They can get their web traffic another way and from someone else...

Downloads a codec without knowing what it is?

We all know the answer - and this "trojan" (apply named) is targeted to those who browse p***.

Doofuses.

Is this the kind of c*** we're going to have to put up with this year?

Discovered it on a colleagues MacBook Pro at work. It also prevented him from connecting to our Exchange email server and our intranet.

Removed it by scanning entire hard drive with Symantec Antivirus. There are also terminal instructions for removal here:

http://www.macworld.com/article/60823/2007/10/trojanhorse.html

Sorry, still don't use virus software (or anti-virus software) on my macs. (The only time I did was years ago when .Mac had that Virex stuff, but that was slow and useless, and it's been long gone).

Also didn't run this software, and I can't believe the MacNN "There's no viruses for the Mac!" people out there wasted their time doing such.

But, then, I'm logged in as a 'standard/non-admin' user (which of course means I'm way behind on my security updates because Apple can't figure out how to get them to install automagically), don't install video codecs from weird-a** sites, etc.

Plus, I don't surf for p*** on my Mac (that's what Windows is for, people! Although Apple is working to make it a better platform:

http://www.geekculture.com/joyoftech/joyarchives/1030.html

Maybe someone should discuss with your colleagues about browsing p*** on their work laptops....

He's been counseled, testudo. My post was not about employee rules of conduct, but only to verify this is an actual threat.

I thought it was already widely known as an actual threat, months ago when it first was announced (well, widely known being those who actually read web sites other than MacNN, where commenters basically denounce any story regarding Mac's and vulnerabilities).

Of course, there's still the issue of Apple having the "Open safe files" as a download preference, let alone considering a disk image AND an installer package "Safe files" (I'm sure someone will explain why they are safe).

BTW, is there a reason your colleague(s) have admin rights to the computer? We're not talking Windows here, what possibly could they need admin rights to run/use the computer for?

He doesn't run as admin, Testudo. But he is department head and paid for that laptop from his budget so he knows the admin username and password and can install software as the need arises. An embarrassing and time-wasting decision in this case.

It must be a new year - as I am agreeing with sir testudo more and more.

It seems the best way to avoid this trojan in the workplace is to fire people for whacking off with their laptops.

Doofuses.