Rechercher
Contactez-nous Suivez-nous sur Twitter En francais English Language
 

Freely subscribe to our NEWSLETTER

Newsletter FR

Newsletter EN

Vulnérabilités

Unsubscribe

Intego Security Memo: Preliminary List of Applications that Install OSX/OpinionSpy Spyware

June 2010 by Intego Security Alert

Intego announced that the OSX/OpinionSpy spyware has been found in a
number of applications and screen savers that are distributed on several web sites. This
spyware performs a number of malicious actions, from scanning files to recording user
activity, as well as sending information about this activity to remote servers and opening a
backdoor on infected Macs.

As we said in our initial security alert, the spyware itself is not contained in these
applications, but is downloaded during the installation process. The information provided
with some of these applications contains a misleading text that users must accept explaining
that a “market research” program is installed with them, but not all of these specify this.
Some of these programs are also distributed directly from developers’ web sites with no
such warning.
The spyware is installed as an application named PremierOpinion.
Below is a list of the screensavers and applications that we have found so far which install
this spyware.
Screensavers: all these screensavers are made by the same company, 7art-screensavers,
and are available from their web site, http://7art-screensavers.com.

• Secret Land ScreenSaver v.2.8

• Color Therapy Clock ScreenSaver v.2.8

• 7art Foliage Clock ScreenSaver v.2.8

• Nature Harmony Clock ScreenSaver v.2.8

• Fiesta Clock ScreenSaver v.2.8

• Fractal Sun Clock ScreenSaver v.2.8

• Full Moon Clock ScreenSaver v.2.8

• Sky Flight Clock ScreenSaver v.2.8

• Sunny Bubbles Clock ScreenSaver v.2.9

• Everlasting Flowering Clock ScreenSaver v.2.8

• Magic Forest Clock ScreenSaver v.2.8

Intego Security Memo – June 1, 2010 www.intego.com

• Freezelight Clock ScreenSaver v.2.9

• Precious Stone Clock ScreenSaver v.2.8

• Silver Snow Clock ScreenSaver v.2.8

• Water Color Clock ScreenSaver v.2.8

• Love Dance Clock ScreenSaver v.2.8

• Galaxy Rhythm Clock ScreenSaver v.2.8

• 7art Eternal Love Clock ScreenSaver v.2.8

• Fire Element Clock ScreenSaver v.2.8

• Water Element Clock ScreenSaver v.2.8

• Emerald Clock ScreenSaver v.2.8

• Radiating Clock ScreenSaver v.2.8

• Rocket Clock ScreenSaver v.2.8

• Serenity Clock ScreenSaver v.2.8

• Gravity Free Clock ScreenSaver v.2.8

• Crystal Clock ScreenSaver v.2.6

• One World Clock ScreenSaver v.2.8

• Sky Watch ScreenSaver v.2.8

• Lighthouse Clock ScreenSaver v.2.8
Applications: so far, Intego has only found this spyware in one application:

• MishInc FLV To Mp3, http://www.mishinc.info/mac_flv_to_mp3.php
Intego is continuing its search for other applications that install this spyware. We will post
more information regarding this spyware on our Mac Security Blog: http://blog.intego.com


See previous articles

    

See next articles


Your podcast Here

New, you can have your Podcast here. Contact us for more information ask:
Marc Brami
Phone: +33 1 40 92 05 55
Mail: ipsimp@free.fr

All new podcasts