Windows virus on Mac?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View


A friend says her Mac has a file (called TUD.EXE) in the recycle bin which
can't be deleted.

An online virus scan says it's a Win32 virus.  How can a Win32 file run on
her Mac?

I'm not a Mac user so please be gentle with me!


VIRUS: <http://www.datafilehost.com/download-ab00f13c.html
SCAN RESULT: <http://preview.tinyurl.com/y9c584n

Re: Windows virus on Mac?



Gavin a écrit:
Quoted text here. Click to load it

Well, the virus isn't running (exe "files" cannot run on a Mac).

The file is said to be a Win32 virus by the scan because, wherever the
file is (Win32 disk or Mac disk), it's still a virus: the data of the
file hasn't changed: if you copy the file back to the Win32 machine,
it'll act like it would previously. So the scan sees the file (by
examining the file's content) and knows it's something that, if running
on a Win32 computer, is a virus.

As for why it cannot be deleted, there are plenty of reasons (file
locked, file in use, etc.). You may want to know the exact message she
is seeing.

Re: Windows virus on Mac?



Quoted text here. Click to load it

It can't, but that doesn't mean it can't *be* on a Mac.



Re: Windows virus on Mac?



On 00:10  24 Jan 2010, FromTheRafters wrote:

Quoted text here. Click to load it

Her file TUD.EXE can't be deleted from the recycle bin of her Mac. I
thought the reason for not being able to delete the file is because
TUD.EXE is actually running.

What other reasons should she look at?

It would be nice to get something to delete the file, but it is said the
virus (on Windows) infects lots of other files.  This means deleting it
may not solve the problem at all.

What checks or tests should my friend do?

--
TUD.EXE :-

VIRUS:  <http://www.datafilehost.com/download-ab00f13c.html
SCAN RESULT:  <http://preview.tinyurl.com/y9c584n

Re: Windows virus on Mac?



Quoted text here. Click to load it

Doubtful.


Try using the master account and delete it from there.

Try moving it from the trash to a folder on the desktop (maybe rename
it) - then delete the entire folder.

Quoted text here. Click to load it

It won't be running.

Quoted text here. Click to load it

Search the web for 'undeletable files on Mac' or 'emptying trash on Mac'
and try some of the suggestions offered.
Quoted text here. Click to load it



Re: Windows virus on Mac?




Quoted text here. Click to load it

Linux (and I assume osx) doesn't lock a directory entry, just because
a copy of the executable happens to be running.

Deleting a file (aka unlink) just removes the directory entry.  The
inode used by the file will remain in use (by that file), until all
programs that have the file open, are closed, at which time the
space will be available for reuse.

A common example where this matters, shows up when a log file is
filling the disk, due to some program generating an error message
in a loop.  Deleting the log file does not free up the disk space,
until the syslog daemon is stopped/restarted.

Not being able to delete the file would be caused by either file
ownership, or file permissions.

Most likely, the file is marked as read only.  I expect right clicking
on the file, in the file manager, and then selecting properties would
allow the write permission for the user to be turned on.

Regards, Dave Hodgins

--
Change nomail.afraid.org to ody.ca to reply by email.
(nomail.afraid.org has been set up specifically for
use in usenet. Feel free to use it yourself.)

Re: Windows virus on Mac?




Quoted text here. Click to load it

Gavin, here is a help page from Apple. Basically, the first thing to do
is check to see if the file is locked. You can see that from the Get
Info. Move the file to the desktop, right click or control click and
select Get Info. In the dialog box at the bottom it will show a lock -
open is not locked, closed is locked. You should be able to click off
the check box to unlock it. If this is the reason, then you should be
able to empty the trash. Another option is to hold down the Option key
while emptying the trash.
Here is the link: http://support.apple.com/kb/HT1526
--
John Gentile
Newsletter editor
Rhode Island Apple Group


Re: Windows virus on Mac?




Quoted text here. Click to load it

It can't run (without Windows running in some fashion). There are no OS
X viruses...never have been.

Re: Windows virus on Mac?




Quoted text here. Click to load it

http://www.sophos.com/security/analyses/viruses-and-spyware/osxleapa.html



Re: Windows virus on Mac?




Quoted text here. Click to load it

OK...the standard qualifiers...no OS X viruses so long as there is no
physical access, special rights, or PEBCAK.

Re: Windows virus on Mac?



Quoted text here. Click to load it

There is nothing standard about limiting the definition of virus just to
suit your argument.

It is a virus for the Mac - and runs on OS-X

http://www.sophos.com/pressoffice/news/articles/2006/02/macosxleap.html

There is nothing about that Mac OS that excludes the possibility or
viruses.

http://www.macforensicslab.com/ProductsAndServices/index.php?main_page=document_general_info&products_id=174



Re: Windows virus on Mac?




Quoted text here. Click to load it

The point is...OS X cannot become infected without "help." Can't say
that about Windows.

Re: Windows virus on Mac?




Quoted text here. Click to load it

Truth be told, Windows requires help as well. A virus doesn't magically
execute itself. In almost ALL infection cases, the user can rightfully be
blamed.


--
"Is there anything in Guul Draz that doesn't suck the life out of you?"
 - Tarsa, Sea Gate sell-sword.


Re: Windows virus on Mac?



Quoted text here. Click to load it

Yes, I can. If a program runs, it is because the user supplied power to
the machine. The OS or related programs can invoke other (infected or
otherwise malicious) programs to run.

Whether or not user interaction is required, is *not* part of the
definition for virus or worm.

Many definitions do (wrongly) make a point of whether or not user action
is required, but that is a red herring.



Re: Windows virus on Mac?




Xns9D09E7D7EC3685D4AM2@160.sjc.astraweb.com...
Quoted text here. Click to load it



Re: Windows virus on Mac?



Terry Pinnell wrote:

Quoted text here. Click to load it

Nothing to add, eh?

Re: Windows virus on Mac?



Gavin wrote:
Quoted text here. Click to load it

No. But if she starts a virtual Windows session, it can run in that. If
she never does that, she can ignore TUD.EXE.

Quoted text here. Click to load it

The easiest solution is to take the Mac to a an Apple store, or at least
go there for advice. They are very helpful.

But if you want to do it yourself, Google on "Mac anti-virus software",
you'll find quite a few. (Macs are _not_ immune!) For advice on which is
best, go to a newsgroup for Mac users. You can also ask there about how
to change the permissions on any file so that you can delete it, which
in this case may be the best way to go. I've posted questions on
seattle.users.macintosh and received courteous replies. it's not a very
active group, though.


HTH
wolf k.


Re: Windows virus on Mac?




Quoted text here. Click to load it

There are not now nor have there been any OS X viruses in the wild. Any
infections depend on physical access, special rights, or PEBCAK.

Re: Windows virus on Mac?



Mr. Strat wrote:
Quoted text here. Click to load it

That's nice to know....

OTOH, I found this:

http://www.clamxav.com /
and this:
http://www.macforensicslab.com/ProductsAndServices/index.php?main_page=3D =
document_general_info&products_id=3D174

NB the last paragraph. (The date of the post is early 2008, since it=20
references items dated 2007-12-31.)

Quote:
Mac OS X (Including Mac OS X 10.5 Leopard)

All successful, and most plausible, malware attacks on Mac OS X have=20
occurred in the last 2 years with the last quarter of 2007 being=20
particularly prolific. Market penetration and overall sales of the Mac=20
OS X system have directly mirrored development of malware, a phenomenon=20
also demonstrated with other operating systems such as Microsoft=20
Windows. Based on this data there is no reason to believe the trend will =

not continue as Apple continues to increase their market share.

The concept of the economy of scale has historically meant that malware=20
authors have not previously considered the Mac a viable target. This=20
protection is being eroded by the increase in size of the Mac user base.

IDC analyst Chris Christiansen is warning Mac users of the growing threat=
=2E

"Most Mac users take security too lightly. In fact, most are quite proud =

of the fact that they don't run any security at all," Christiansen said. =

"That's an open door; at some point it will be exploited."
http://www.macnn.com/articles/07/12/31/mac.os.x.a.growing.target /

=93Apple users, your days of worry-free web surfing could be numbers. A=20
Mac internet security and privacy software maker has discovered what is=20
believed to be the first professionally crafted in-the-wild malware=20
targeting the Mac Operating system.=94
http://www.scmagazineus.com/Trojan-targets-Mac-users/article/58290/?sourc =
e=3DPSGL1SCM1001&gclid

cheers,
wolf k.

Re: Windows virus on Mac?



Quoted text here. Click to load it

Yes there has.

http://threatinfo.trendmicro.com/vinfo/virusencyclo/default5.asp?vname=OSX_LEAP.A

Quoted text here. Click to load it

Excluding malware that exploits software vulnerabilities, and malware
that requires exploiting user's bad habits (mostly worms and trojans),
then "yes" perhaps there aren't any of those for OS-X in the wild up to
and including this point in time. However, you seem to be implying that
this trend will continue due to some sort of "security" built into the
OS. It might be worth noting that "viruses" do not depend on any
functions other than what users are normally supplied by the OS.

http://vx.netlux.org/lib/afc08.html

Having a secure OS (and adhering to safe computing practices) is a good
thing, but it won't stop "viruses" from being able to spread on that
platform or any other.




Site Timeline