This has been discussed at ehMac too - as I posted a couple of days ago:
Intego took almost 3 months to warn anyone of this. The software in question (screen savers - who the heck bothers with those??) has been turfed off MacUpdate since March, and warnings posted:
http://www.macupdate.com/info.php/id/32426/7art-oasis-clockOf course, the anti-Mac crowd, having been fed "Mac virus" by the frothing-at-the-mouth press are all over this, even though this doesn't even rise to the level of a Trojan horse, in that it warns you of what it's doing. However, a lot of people don't bother reading the fine print, which I'm sure they're counting on.
As always, if you go around installing free downloaded software willy-nilly, you run the risk of stuff like this, no matter what OS you happen to be using.
There is one other application - MishInc FLV to MP3 converter - that contains the spyware. Other than that, it's just the 30 odd screen savers available from 7art, who thus far haven't responded to Intego or anyone else as far as I can tell. THEY'RE the real scumbags in all of this, IMHO. And they don't consider their "bundled 3rd party software" malware, BTW.
This is from 7art's privacy statement:
QUOTE
Bundled Software
Free 7art screensavers (but not the commercial ones) usually come with bundled software from reliable respected companies. You can always uninstall this third party software easily after the installation. For details please read the disclosure text in the beginning of the installation of each free screensaver. Bundling with other software lets us to keep the majority of our screensavers free of charge.
The problem is that you cannot "uninstall this third part software easily" - there is no uninstaller that actually works on a Mac from what I've read (other than Intego's, of course). In fact there is some doubt as to the efficacy of manually uninstalling the spyware as per instructions that can be found online. See:
Manually remove the newly found OSX/OpinionSpy spyware - Mac OS X HintsObviously, the best course of action is not to install it in the first place.
Discussion at the Clam X AV forum:
http://www.markallan.co.uk/BB/viewtopic.php?t=1965