为Mac系统提供安全和隐私软件的厂商Intego本周二警示说,一些Mac软件含有间谍软件。Macworld已经取得了存在该间谍软件的初步软件列
表。该间谍软件被称为OSX/OpinionSpy,它是2008年出现的Windows
间谍软件的变种。OSX/OpinionSpy弹出一个对话框,以市场调查的名义欺骗用户,取得
admin密码,安装“PremierOpinion”进程以root身份运行,在8254端口打开http后门,扫描所有本地和网络驱动卷,向
Safari,Firefox以及iChat中注入恶意代码,窃取包含电子邮件地址等信息的加密数据以及用户名,密码,信用卡号码等个人数据。
OSX/OpinionSpy可以自动升级并通过Mac OS自启动,即使卸载宿主程序,它依然在Mac中存在。
到目前为止,Intego发现在“MishInc FLV To
Mp3”和一些由7art-screensavers制作的屏保程序含有该间谍软件:
* Secret Land ScreenSaver
v.2.8
* Color Therapy Clock ScreenSaver v.2.8
* 7art Foliage Clock ScreenSaver v.2.8
* Nature Harmony
Clock ScreenSaver v.2.8
* Fiesta Clock ScreenSaver
v.2.8
* Fractal Sun Clock ScreenSaver
v.2.8
* Full Moon Clock ScreenSaver
v.2.8
* Sky Flight Clock
ScreenSaverv.2.8
* Sunny Bubbles Clock ScreenSaver
v.2.9
* Everlasting Flowering Clock
ScreenSaver v.2.8
* Magic Forest Clock ScreenSaver
v.2.8
* Freezelight Clock ScreenSaver
v.2.9
* Precious Stone Clock ScreenSaver
v.2.8
* Silver Snow Clock ScreenSaver
v.2.8
* Water Color Clock ScreenSaver v.2.8
* Love Dance Clock ScreenSaver v.2.8
* Galaxy Rhythm
Clock ScreenSaver v.2.8
* 7art Eternal Love Clock
ScreenSaver v.2.8
* Fire Element Clock ScreenSaver
v.2.8
* Water Element Clock ScreenSaver
v.2.8
* Emerald Clock ScreenSaver
v.2.8
* Radiating Clock ScreenSaver
v.2.8
* Rocket Clock ScreenSaver
v.2.8
* Serenity Clock ScreenSaver
v.2.8
* Gravity Free Clock ScreenSaver v.2.8
* Crystal Clock ScreenSaver
v.2.6
* One World Clock ScreenSaver
v.2.8
* Sky Watch ScreenSaver v.2.8
* Lighthouse
Clock ScreenSaver v.2.8
Intego宣称,将安全软件VirusBarrier
X5和X6的威胁库升级到2010年5月31日,即可清除该间谍软件。