Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
A torrent of iWork seems useless... Apple will give you the full version and their servers are lightening fast.
 
Well it was going to happen sooner or later. :eek: As Macs get more popular and it's software (iWork) we will see more like this. Better keep the virus protectors up date and stop downloading illegal stuff. :/

Hugh

It's not a virus, it's a Trojan and there are differences between the two.

As much as I don't like riding the high horse, it does serve the pirates right in a base form, though I think people who code viruses/trojans/worms/whatever are scum.
 
As disturbing as it may seem, not all of Mac users use iTunes. Some do pirate their music via Limewire and the like, even to this day.

and yet they'd use iWork 09 - picky bunch...


Still, this is new - torrents of Mac S/W have been around for a long time...
 
Crazy Loons!

-1 for the pirates.

Apple were the pirates back in the 70's/80's. Anyway, that's another story and for a different thread I suppose (think pirate flag and blue boxes).

To answer a question I've seen surface a few times, people are downloading the torrent because they believe it is an exact image of the iWork installation disk which, as we know, does not require a serial number.
 
so do they recommend deleting that file? or can it be searched for using antivirus/trojan software?

you must be pretty dumb to download it, but i'm sure a lot of readers have, and want a fix.
 
so do they recommend deleting that file? or can it be searched for using antivirus/trojan software?

you must be pretty dumb to download it, but i'm sure a lot of readers have, and want a fix.

Not that you installed it of course! LOL
:)
 
This is what you get

This is what you get if you are stupid enough to download it somewhere instead of spending 79 Bucks, and if you want to try it get the Trial directly from :apple:
 
Indego's Blog said:
Intego is getting reports of the iServices.A Trojan horse actively downloading new code and acting as a botnet, participating in distributed denial of service attacks on certain websites.

You should be able to delete it by deleting the iWorkServices folder in Startup Items.
 
so do they recommend deleting that file? or can it be searched for using antivirus/trojan software?

you must be pretty dumb to download it, but i'm sure a lot of readers have, and want a fix.
The best way to guarantee it is completely removed is to zero-write the drive and reinstall the OS. :rolleyes:
 
I used to be into the whole hacked, cracked, and pirated software gig when I was much younger. I always wondered why my machines ran like garbage. Now that I keep everything legit, my machines run great. Coincidence? I think not.
 
Just to clarify....

What Is a Trojan horse?

A Trojan Horse is full of as much trickery as the mythological Trojan Horse it was named after. The Trojan Horse, at first glance will appear to be useful software but will actually do damage once installed or run on your computer. Those on the receiving end of a Trojan Horse are usually tricked into opening them because they appear to be receiving legitimate software or files from a legitimate source. When a Trojan is activated on your computer, the results can vary. Some Trojans are designed to be more annoying than malicious (like changing your desktop, adding silly active desktop icons) or they can cause serious damage by deleting files and destroying information on your system. Trojans are also known to create a backdoor on your computer that gives malicious users access to your system, possibly allowing confidential or personal information to be compromised. Unlike viruses and worms, Trojans do not reproduce by infecting other files nor do they self-replicate.



What Is a Virus?

A computer virus attaches itself to a program or file enabling it to spread from one computer to another, leaving infections as it travels. Like a human virus, a computer virus can range in severity: some may cause only mildly annoying effects while others can damage your hardware, software or files.

Almost all viruses are attached to an executable file, which means the virus may exist on your computer but it actually cannot infect your computer unless you run or open the malicious program. It is important to note that a virus cannot be spread without a human action, (such as running an infected program) to keep it going.

People continue the spread of a computer virus, mostly unknowingly, by sharing infecting files or sending e-mails with viruses as attachments in the e-mail.



What Is a Worm?

A worm is similar to a virus by design and is considered to be a sub-class of a virus. Worms spread from computer to computer, but unlike a virus, it has the capability to travel without any human action. A worm takes advantage of file or information transport features on your system, which is what allows it to travel unaided.

The biggest danger with a worm is its capability to replicate itself on your system, so rather than your computer sending out a single worm, it could send out hundreds or thousands of copies of itself, creating a huge devastating effect. One example would be for a worm to send a copy of itself to everyone listed in your e-mail address book. Then, the worm replicates and sends itself out to everyone listed in each of the receiver's address book, and the manifest continues on down the line.

Due to the copying nature of a worm and its capability to travel across networks the end result in most cases is that the worm consumes too much system memory (or network bandwidth), causing Web servers, network servers and individual computers to stop responding. In recent worm attacks such as the much-talked-about Blaster Worm, the worm has been designed to tunnel into your system and allow malicious users to control your computer remotely.
 
What's the point

Ok , I can undretand maybe getting a pirate copy of adobe creative suit or something like that, it's around £3000 new or something. iWork is £69, pennies compared to some apps, why not just save yourself hastle and buy a kosher copy
 
and starts the onlsought of Mac viruses....

Some onslaught ... since there are still 0 self-replicating, self-installing viruses in the wild.

So anyone know what this trojan actually DOES when it's installed?

From a blog I saw earlier, it starts a DoS attack on a certain website.

Also, I'm wonder if hacked versions of OS/X, found on the internet and used for Hackintosh installs, could have something like this aboard.

It is possible, and if I was a malware/virus writer, I would definitely consider that to be an effective method of delivery.

There is nothing in /System/Library/StartupItems/iWorkServices.

Does this mean I'm safe?

As long as you haven't installed a torrent of iWork recently.
 
********. I dl and installed iWorks, so did 4 people I know, none of us has this freakin' thing installed.

Intego is at it again with imaginary threats

I wish you had. It might have taught you a lesson. Seriously man, not cool.

I had a pirated version of Office on my system for a short time, but got rid of that quickly. Never want to mess with that.

jW
 
You should be able to delete it by deleting the iWorkServices folder in Startup Items.

Too little too late,

If they have gained access to the system with this trojan they could have installed a key logger, grabbed your password file, created a back-door account.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.