Comments on: About

By: Marco

Marco — Tue, 22 Mar 2011 14:12:59 +0000

http://www.securelist.com/en/blog/6141/Apple_s_silent_updates

By: dennisdko

dennisdko — Sun, 20 Mar 2011 13:12:35 +0000

hi, this may not be related to mac, i want to congratulate you for a great website and your hobby of providing security solutions to mac users and people in need.

By: Samker

Samker — Sun, 27 Feb 2011 09:13:26 +0000

I was looking for some interesting things for our Apple/Mac area and find your Blog… Nice work Meths.

Best Regards,

Samker
Security [CENTRAL] Forum
http://www.SCforum.info/

By: najmi

najmi — Sat, 15 Jan 2011 02:03:40 +0000

Hi,

What are you doing for ur living? Security researcher?

By: Magnus Trouw

Magnus Trouw — Wed, 05 Jan 2011 15:58:21 +0000

Nice to see more attention to the subject. Recently did a Tech Series for Apple in The Netherlands on Apple Security. Really think security for Mac and iOS devices will be important in 2011. If you’re interested you can follow my Apple Security twitter feed http://twitter.com/MASS_security

By: Bharani

Bharani — Tue, 10 Aug 2010 10:20:11 +0000

hi “Meths” this is “BB” i gone thru ur LNK File Format right nw im analysing the Exploit named as Trojan LNK/CplLnk.A(Norman).After the Structure of Unknowm,always Zero Contents the structure varies and offset changed.Kindly go thru the variant and let me knw.

“Ur Blog luks gud”

By: Adrien Pujol

Adrien Pujol — Thu, 29 Jul 2010 10:32:23 +0000

Realy good work, nice blog.

By: Dennis D. Hubilla

Dennis D. Hubilla — Wed, 09 Jun 2010 08:38:16 +0000

Methusela,

I visited your web site,,I really appreciated your work…

By: Joel Font, CISA, CBCP

Joel Font, CISA, CBCP — Fri, 26 Mar 2010 17:21:20 +0000

Methusela,

Just visited your blog. Excellent work….

Joel

By: Keith

Keith — Sun, 01 Mar 2009 00:11:10 +0000

can’t post on the “how to remove “macaccess” trojan” post. when I press submit comment, the page it takes me to just says “discard” in the upper left hand corner of the screen. I’ve posted my situation below, if you could help i’d be very grateful

downloaded it at:
http://booksinprint.osa.pl/db3/edition-with-guide-john1.html

Downloaded it when looking for an ebook. Knew something was wrong when nothing showed up in the applications folder. Did some quick research and came across a story on macworld about deleting trojans. I ran the sudo crontab -l command in terminal and got the following response:
Library/Internet Plug-Ins/plugins.settings”>/dev/null 2>&1
I then ran sudo crontab -r and since then have been getting the response “crontab: no crontab for root” when I run sudo crontab -l.
I turned my computer off for the night and the next time I logged in, I could not connect to the internet. I used my wife’s computer to look for more information and came across this site. After reading this article, I deleted the mozilla and adobe plugins (could not find the i386 or cron files) and downloaded a trial of virusbarrier and moved it over to my computer. Afte r scanning my computer, virusbarrier found the packages in the receipts folder. I deleted the entire “install.pkg” in the receipts folder. I have checked my settings in system preferences and terminal (using scutil and then the command “show State:/Network/Global/DNS”) and never found any foreign DNS servers. Despite all this, I am unable to connect to the internet. I can see my network in Airport, but when I run diagnostics, it says the problem is in Network Settings. The settings are exactly the same as my wife’s computer, save for the fact that in the Advanced menu under the TCP/IP tab, my computer does not specify the router. Could this be the problem, or is the malware still affecting me somehow? I have since run virusbarrier and it is not detecting any problems. let me know if I need to clarify anything.