Print Page - Screensaver Spyware Warning

Welcome to Techsurvivors => Tech => Topic started by: gunug on June 04, 2010, 08:01:41 AM

Title: Screensaver Spyware Warning
Post by: gunug on June 04, 2010, 08:01:41 AM

ZD/NET has an article about some "free" MAC OS Screensaver programs that are hosts for spyware that grabs information in your browser (Firefox & Safari at least) about who you are and what you're interested in. The details are here:

http://www.zdnet.com/blog/security/malware...560?tag=nl.e589

Title: Screensaver Spyware Warning
Post by: Xairbusdriver on June 04, 2010, 11:34:24 AM

Ah, yes, the "free software" deal...I suppose here are still people who believe "free" means "no cost?" "There ain't no free snack!" - WeightWatchers.

This thing still requires the (stupid/inept/too-trusting/uninformed/just-plain-naive) user to click the "accept/install/OK" button. It would be easy to claim all people who get this are not very smart, and they probably are the majority, but many just don't know any better. Who's responsible for their education? I think I need to do my part...gunug has certainly done his!

Title: Screensaver Spyware Warning
Post by: kimmer on June 04, 2010, 11:39:57 AM

Thanks for the heads up. The key, again, is that you have to agree to join RelevantKnowledge. Any user who willy-nilly installs this stuff almost deserves what they get. Rather like the people that keep falling for the "my son is stuck in jail and I need money" routines.

Title: Screensaver Spyware Warning
Post by: Paddy on June 04, 2010, 06:47:48 PM

This has been discussed at ehMac too - as I posted a couple of days ago:

Intego took almost 3 months to warn anyone of this. The software in question (screen savers - who the heck bothers with those??) has been turfed off MacUpdate since March, and warnings posted:

http://www.macupdate.com/info.php/id/32426/7art-oasis-clock

Of course, the anti-Mac crowd, having been fed "Mac virus" by the frothing-at-the-mouth press are all over this, even though this doesn't even rise to the level of a Trojan horse, in that it warns you of what it's doing. However, a lot of people don't bother reading the fine print, which I'm sure they're counting on.

As always, if you go around installing free downloaded software willy-nilly, you run the risk of stuff like this, no matter what OS you happen to be using.

There is one other application - MishInc FLV to MP3 converter - that contains the spyware. Other than that, it's just the 30 odd screen savers available from 7art, who thus far haven't responded to Intego or anyone else as far as I can tell. THEY'RE the real scumbags in all of this, IMHO. And they don't consider their "bundled 3rd party software" malware, BTW.

This is from 7art's privacy statement:

QUOTE

Bundled Software
Free 7art screensavers (but not the commercial ones) usually come with bundled software from reliable respected companies. You can always uninstall this third party software easily after the installation. For details please read the disclosure text in the beginning of the installation of each free screensaver. Bundling with other software lets us to keep the majority of our screensavers free of charge.

The problem is that you cannot "uninstall this third part software easily" - there is no uninstaller that actually works on a Mac from what I've read (other than Intego's, of course). In fact there is some doubt as to the efficacy of manually uninstalling the spyware as per instructions that can be found online. See: Manually remove the newly found OSX/OpinionSpy spyware - Mac OS X Hints

Obviously, the best course of action is not to install it in the first place.

Discussion at the Clam X AV forum: http://www.markallan.co.uk/BB/viewtopic.php?t=1965

Title: Screensaver Spyware Warning
Post by: Xairbusdriver on June 05, 2010, 12:04:54 PM

QUOTE

screen savers - who the heck bothers with those??

Hey! Stay on your side of the fence! I'm in charge of the Gripes and Grouching Department!

Besides, screensavers are good for...