Snow Leopard Malware Blocker Left for Dead

**Paul Daniel Ash** · 01-07-2010, 10:29 AM

One of the many "stealth" updates in Apple’s Mac OS X 10.6 Snow Leopard release last year was the operating system's first integrated malware blocker. The utility scans downloaded files for malware, which is increasingly becoming an issue on the Mac platform. According to a security blog, however, Apple has not updated the utility's signature database in months.

Threat Post is the blog of Kaspersky Lab bills itself as "the world’s largest privately held anti-malware company." In a post this week, researcher Ryan Naraine wrote that Apple has not updated the OS X Snow Leopard malware blocker for six months. Naraine says that there are no new anti-malware signature updates to the XProtect.plist file that contained antidotes for OSX.RSPlug.A and OSX.Iservice, two Trojan horses targeting Mac OS X.

Trojans like RSPlug.A are a new class of DNSChanger malware to appear on the Mac, largely through downloads of pirate software. DNSChangers modify the Mac’s DNS server and allow redirects of innocuous web requests, leading users to phishing web sites, or to web pages displaying ads for pornographic web sites. In the first case, users who think they are on legitimate sites may unthinkingly enter a user name and password, a credit card, or an account number. The redirected ads are probably just another way to get people to download porn, which continues to be one of the most lucrative industries on the internet.

Naraine also notes that the currently available version of the blocker is also "rudimentary," only scanning downloads from certain applications like Safari, Firefox, iChat, and Mail. Apple continues to recommend users install a third-party malware blocker as security threats to Macs increase.

image via Wired

**snap1500** · 01-07-2010, 10:33 AM

haha

**hancoma** · 01-07-2010, 11:06 AM

So what are good malware blockers for Macs? Anyone have good recommendations?

**hollow0** · 01-07-2010, 12:12 PM

Originally Posted by hancoma

So what are good malware blockers for Macs? Anyone have good recommendations?

I've used Avast for my Windows PC and i would recommend it for Mac as well. It's free for windows and mac (home version).

**hancoma** · 01-07-2010, 12:16 PM

Originally Posted by hollow0

I've used Avast for my Windows PC and i would recommend it for Mac as well. It's free for windows and mac (home version).

When I had a p/c I used avast, or zonealarm. However I found both to be resource hogs.
Have not tried Avast on a mac, is it a hog on mac as it is windows?

**hollow0** · 01-07-2010, 12:29 PM

Originally Posted by hancoma

When I had a p/c I used avast, or zonealarm. However I found both to be resource hogs.
Have not tried Avast on a mac, is it a hog on mac as it is windows?

Avast has been the lightest protection for me actually. It has never been a hog. I have used Symantec and Mcafee and those are horrible. I'm going to try Avast for Mac tonight and see how it is but, i'm thinking it will be just like the PC version. I'm surprised it was a hog for you.

**hancoma** · 01-07-2010, 12:53 PM

Originally Posted by hollow0

Avast has been the lightest protection for me actually. It has never been a hog. I have used Symantec and Mcafee and those are horrible. I'm going to try Avast for Mac tonight and see how it is but, i'm thinking it will be just like the PC version. I'm surprised it was a hog for you.

Please let me know how it works out. Being the pirate that I am I guess I need to worry!

**hollow0** · 01-07-2010, 04:06 PM

Originally Posted by hancoma

Please let me know how it works out. Being the pirate that I am I guess I need to worry!

LMAO ok dl as we speak i'll be back for an update.

**awesomeSlayer** · 01-07-2010, 04:22 PM

Avast! and iAntivirus are taking the job for me.

**hollow0** · 01-07-2010, 07:04 PM

Well after downloading Avast i ran a scan and then, opened up a few applications. It is noticeably a little bit slower but bearable. I don't like the options and preferences for the Mac version of Avast. It seems a lot more simpler on the PC side IMO. I also, rebooted the Mac and ran applications and everything seems fast and smooth so i don't know if Avast is running in the background or not. However, i did select to run on start up when i first installed it. Soo... i would say for anyone to try it for themselves to see how it works. i give it a C+/B-. The interface of Avast is what bothers me the most.

**hancoma** · 01-07-2010, 09:05 PM

Thanks Hollow0. I think I will pass on Avast for now and continue riding commando until something else comes out or I catch something! Lol!!!

**hollow0** · 01-07-2010, 09:39 PM

Originally Posted by hancoma

Thanks Hollow0. I think I will pass on Avast for now and continue riding commando until something else comes out or I catch something! Lol!!!

lol no problem man. I think i might go commando style too. I'll give it a week or so and see how it performs.

**rhekt** · 01-07-2010, 10:01 PM

Originally Posted by hancoma

So what are good malware blockers for Macs? Anyone have good recommendations?

-intego net barrier
-intego virus barrier
[both come with dual protection options if your also running windows on your mac]

anything from intego. as its platform is designed for a mac.

**hollow0** · 01-08-2010, 06:25 AM

Originally Posted by rhekt

-intego net barrier
-intego virus barrier
[both come with dual protection options if your also running windows on your mac]

anything from intego. as its platform is designed for a mac.

Wow man i just checked this out and it really is made for the Mac. I have another program at home for firewall but can't remember the name. I want to try this one out. How is it during using the Mac? Does it slow anything down? I would only be using the netbarrier.

**hancoma** · 01-08-2010, 07:14 AM

Originally Posted by hollow0

Wow man i just checked this out and it really is made for the Mac. I have another program at home for firewall but can't remember the name. I want to try this one out. How is it during using the Mac? Does it slow anything down? I would only be using the netbarrier.

Yea, it does look good, but I would prefer a trial method before dropping the cash for this program to ensure I am satisfied with its performance and backgrounding...

**hollow0** · 01-08-2010, 07:49 AM

Originally Posted by hancoma

Yea, it does look good, but I would prefer a trial method before dropping the cash for this program to ensure I am satisfied with its performance and backgrounding...

Dropping cash? Wait a minute i thought you said you were a pirate... :P

But, it does offer a trial method.

**hancoma** · 01-08-2010, 07:55 AM

Originally Posted by hollow0

Dropping cash? Wait a minute i thought you said you were a pirate... :P

But, it does offer a trial method.

LOL! I will pirate a lot of things, but not virus or malware protection! To risky!

**hollow0** · 01-08-2010, 08:16 AM

Originally Posted by hancoma

LOL! I will pirate a lot of things, but not virus or malware protection! To risky!

Understandable! I'm going to try this later on this evening. If you get to it first let me know how it is.

**rwin84** · 01-08-2010, 09:43 AM

this wont last long...

**Forever Young** · 01-08-2010, 07:56 PM

Does anyone know if ClamXAV has anti-malware capabilities?

Your favorite Apple, iPhone, iPad, iOS, Jailbreak, and Cydia site.

Thread: Snow Leopard Malware Blocker Left for Dead

Mac News

General Apple/Mac

The Following User Says Thank You to Paul Daniel Ash For This Useful Post:

The Following 2 Users Say Thank You to rhekt For This Useful Post: