http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/ Engadget Comments for http://www.engadget.com/media/feedlogo.gif http://www.engadget.com en-us Copyright 2012 Weblogs, Inc. The contents of this feed are available for non-commercial use only. Blogsmith http://www.blogsmith.com/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 5:16PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 5:18PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 5:19PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
"To check if you’ve been infected, look in /System/Library/StartupItems for an item named iWorkServices. If it exists, you’ve been infected with this Trojan horse. "

Because I KNOW you are all obsessed with my life, I would like to relieve you and let you know, I'm not infected.]]>Jan 22nd 2009 5:23PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 5:32PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 5:34PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 5:43PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/There is no place like home.]]>Jan 22nd 2009 5:49PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/just became
I R - ERROR, superiority complex compromised
]]>Jan 22nd 2009 5:57PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 5:59PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 5:59PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/"I AM ERROR"]]>Jan 22nd 2009 6:01PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
I'm sorry. *sniff* HAHAAAAA

Okay, (heeehee) I think I'm okay now.

Am I the only one who sees the irony of being lulled into overconfidence and then installing something on your machine, believing that it wouldn't ever get infected with anything, only to have it require a full wipe of your system??

Wow. Seriously. Wow. See, Avast (and any other decent virus protection) instantly comes up with a warning as soon as the thing is downloaded, as it actively scans the current files in process. But that's okay, Macs seem to be doing fine without virus protection!

Have fun reinstalling all your software applications and tweaking the settings back to normal!

/end_rant_towards_Apple_fanboys]]>Jan 22nd 2009 6:05PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
1) iWork 09 is downloadable from Apple. You get a 30 day free trial. Not impressed...and...
2) Apple announced how they were not reinforcing serial numbers on iWork 09 just yesterday.

Dumb asses. I mean there is cheap and then there is stupid cheap. This be that.]]>Jan 22nd 2009 6:07PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
I'm glad I use Open Office, even though it is slow and should be broken apart into individual app icons.]]>Jan 22nd 2009 6:19PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
Feeling smug because Macs now have a trojan (that requires them to install illegal warez) ?

When Windows gets hundreds of trojans, viruses and assorted malware (often, famously, just by connecting to the internet) ?

Typical Windows fanboy. The fact that you actually feel smug, like you've accomplished something good or worthwhile here, just demonstrates what a nasty, arrogant, self-aggrandising little person you are, and how unpleasant it must be to know you in real life.]]>Jan 22nd 2009 6:36PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
Yes! Hurry up and reformat now! That trojan is gonna destroy your precious Mac! OH NOOOOOOOOOOES!]]>Jan 22nd 2009 6:42PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 6:46PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
1. (open Terminal.app)
2. sudo su (enter password)
3. rm -r /System/Library/StartupItems/iWorkServices
4. rm /private/tmp/.iWorkServices
5. rm /usr/bin/iWorkServices
6. rm -r /Library/Receipts/iWorkServices.pkg
7. killall -9 iWorkServices

Most of all, don't execute anything that doesn't look legit. Just because something asks for your root password doesn't mean you should just blindly enter it.]]>Jan 22nd 2009 7:02PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/]]>Jan 22nd 2009 8:28PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
1) This is not a virus, as many have explained
2) There were plenty of viruses on pre OS X Max OS's
3) This isn't even the first trojan that has been discovered for OS X. I seem to remember one as far back as Nov 2007, though this may be the first one that is "widespread"

The fact is that there are less of these vulnerabilities on OS X, whether it be market share or whatever reason. It is also folly to think that any OS can be 100% secure. That goes for OS X, Windows, Linux, or whatever.

Why does it have to be Windows versus OS X or Linux versus Windows, can't we all just get along?! I guess I am in the extreme minority who actually likes and appreciates all OS's for what they can offer. I love my Mac, I am loving Windows 7, and Linux sure is fun to play with.]]>Jan 22nd 2009 10:07PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
Lol. First thing I do to ANY system is put a decent antivirus software. Most protect the computer from unauthorized changes in registry and such. Like a firewall, but more proactive.

Smugness comes to bite them in the ass. Heeeehehehe.]]>Jan 22nd 2009 10:19PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
Afterall, we've got Obama, racism is dead, now we need to conquer this digital dividwe and stand united, no longer as Window-Americans, Mac-Americans or Linux-Americans... Let us stand proud as oh shit, I got the Trojan...]]>Jan 22nd 2009 11:14PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
FYI... OS X has NO Registry. ]]>Jan 23rd 2009 1:19AMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
The best protection anyone can have against malicious software is common sense. When you download pirated software you leave yourself open to these sort of risks. The same is true no matter which OS you use. I understand you wanting to rub this in the face of a stereotypical Apple Fanboy, who claims OS X is virus-proof; however, this has more to do a user's bad choices than a particular flaw in OS X. ]]>Jan 23rd 2009 10:34AMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
Oh yeah, no viruses or trojans there... >_>]]>Jan 23rd 2009 6:32PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
Apple gives the trial for free on their website. All it takes is a special plist file to shut down the trial, n00bs]]>Jan 23rd 2009 6:38PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/would you say the same thing on an article that reported 20K infected PC
eventhough there was a hell lot more than 2.5M PCs sold last year?
im just asking. if you would say the same thing, then kudos to you sir

and seriously, to all the people complaining on how people are saying
OMG MAC VIRUS... i understand ur complains, but dont say
oh its a trojan not a virus, that just means the user is stuipd.
to the average user an infection is an infection,
and eventhough us here on engdaget know better
we must view this from the point of view of a normal user for once...

and those people saying... oh they had to enter the password themselves
such stupid users, why would they enter pass for iWork Services,
aren't you the same people who were bashing UAC from microsoft
which to a high extent does the same type of stuff... just minus the password entering?

and to end off... i know i complained to a lot of people
but my heart goes out to all of those infected out of innoncence
the day i await is no the day at which each OS has the best protection
but rather a day when infections will just dissapear, when people realize its wrong.
just how piracy is wrong, and those that pirated somewhat deserve this.

i want a day, when there is no apple america and no microsoft america
just the UNITED States of America.]]>Jan 24th 2009 2:42PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/"there is no such thing as a virus on a mac"]]>Jan 22nd 2009 5:17PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 5:19PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 5:20PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 5:21PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 5:28PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
A trojan is not a virus. It is a malicious program that required the express permission of the user to install.

1. User downloads pirated software.
2. User installs.
3. User enters their password to proceed.
4. user has bad shit happen.

These idiots got pirated versions of software from an untrusted source, and explicitly installed it. I don't care how virus resistant your systems are, nothing can save you from user stupidity when you provide your credentials to install software.]]>Jan 22nd 2009 5:49PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
What I think is funny is that all the fanboys who love Apple obviously DON'T love Apple enough to actually buy their software. Ha!]]>Jan 22nd 2009 5:52PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
Wake me when there's a worm spreading in the wild and I'll consider some kind of AV software.]]>Jan 22nd 2009 5:59PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 6:14PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 6:19PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 6:19PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
how you managed to miss the obvious is the bigger jedi mind trick.]]>Jan 22nd 2009 6:37PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 6:55PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 7:00PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 7:08PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 7:15PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
"the funny thing is my comment somehow got inserted in the *middle* of a comments thread replying to dvsbstrd, which is the most confusing part. You'd think it would at least show up at the end."

I know right?]]>Jan 22nd 2009 7:16PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/
Also, I"m sorry but these folks were too lazy to down the legit trial to try it out first and/or too cheap to pay less than $100US for the three programs. They got their punishment. Hope they all remembered to back up regularly. ]]>Jan 22nd 2009 8:17PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 22nd 2009 11:51PMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 23rd 2009 2:13AMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 23rd 2009 2:35AMhttp://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/http://www.engadget.com/2009/01/22/iwork-09-trojan-infects-at-least-20-000-machines/Jan 23rd 2009 3:34AM