 unlocked to quad ASRock 990FX Extreme4 GT430 Adata 1600 4GB 
Hard DriveOptical DriveOSMonitor
C300 SSD LITESCRIBE DVD RW 7 Home Premium 64 ASUS 24" 
PowerCase
ABS 850W Dark Beret Powder Coated Rocketfish 
  hide details  
Reply
post #3 of 13
+1 would be interested to know what/where you got it!
post #4 of 13
This is interesting. Lucky it asked for the admin password.

Who in their right mind would give it permissions? lol
post #5 of 13
Holy heck! That's scary, a fake A/V making it to macs... any extra details you can provide would be greatly appreciated!

EDIT: Just so we're clear: Did you in any way interact with the popup?
     
CPUMotherboardGraphicsRAM
Intel Pentium G2020 Ivy Bridge 2.9GHz ASRock H61M-DGS Integrated Intel HD Graphics (Don't Laugh!) G.SKILL Ripjaws Series 4GB (2 x 2GB) 
Hard DriveOptical DriveCoolingOS
Samsung P3 500GB 7200RPM LITE-ON DVD Burner Intel Stock CPU Cooler Windows 7 Home Premium 
MonitorKeyboardPowerCase
Acer G226HQLBbd Black 21.5" Razer Lycosa SeaSonic S12II S12II 380B 380W COUGAR Spike Black Steel / Plastic MicroATX Min... 
  hide details  
Reply
     
CPUMotherboardGraphicsRAM
Intel Pentium G2020 Ivy Bridge 2.9GHz ASRock H61M-DGS Integrated Intel HD Graphics (Don't Laugh!) G.SKILL Ripjaws Series 4GB (2 x 2GB) 
Hard DriveOptical DriveCoolingOS
Samsung P3 500GB 7200RPM LITE-ON DVD Burner Intel Stock CPU Cooler Windows 7 Home Premium 
MonitorKeyboardPowerCase
Acer G226HQLBbd Black 21.5" Razer Lycosa SeaSonic S12II S12II 380B 380W COUGAR Spike Black Steel / Plastic MicroATX Min... 
  hide details  
Reply
post #6 of 13
Hopefully this wont effect my PPC Powermac G4
post #7 of 13
Thread Starter 
The name of the file was MACDefender. It came from some form of a website according to the person who got it. I did not get it personally, I am tech support for them. It was on a G5 Mac and was going to install so I would say its a fair guess that it works for both intel and PPC
SuperMegaPwnsauce
(16 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 4770k Asus Z87-PRO MSI GTX 1080 Gaming X Gskill Ripjaws X 19200 16GB 
Hard DriveCoolingOSMonitor
Samsung 850 EVO 500GB SSD BeQuiet! Dark Rock Pro 3 Windows 10 Home 64Bit  Dell S2716DG 2K 144hz G-Sync 
KeyboardPowerCaseMouse
Logitech G910 Orion Spectrum Seasonic Flagship PRIME TITANIUM 650W Fractal Design Define R5 W/ 3 Phanteks PH-F140S... Logitech G Pro 
Mouse PadAudioAudio
PC Gaming Master Race Glorious XXXL Pad & Razer... Creative Sound Blaster Z & Schiit M&M 2 Uber/Mu... HifiMan HE400i & Antlion ModMic 4.0 
  hide details  
Reply
SuperMegaPwnsauce
(16 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 4770k Asus Z87-PRO MSI GTX 1080 Gaming X Gskill Ripjaws X 19200 16GB 
Hard DriveCoolingOSMonitor
Samsung 850 EVO 500GB SSD BeQuiet! Dark Rock Pro 3 Windows 10 Home 64Bit  Dell S2716DG 2K 144hz G-Sync 
KeyboardPowerCaseMouse
Logitech G910 Orion Spectrum Seasonic Flagship PRIME TITANIUM 650W Fractal Design Define R5 W/ 3 Phanteks PH-F140S... Logitech G Pro 
Mouse PadAudioAudio
PC Gaming Master Race Glorious XXXL Pad & Razer... Creative Sound Blaster Z & Schiit M&M 2 Uber/Mu... HifiMan HE400i & Antlion ModMic 4.0 
  hide details  
Reply
post #8 of 13
Quote:
Originally Posted by killeraxemannic View Post
The name of the file was MACDefender. It came from some form of a website according to the person who got it. I did not get it personally, I am tech support for them. It was on a G5 Mac and was going to install so I would say its a fair guess that it works for both intel and PPC
Do not post a link here, even if you find it. Thanks
    
CPUMotherboardGraphicsRAM
I5-2500k 4.8Ghz @ 1.38v Z68X-UD4-B3 PNY 480 8GB Dominator 1600's 
Hard DriveOptical DriveOSMonitor
Intel 510 + 300GB Velociraptor LG DVD RW Server 2012 HP 25" + HP 20" 
KeyboardPowerCaseMouse
Deck Legend TX850W XClio Coolbox Mamba 
Mouse PadAudio
Dolica HD550's 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
I5-2500k 4.8Ghz @ 1.38v Z68X-UD4-B3 PNY 480 8GB Dominator 1600's 
Hard DriveOptical DriveOSMonitor
Intel 510 + 300GB Velociraptor LG DVD RW Server 2012 HP 25" + HP 20" 
KeyboardPowerCaseMouse
Deck Legend TX850W XClio Coolbox Mamba 
Mouse PadAudio
Dolica HD550's 
  hide details  
Reply
post #9 of 13
Thread Starter 
Quote:
Originally Posted by W4LNUT5 View Post
Do not post a link here, even if you find it. Thanks
I will definitely not. Do not worry
SuperMegaPwnsauce
(16 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 4770k Asus Z87-PRO MSI GTX 1080 Gaming X Gskill Ripjaws X 19200 16GB 
Hard DriveCoolingOSMonitor
Samsung 850 EVO 500GB SSD BeQuiet! Dark Rock Pro 3 Windows 10 Home 64Bit  Dell S2716DG 2K 144hz G-Sync 
KeyboardPowerCaseMouse
Logitech G910 Orion Spectrum Seasonic Flagship PRIME TITANIUM 650W Fractal Design Define R5 W/ 3 Phanteks PH-F140S... Logitech G Pro 
Mouse PadAudioAudio
PC Gaming Master Race Glorious XXXL Pad & Razer... Creative Sound Blaster Z & Schiit M&M 2 Uber/Mu... HifiMan HE400i & Antlion ModMic 4.0 
  hide details  
Reply
SuperMegaPwnsauce
(16 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 4770k Asus Z87-PRO MSI GTX 1080 Gaming X Gskill Ripjaws X 19200 16GB 
Hard DriveCoolingOSMonitor
Samsung 850 EVO 500GB SSD BeQuiet! Dark Rock Pro 3 Windows 10 Home 64Bit  Dell S2716DG 2K 144hz G-Sync 
KeyboardPowerCaseMouse
Logitech G910 Orion Spectrum Seasonic Flagship PRIME TITANIUM 650W Fractal Design Define R5 W/ 3 Phanteks PH-F140S... Logitech G Pro 
Mouse PadAudioAudio
PC Gaming Master Race Glorious XXXL Pad & Razer... Creative Sound Blaster Z & Schiit M&M 2 Uber/Mu... HifiMan HE400i & Antlion ModMic 4.0 
  hide details  
Reply
post #10 of 13
Quote:
Originally Posted by killeraxemannic View Post
Saw this at work today....

One of those fake a/v pc programs from a website redirect popped up on a mac computer. To my surprise it downloaded a .pkg file which is a mac installer file and popped up and started to install! Luckily it asked for the admin password and I was able to cancel the install.

Anyone else seen fake A/V on a macintosh?

The mac had up to date Sophos on it and it did nothing to stop the thing. FAIL!
This just means it was worth it to some advertiser to make a version for mac. Macs have always had viruses.. just the number of them is by far in the minority, just like mac OS.

Screenshots?
Edited by Sarec - 5/9/11 at 7:27am
Windfall
(13 items)
 
  
CPUMotherboardGraphicsRAM
Q9550 Asus P5E3 Premium Wifi XFX HD Radeon 6950 SuperTalent 
Hard DriveOptical DriveOSMonitor
WADFALS1001 WD Black Edition 1TB x 2 Raid 0 DVD-RW DIE VISTA, Using W7 24Inch 1920x1200 
PowerCase
Corsair 750TX Corsair 800D 
  hide details  
Reply
Windfall
(13 items)
 
  
CPUMotherboardGraphicsRAM
Q9550 Asus P5E3 Premium Wifi XFX HD Radeon 6950 SuperTalent 
Hard DriveOptical DriveOSMonitor
WADFALS1001 WD Black Edition 1TB x 2 Raid 0 DVD-RW DIE VISTA, Using W7 24Inch 1920x1200 
PowerCase
Corsair 750TX Corsair 800D 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Mac
Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Mac › Fully working Mac fake A/V!