QuickTime.xpt trojan

Matsaki

Registered
I just found out that I had the QuickTime.xpt trojan on my Mac. I found the way to take it away, but I don't know if I have to change all my passwords for my computer and PayPal etc. also now??

Why the hll does not Apple fix this hole in Safari!!!
 
If you had visited those sites while your DNS settings were changed by the trojan, then it would not be a bad idea to do so.

Better safe than sorry.

Also, this isn't a hole in Safari, it's a social engineering trick whereby the trojan author tricked you (or whomever got your computer infected) into double-clicking on an application that purported to be one thing, but was in actuality, another thing. There's nothing Apple can do about it -- they can't stop you from executing a program on your computer. If I send you a program that I claim will optimize your system, but in reality it deletes your home folder, and I trick you into running it, then there's no security measure that can prevent that (other than education about social engineering tricks).

You can turn off the option for Safari to automatically decompress and execute/mount downloaded programs in Safari's preferences, which would help.
 
Back
Top