τι συμβαινει ?
γιατι αυτο ?
το ξαναβαλα χειροκινητα αλλα γιατι εσβησε ετσι μονο του ?
υπαρχει trojan ?
επισης βρηκα ενα αρχειο dbg.gz μεσα ...
http://www.macworld.com/article/60823/2007/10/trojanhorse.html
επισης στο network preferences > ethernet > advanced > dns καρτελα > γραφει μια διευθυνση με αριθμους π.χ. ΧΧΧ.ΧΧΧ.Χ.Χ
αλλα ειναι γκρι ... οχι μαυρο
How to detect the trojan horse
What makes this trojan sneaky (for OS X 10.4 users, at least) is that there’s no visible way to see that the DNS information has been changed. So how can you tell if you’ve been infected? If you’re a VirusBarrier user and you have your definitions updated as of today, VirusBarrier will both find and remove the trojan horse.
If you’re running OS X 10.5, open your Network System Preferences pane and select your active interface (AirPort, Ethernet), then click Advanced. On the Advanced screen, click on the DNS tab. The leftmost box contains your DNS servers, and all the entries should be in black. If the trojan has been installed on your machine, you’ll see the phantom DNS in gray, listed above your normal DNS information, as seen in the image at right—the first two entries are the evil DNS, the last is the normal DNS.
Note: There are other situations where the DNS info may be gray—it appears that if your DNS is provided by another machine, for instance, then your legitimate DNS information will be in gray, not black. So while this may be an indicator, keep reading for the best way to be certain if your machine is infected.
γιατι αυτο ?
το ξαναβαλα χειροκινητα αλλα γιατι εσβησε ετσι μονο του ?
υπαρχει trojan ?
επισης βρηκα ενα αρχειο dbg.gz μεσα ...
http://www.macworld.com/article/60823/2007/10/trojanhorse.html
επισης στο network preferences > ethernet > advanced > dns καρτελα > γραφει μια διευθυνση με αριθμους π.χ. ΧΧΧ.ΧΧΧ.Χ.Χ
αλλα ειναι γκρι ... οχι μαυρο
How to detect the trojan horse
What makes this trojan sneaky (for OS X 10.4 users, at least) is that there’s no visible way to see that the DNS information has been changed. So how can you tell if you’ve been infected? If you’re a VirusBarrier user and you have your definitions updated as of today, VirusBarrier will both find and remove the trojan horse.
If you’re running OS X 10.5, open your Network System Preferences pane and select your active interface (AirPort, Ethernet), then click Advanced. On the Advanced screen, click on the DNS tab. The leftmost box contains your DNS servers, and all the entries should be in black. If the trojan has been installed on your machine, you’ll see the phantom DNS in gray, listed above your normal DNS information, as seen in the image at right—the first two entries are the evil DNS, the last is the normal DNS.
Note: There are other situations where the DNS info may be gray—it appears that if your DNS is provided by another machine, for instance, then your legitimate DNS information will be in gray, not black. So while this may be an indicator, keep reading for the best way to be certain if your machine is infected.
