AVG Deletes ITunes Files - False/Positive

[Douglas]

Originally Posted by Stercus Vultus

I never told "people its impossible", moon. Everything is possible. Eventually.
I told – and am telling – people that, right now (and in the past 25 years!), in real life, Macs are de facto invulnerable to viruses.

What happens tomorrow is anyone's guess.
But the facts are that OSX sofar (25 years!) has an impeccable track record, as opposed to Windows' track record that is riddled with over 120,000 viruses...

Originally Posted by Stercus Vultus

Argument...?

The fact you said in 25 years they have been invulnerable to viruses, yet they tell you how to get rid of viruses that your imac may get.

[Douglas]

Originally Posted by Stercus Vultus

If you guys start name calling and insulting, instead of presenting valid arguments, it's pretty clear who is 10 years old...

LOL!

You arguments are baseless. Time and time again its been shown how you are wrong, and you just ignore those posts and put up more drival about how unsinkable a mac is.

[Stercus Vultus]

Originally Posted by Douglas

The fact you said in 25 years they have been invulnerable to viruses, yet they tell you how to get rid of viruses that your imac may get.

...IF your iMac – on OS9, and in 2002 – should get infected (they never were IRL).
iMacs on OSX – since 2001, and an entirely different concept OS – were even a magnitude less vulnerable to viruses. Borne out IRL since: none have appeared to date.
As opposed to the over 120,000 Windows viruses in the wild.

In fact, "anti-virus software for OSX" is a fraud based on FUD. The McAfees and Nortons of this world are cashing in on it by spreading Fear, Uncertainty, and Doubt. Like you do.
Never yet vindicated!

[Stercus Vultus]

Originally Posted by Douglas

You arguments are baseless.

That is your unfounded opinion: you present no arguments for it. So, whatever my arguments are, they are arguments. In any case better than no arguments at all, name calling and insulting.

[Douglas]

So no Imac has ever gotten a virus, trojan, backdoor or any type of malaware ever? Bullshit.

[Stercus Vultus]

Originally Posted by Douglas

So no Imac has ever gotten a virus, trojan, backdoor or any type of malaware ever? Bullshit.

No iMac – on OS9 or OSX – has ever gotten a virus to date. Any other malware on iMacs – on OS9 or OSX – like Trojans or keyloggers was always the result of user error (they clicked on something they shouldn't have).
FYI: viruses infect machines without any user intervention, and users never see them. It all happens in the deep background. Trojans, and any other malware besides viruses, need to be 'let in' by a user action.

[swampler]

Originally Posted by Stercus Vultus

Trojans, and any other malware besides viruses, need to be 'let in' by a user action.

Sort of like Vista makes you enter the admin password to run an install program, from what I understand?

[felix.reichardt]

The solution on windows PC's is quite simple - use a (least access user - LUA) standard user account instead of a admin account and NTFS file system. Its the same principle as UNIX yet people complaining if once in a while they have to key in the admin password after initial setup. For day-to-day tasks nobody needs admin rights. Is it 100% safe - no but it prevents your system from the VAST majority of malware.

[felix.reichardt]

Originally Posted by Stercus Vultus

No iMac – on OS9 or OSX – has ever gotten a virus to date. Any other malware on iMacs – on OS9 or OSX – like Trojans or keyloggers was always the result of user error (they clicked on something they shouldn't have).
FYI: viruses infect machines without any user intervention, and users never see them. It all happens in the deep background. Trojans, and any other malware besides viruses, need to be 'let in' by a user action.

So opening an email attachment containing a virus is no user intervention? Putting in an infected USB stick is no user intervention? Thats how users let them in as you say.

[mcbit]

Originally Posted by Stercus Vultus

FYI: viruses infect machines without any user intervention, and users never see them. It all happens in the deep background. Trojans, and any other malware besides viruses, need to be 'let in' by a user action.

A virus is a piece of self replicating binary code which must be carried in a host file, on a PC usually a .com or a .exe. If the host file is not accessed the file is not loaded into memory. Once in memory it spreads by replicating its own code into other files. Simply copying an infected file onto your computer will not infect it.

I think that you will find that the vast majority of your 120,000 windows viruses are not viruses at all.

Below is a list of true viruses which have infected the pre OS X Mac OSs

"
AIDS - infects application and system files. No intentional damage.
(nVIR B strain)

Aladin - close relative of Frankie

Anti (Anti-A/Anti-Ange, Anti-B, Anti Variant) - can't spread under
system 7.x, or System 6 under MultiFinder. Can damage applications
so that they can't be 100% repaired.

CDEF - infects desktop files. No intentional damage, and doesn't
spread under system 7.x.

CLAP: nVIR variant that spoofs Disinfectant to avoid detection
(Disinfectant 3.6 recognizes it).

Code 1: file infector. Renames the hard drive to "Trent Saburo".
Accidental system crashes possible.

Code 252: infects application and system files. Triggers when run
between June 6th and December 31st. Runs a gotcha message ("You
have a virus. Ha Ha Ha Ha Ha Ha Ha Now erasing all disks...
[etc.]"), then self-deletes. Despite the message, no intentional
damage is done, though shutting down the Mac instead of clicking to
continue could cause damage. Can crash System 7 or damage files,
but doesn't spread beyond the System file. Doesn't spread under
System 6 with MultiFinder beyond System and MultiFinder. Can cause
various forms of accidental damage.

Code 9811: hides applications, replacing them with garbage files
named "something like 'FIDVCXWGJKJWLOI'." According to Ken Dunham
who reported this virus in November, "The most obvious symptom of
the virus is a desktop that looks like electronic worms and a
message that reads 'You have been hacked by the Pretorians.'"

Code 32767: once a month tries to delete documents. This virus is
not known to be in circulation.

Flag: unrelated to WDEF A and B, but was given the name WDEF-C in
some anti-virus software. Not intentionally damaging but when
spreading it overwrites any existing 'WDEF' resource of ID '0', an
action which might damage some files. This virus is not known to be
in circulation.

Frankie: only affects the Aladdin emulator on the Atari or Amiga.
Doesn't infect or trigger on real Macs or the Spectre emulator.
Infects application files and the Finder. Draws a bomb icon and
displays 'Frankie says: No more piracy!"

Fuck: infects application and System files. No intentional damage.
(nVIR B strain)

Init 17: infects System file and applications. Displays message
"From the depths of Cyberspace" the first time it triggers.
Accidental damage, especially on 68K machines.

Init 29 (Init 29 A, B): Spreads rapidly. Infects system files,
applications, and document files (document files can't infect other
files, though). May display a message if a locked floppy is
accessed on an infected system 'The disk "xxxxx" needs minor
repairs. Do you want to repair it?'. No intentional damage, but can
cause several problems - Multiple infections, memory errors, system
crashes, printing problems, MultiFinder problems, startup document
incompatibilities.

Init 1984: Infects system extensions (INITs). Works under Systems 6
and 7. Triggers on Friday 13th. Damages files by renaming them,
changing file TYPE and file CREATOR, creation and modification
dates, and sometimes by deleting them.

Init-9403 (SysX): Infects applications and Finder under systems 6
and 7. Attempts to overwrite whole startup volume and disk
information on all connected hard drives. Only found on Macs
running the Italian version of MacOS.

Init-M: Replicates under System 7 only. Infects INITs and
application files. Triggers on Friday 13th. Similar damage
mechanisms to INIT-1984. May rename a file or folder to "Virus
MindCrime". Rarely, may delete files.

MacMag (Aldus, Brandow, Drew, Peace): first distributed as a
HyperCard stack Trojan, but only infected System files. Triggered
(displayed a peace message and self-deleted on March 2nd 1988, so
very rarely found.

MBDF (A,B): originated from the Tetracycle, Tetricycle or
"tetris-rotating" Trojan. The A strain was also distributed in
Obnoxious Tetris and Ten Tile Puzzle. Infect applications and
system files including System and Finder. Can cause accidental
damage to the System file and menu problems. A minor variant of
MBDF B appeared in summer 1997: Disinfectant and Virex have been
updated accordingly.

MDEF (MDEF A/Garfield, MDEF B/Top Cat, C, D): infect System file
and application files (D doesn't infect System). No intentional
damage, but can cause crashes and damaged files.

MDEF-E and MDEF-F: described as simple and benign. They infect
applications and system files with an 'MDEF' resource ID '0', not
otherwise causing file damage. These viruses are not known to be in
circulation.

nCAM: nVIR variant

nVIR (nVIR A, B, C - AIDS, Fuck, Hpat, Jude, MEV#, nFlu): infect
System and any opened applications. Extant versions don't cause
intentional damage. Payload is either beeping or (nVIR A) saying
"Don't panic" if MacInTalk is installed.

nVIR-f: nVIR variant.

prod: nVIR variant

Scores (Eric, Vult, NASA, San Jose Flu): aimed to attack two
applications that were never generally released. Can cause
accidental damage, though - system crashes, problems printing or
with MacDraw and Excel. Infects applications, Finder, DA Handler.

SevenDust-A through G (MDEF 9806-A through D, also known as 666, E
was at first called "Graphics Accelerator"): a family of five
viruses which spread both through 'MDEF' resources and a System
extension created by that resource. The first four variants are not
known to be in circulation. Two of these viruses cause no other
damage. On the sixth day of the month, MDEF 9806-B may erase all
non-application files on the current volume. The SARC encyclopedia
calls MDEF 9806-C, "polymorphic and encrypted, no payload," and
MDEF 9806-D, "encrypting, polymorphic, symbiotic," and says the
symbiotic part, "alters a 'WIND' resource from the host
application." SevenDust E, not to be confused with the legitimate
ATI driver "Graphics Accelerator", began as a trojan horse released
to Info-Mac and deleted there on or about September 26, 1998. Takes
two forms, 'INIT' resource ID '33' in an extension named
"\001Graphics Accelerator" and an 'MDEF' resource ID '1' to '255'.
Between 6:00 a.m. and 7:00 a.m. on the sixth and twelfth day of any
month, the virus will try to delete all non-application files on
the startup disk. John Dalgliesh describes "Graphics Accelerator"
on his Web page for AntiGax, a free anti-SevenDust E utility; any
errors here in translation are not his. SevenDust F uses a trojan
"ExtensionConflict", common extensions names, and creator 'ACCE'.[SL]

T4 (A, B, C, D): infects applications, Finder, and tries to modify
System so that startup code is altered. Under System 6 and 7.0,
INITs and system extensions don't load. Under 7.0.1, the Mac may be
unbootable. Damage to infected files and altered System is not
repairable by Disinfectant. The virus masquerades as Disinfectant,
so as to spoof behaviour blockers such as Gatekeeper. Originally
included in versions 2.0/2.1 of the public domain game GoMoku.

T4-D spreads from application to application on launch by appending
itself to the 'CODE' resource. Deletes files other than the System
file from the System Folder, and documents, and is termed dangerous.
The D strain is not known to be in circulation [SL].

WDEF (A,B): infects desktop file only. Doesn't spread under System
7. No intentional damage, but causes beeping, crashes, font
corruption and other problems.

zero: nVIR variant.

Zuc (A, B, C): infects applications. The cursor moves diagonally
and uncontrollably across the screen when the mouse button is held
down when an infected application is run. No other intentional
damage is done."

[20DNewbie]

I had a Macbook once, big mistake.

Listening to the Apple guy extolling the greatness that is Mac as if it was a gift from the Gods brought to terra-firma by winged beast to my hands, I took the plunge.

After speeding home eagerly wanting to get started I plugged in the Cat5 cable and was prepared to be amazed.

Well that was the end of that, nothing happened. Ok power down, remove Cat5 and start again....

Power up and reinsert Cat5, while waiting I open my Apple Care and get ready to register everything. Only problem at this point is the same problem, no net.

Box it all up and take another drive to the Apple store and try and have the tech sort it out. It being a Mac, I'm surely the one to blame as it's such a brilliant piece of equipment it couldn't possibly falter. Of course the tech doesn't believe a word I say so he tells me no problem he'll have it up and running in no time. The tech comes back ten minutes later this time with a bewildered expression on his face and tells me he's never seen anything like it and he'll get me another one right away.

That's when I have an epiphany of sorts, that being if the tech who's been there for years and knows these machines inside and out can't get it going, do I really want to possibly go through all of this again? Nope.

I tell him no thanks and I'll take a refund, except he won't refund the Apple Care as it was opened thereby having to eat the $249 because of faulty hardware.

From that point on I've bought almost twice the computer(PC) at half the price and have never had any issues that I haven't created myself(poking about in the registry).

And yes, I'm still pissy about that $249.

[SureFire]

Norton sells four products for a reason. You might want them Stercus Vultus.

[Douglas]

Originally Posted by SureFire

Norton sells four products for a reason. You might want them Stercus Vultus.

Oh, but didnt you hear? They only make those to make money. TitanMac's are unsinkable...err unable to get viruses/malaware.

[SureFire]

Originally Posted by Douglas

Oh, but didnt you hear? They only make those to make money. TitanMac's are unsinkable...err unable to get viruses/malaware.

Well, of course, there's always the free one. And if that's not fancy enough, you can alway s download the OFFICIAL ONE THAT'S RIGHT ON APPLE'S WEBSITE. I don't know, but I think that's saying something.

Face it. We're at the first step.

Denial.

[swampler]

If nothing else, perhaps if he would at least try one of the free online scanning sites (Norton used to do that) just to see...

[mcbit]

...completely unnecessary!............although if I had something going on on my computer which wasn't going on on anyone elses; I think I might be looking client side.

I am a windaholic.....it's more than 10 years since I last had virus.

[Douglas]

Originally Posted by mcbit

...completely unnecessary!............although if I had something going on on my computer which wasn't going on on anyone elses; I think I might be looking client side.

I am a windaholic.....it's more than 10 years since I last had virus.

You mean you wouldnt blame it on the website that you (and only you) are getting popups?

[Stercus Vultus]

Originally Posted by mcbit

A virus is a piece of self replicating binary code which must be carried in a host file, on a PC usually a .com or a .exe. If the host file is not accessed the file is not loaded into memory. Once in memory it spreads by replicating its own code into other files. Simply copying an infected file onto your computer will not infect it.

I think that you will find that the vast majority of your 120,000 windows viruses are not viruses at all.

Below is a list of true viruses which have infected the pre OS X Mac OSs

"
AIDS - infects application and system files. No intentional damage.
(nVIR B strain)

Aladin - close relative of Frankie

Anti (Anti-A/Anti-Ange, Anti-B, Anti Variant) - can't spread under
system 7.x, or System 6 under MultiFinder. Can damage applications
so that they can't be 100% repaired.

CDEF - infects desktop files. No intentional damage, and doesn't
spread under system 7.x.

CLAP: nVIR variant that spoofs Disinfectant to avoid detection
(Disinfectant 3.6 recognizes it).

Code 1: file infector. Renames the hard drive to "Trent Saburo".
Accidental system crashes possible.

Code 252: infects application and system files. Triggers when run
between June 6th and December 31st. Runs a gotcha message ("You
have a virus. Ha Ha Ha Ha Ha Ha Ha Now erasing all disks...
[etc.]&quot, then self-deletes. Despite the message, no intentional
damage is done, though shutting down the Mac instead of clicking to
continue could cause damage. Can crash System 7 or damage files,
but doesn't spread beyond the System file. Doesn't spread under
System 6 with MultiFinder beyond System and MultiFinder. Can cause
various forms of accidental damage.

Code 9811: hides applications, replacing them with garbage files
named "something like 'FIDVCXWGJKJWLOI'." According to Ken Dunham
who reported this virus in November, "The most obvious symptom of
the virus is a desktop that looks like electronic worms and a
message that reads 'You have been hacked by the Pretorians.'"

Code 32767: once a month tries to delete documents. This virus is
not known to be in circulation.

Flag: unrelated to WDEF A and B, but was given the name WDEF-C in
some anti-virus software. Not intentionally damaging but when
spreading it overwrites any existing 'WDEF' resource of ID '0', an
action which might damage some files. This virus is not known to be
in circulation.

Frankie: only affects the Aladdin emulator on the Atari or Amiga.
Doesn't infect or trigger on real Macs or the Spectre emulator.
Infects application files and the Finder. Draws a bomb icon and
displays 'Frankie says: No more piracy!"

Fuck: infects application and System files. No intentional damage.
(nVIR B strain)

Init 17: infects System file and applications. Displays message
"From the depths of Cyberspace" the first time it triggers.
Accidental damage, especially on 68K machines.

Init 29 (Init 29 A, B): Spreads rapidly. Infects system files,
applications, and document files (document files can't infect other
files, though). May display a message if a locked floppy is
accessed on an infected system 'The disk "xxxxx" needs minor
repairs. Do you want to repair it?'. No intentional damage, but can
cause several problems - Multiple infections, memory errors, system
crashes, printing problems, MultiFinder problems, startup document
incompatibilities.

Init 1984: Infects system extensions (INITs). Works under Systems 6
and 7. Triggers on Friday 13th. Damages files by renaming them,
changing file TYPE and file CREATOR, creation and modification
dates, and sometimes by deleting them.

Init-9403 (SysX): Infects applications and Finder under systems 6
and 7. Attempts to overwrite whole startup volume and disk
information on all connected hard drives. Only found on Macs
running the Italian version of MacOS.

Init-M: Replicates under System 7 only. Infects INITs and
application files. Triggers on Friday 13th. Similar damage
mechanisms to INIT-1984. May rename a file or folder to "Virus
MindCrime". Rarely, may delete files.

MacMag (Aldus, Brandow, Drew, Peace): first distributed as a
HyperCard stack Trojan, but only infected System files. Triggered
(displayed a peace message and self-deleted on March 2nd 1988, so
very rarely found.

MBDF (A,B): originated from the Tetracycle, Tetricycle or
"tetris-rotating" Trojan. The A strain was also distributed in
Obnoxious Tetris and Ten Tile Puzzle. Infect applications and
system files including System and Finder. Can cause accidental
damage to the System file and menu problems. A minor variant of
MBDF B appeared in summer 1997: Disinfectant and Virex have been
updated accordingly.

MDEF (MDEF A/Garfield, MDEF B/Top Cat, C, D): infect System file
and application files (D doesn't infect System). No intentional
damage, but can cause crashes and damaged files.

MDEF-E and MDEF-F: described as simple and benign. They infect
applications and system files with an 'MDEF' resource ID '0', not
otherwise causing file damage. These viruses are not known to be in
circulation.

nCAM: nVIR variant

nVIR (nVIR A, B, C - AIDS, Fuck, Hpat, Jude, MEV#, nFlu): infect
System and any opened applications. Extant versions don't cause
intentional damage. Payload is either beeping or (nVIR A) saying
&quoton't panic" if MacInTalk is installed.

nVIR-f: nVIR variant.

prod: nVIR variant

Scores (Eric, Vult, NASA, San Jose Flu): aimed to attack two
applications that were never generally released. Can cause
accidental damage, though - system crashes, problems printing or
with MacDraw and Excel. Infects applications, Finder, DA Handler.

SevenDust-A through G (MDEF 9806-A through D, also known as 666, E
was at first called "Graphics Accelerator&quot: a family of five
viruses which spread both through 'MDEF' resources and a System
extension created by that resource. The first four variants are not
known to be in circulation. Two of these viruses cause no other
damage. On the sixth day of the month, MDEF 9806-B may erase all
non-application files on the current volume. The SARC encyclopedia
calls MDEF 9806-C, "polymorphic and encrypted, no payload," and
MDEF 9806-D, "encrypting, polymorphic, symbiotic," and says the
symbiotic part, "alters a 'WIND' resource from the host
application." SevenDust E, not to be confused with the legitimate
ATI driver "Graphics Accelerator", began as a trojan horse released
to Info-Mac and deleted there on or about September 26, 1998. Takes
two forms, 'INIT' resource ID '33' in an extension named
"\001Graphics Accelerator" and an 'MDEF' resource ID '1' to '255'.
Between 6:00 a.m. and 7:00 a.m. on the sixth and twelfth day of any
month, the virus will try to delete all non-application files on
the startup disk. John Dalgliesh describes "Graphics Accelerator"
on his Web page for AntiGax, a free anti-SevenDust E utility; any
errors here in translation are not his. SevenDust F uses a trojan
"ExtensionConflict", common extensions names, and creator 'ACCE'.[SL]

T4 (A, B, C, D): infects applications, Finder, and tries to modify
System so that startup code is altered. Under System 6 and 7.0,
INITs and system extensions don't load. Under 7.0.1, the Mac may be
unbootable. Damage to infected files and altered System is not
repairable by Disinfectant. The virus masquerades as Disinfectant,
so as to spoof behaviour blockers such as Gatekeeper. Originally
included in versions 2.0/2.1 of the public domain game GoMoku.

T4-D spreads from application to application on launch by appending
itself to the 'CODE' resource. Deletes files other than the System
file from the System Folder, and documents, and is termed dangerous.
The D strain is not known to be in circulation [SL].

WDEF (A,B): infects desktop file only. Doesn't spread under System
7. No intentional damage, but causes beeping, crashes, font
corruption and other problems.

zero: nVIR variant.

Zuc (A, B, C): infects applications. The cursor moves diagonally
and uncontrollably across the screen when the mouse button is held
down when an infected application is run. No other intentional
damage is done."

Stegosaurus had to watch out for T.Rex. But they're both looong gone. Exactly like "pre OS X Mac OSs", and the viruses for 'm. So that point is moot.

[mcbit]

Moot!!! You stated that there had never been a single virus on the Mac platform in the last 25 years!

[mcbit]

...even Apple admit to four of them