Macro Viruses on the Mac

B

Bible John

I am told that OSX is virus free but I have to wonder about Macro viruses.
Can they effect a Mac client?
--
Romans 6:23 For the wages of sin is death,
but the gift of God is eternal life
in Christ Jesus our Lord.
CERM-Church Education Resource Ministries
http://www.cerm.info
 
J

Jim Gordon MVP

Bible said:
I am told that OSX is virus free but I have to wonder about Macro viruses.
Can they effect a Mac client?

Hi,

Macro viruses can affect both Macs and PCs. The one that crops up most
often is an old one that affects Microsoft Word. Macro viruses are
currently few and far between.

Phishing attacks are extremely prevalent. They open Mac users to major
problems such as identity theft. A new one is out that injects the first
"in the wild" trojan that I have heard about.
http://isc.sans.org/diary.html?storyid=3595

The rule is the same for phishing attacks and macro viruses. Don't
install anything without being 100% certain of the true source. Even
then you're not 100% safe from troubles.

-Jim

--
Jim Gordon
Mac MVP

MVPs are independent experts who are not affiliated with Microsoft.


Visit my blog
http://blog.360.yahoo.com/blog-i7JMeio7cqvhotIUwCzaJWq9
 
P

Phillip Jones

One reason why Although I think that Word should have VBA ability for
those that need it or Macro ability for those that need it. I have never
used Macros or VBA.

I turned off the use of Macros back during the days Of Word 6.0.1.a and
Excel 5.0.1.a Back when received the warning from Symantec. Haven't
looked back since.
Hi,

Macro viruses can affect both Macs and PCs. The one that crops up most
often is an old one that affects Microsoft Word. Macro viruses are
currently few and far between.

Phishing attacks are extremely prevalent. They open Mac users to major
problems such as identity theft. A new one is out that injects the first
"in the wild" trojan that I have heard about.
http://isc.sans.org/diary.html?storyid=3595

The rule is the same for phishing attacks and macro viruses. Don't
install anything without being 100% certain of the true source. Even
then you're not 100% safe from troubles.

-Jim

--
------------------------------------------------------------------------
Phillip M. Jones, CET |LIFE MEMBER: VPEA ETA-I, NESDA, ISCET, Sterling
616 Liberty Street |Who's Who. PHONE:276-632-5045, FAX:276-632-0868
Martinsville Va 24112 |[email protected], ICQ11269732, AIM pjonescet
------------------------------------------------------------------------

If it's "fixed", don't "break it"!

mailto:p[email protected]

<http://www.kimbanet.com/~pjones/default.htm>
<http://www.kimbanet.com/~pjones/90th_Birthday/index.htm>
<http://www.kimbanet.com/~pjones/Fulcher/default.html>
<http://www.kimbanet.com/~pjones/Harris/default.htm>
<http://www.kimbanet.com/~pjones/Jones/default.htm>

<http://www.vpea.org>
 
J

John McGhie

Hi Phillip:

Maybe you haven't looked back. But neither have the bad guys :)

Most of the serious malware infesting the Internet these days has nothing to
do with VBA, or Microsoft Office.

Macs are vulnerable to a smaller number of attacks than PCs, and a smaller
number of bad guys are writing cross-platform or Mac-dedicated malware
currently.

However, the situation is changing very rapidly.

Macs are now making up five to ten per cent of computers sold each year, not
to mention the iPods and iPhones. So it is now worth their while for the
bad guys to go after Macs the same way as they go after PCs.

The only safe answer we can give to non-experts is "You should have the same
type and level of protection running on your Mac as you would on your PC,
before you connect it to the Internet."

If that level of protection happens to be "none", you will observe the same
effects in your bank and credit-card accounts within about 20 minutes. Some
time later, you will probably be arrested for terrorism, if the bad guys get
hold of your passport details :)

Americans should note that Guantanamo Bay is a luxury hotel compared to some
of the prisons other countries will throw you into if this happens :) At
least in Gitmo you get regular baths. Even if they do do them with a water
board...

Cheers

One reason why Although I think that Word should have VBA ability for
those that need it or Macro ability for those that need it. I have never
used Macros or VBA.

I turned off the use of Macros back during the days Of Word 6.0.1.a and
Excel 5.0.1.a Back when received the warning from Symantec. Haven't
looked back since.

--

Don't wait for your answer, click here: http://www.word.mvps.org/

Please reply in the group. Please do NOT email me unless I ask you to.

John McGhie, Microsoft MVP, Word and Word:Mac
Nhulunbuy, NT, Australia. mailto:[email protected]
 
D

Dianation

Hi John! I was wondering about all this Macro viruses talk.. how do you know
for sure you have one? I ask because, lately I get a message when I try to
open Word files that I've created, that says "The document you are opening
contains macros or customizations. Some macros may contain viruses that could
harm your computer...." you have the options to enable or disable macros...
The strange part is, that I can’t find/see a macro anywhere in the contents
of the Word document.
I never thought of this as a virus, but lately I'm unable to send any word
files from my computer. If I attach a Word file to an e-mail using Yahoo,
Hotmail or Gmail, it doesn’t allow it, saying that the file is infected.
On Word, I do have the option on to warn me about files with macros... is it
safer to have that option on or off? It seems to me its better to know if
there's a possible virus so u dont open the file, right? but in this case I'm
the one who is creating an 'infected' file without even knowing....
I have ran HouseCall (online scan) and found no virus, or any threats. My
computer seems clean.
In case this helps I have Microsoft Word 2004 for Mac, version 11.0.
Mac OS version 10.4.11, Processor Intel Core 2 Duo.

Thank you for your time and assistance!!

Diana
 
J

John McGhie

Hi Diana:

Viruses these days are really nasty. I would defy even a computer
professional to know for SURE that you had some of the worst of them: they
give no indication at all that they are doing bad things.

Trend Micro has a tremendous reputation in the industry: if they say there's
no virus on your computer, they are quite likely to be right!

The warning you are seeing about "Macros or Customisations" is not very
helpful, because it won't tell you which. Given that you have run Trend, I
suspect it is finding "customisations" -- keystrokes or toolbars -- and
there is nothing dangerous in the document.

Yahoo, Hotmail and Gmail are "Freeware" email services, and you get what you
pay for :) They are probably using the same simplistic logic as the
warning is.

That warning looks only to see if the "OLE Object Container" that "could"
contain macros and customisations exists. It does not look inside the
container to see if there are really any macros there.

So it gives a lot of false positives. However, I would leave it on anyway,
because if you are not running an antivirus application, it's the only
"protection" you have.

If you HAVE got a virus, then it is likely to be in your Normal template,
and if it is, then any new document you create will have it also. An easy
way to find out is to quit Word and drag the Normal template to the desktop.

If that takes the warnings away, then there is an issue with your Normal
template, and it "may" be a virus. If that is the case, delete the desktop
file without opening it, or it will give you the virus back :)

Hope this helps

Hi John! I was wondering about all this Macro viruses talk.. how do you know
for sure you have one? I ask because, lately I get a message when I try to
open Word files that I've created, that says "The document you are opening
contains macros or customizations. Some macros may contain viruses that could
harm your computer...." you have the options to enable or disable macros...
The strange part is, that I can¹t find/see a macro anywhere in the contents
of the Word document.
I never thought of this as a virus, but lately I'm unable to send any word
files from my computer. If I attach a Word file to an e-mail using Yahoo,
Hotmail or Gmail, it doesn¹t allow it, saying that the file is infected.
On Word, I do have the option on to warn me about files with macros... is it
safer to have that option on or off? It seems to me its better to know if
there's a possible virus so u dont open the file, right? but in this case I'm
the one who is creating an 'infected' file without even knowing....
I have ran HouseCall (online scan) and found no virus, or any threats. My
computer seems clean.
In case this helps I have Microsoft Word 2004 for Mac, version 11.0.
Mac OS version 10.4.11, Processor Intel Core 2 Duo.

Thank you for your time and assistance!!

Diana

--

Don't wait for your answer, click here: http://www.word.mvps.org/

Please reply in the group. Please do NOT email me unless I ask you to.

John McGhie, Microsoft MVP, Word and Word:Mac
Nhulunbuy, NT, Australia. mailto:[email protected]
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top