Unfortunately, malware is getting more sophisticated. We just encountered a new type of Trojan downloader that will infect many types of computers including Macs and Linux computers using a Java applet. Java is a general purpose programing language that can run cross-platform and, unfortunately, is ideal for this malicious application.
The infection process started when our customer visit a compromised website. Whenever someone visits this site, they are prompted to install a Java applet which, by the way, doesn’t have a signed security certificate. This malicious Java applet then checks the operating system to determine which Trojan malware to download onto the computer and downloads the correct piece of malware that opens a backdoor to the now infected computer. This malicious Java applet can detect and install backdoors on Mac OS X and Linux computers as well as Windows-based PCs. Once in your system, your computer is now subject to additional malware infections. In this particular case, these Trojans purpose is to connect to a remote server and await further instructions. These instructions typically include downloading additional malware and executing it.
This was one of the hardest malware removals we have removed in a long time. Our customer had additional malware infections that included a malware that would redirect Google searches. After removing layers of the malware while the infected hard drive was in the customer’s computer, we had to pull the customer’s drive and hook the drive up to one of our tech machines to remove the offending dll file. Removing this file required many steps and after we finally removed the malware, we returned the drive back to the customer’s computer machine, and all the redirects are gone.
We spent a large amount of time removing this malware; certainly more time than what would have been required to simply wipe the drive and reinstall the operating system. However, our customer benefits because all his customization, including original programs, short cuts, and desktop icons are intact. Therefore, he will not need to spend additional time or money to become fully productive.
So, what can you take away from this case? First, more malware is being written for multiple operating system platforms. Macs and Linux computers are no longer immune.
Second, be very careful when prompted to download any software from websites, especially if the software does not have a security certificate.
And finally, always maintain a reputable anti-virus program with up-to-date definitions on you computer at all times.
For more information, please call us at Cantrell’s Computer Sales & Service at 925-827-1200. Or, please drop by our brick and mortar business which is conveniently located in Pleasant Hill on 1936 Linda Drive. We are located one street off of Contra Costa Blvd. We are conveniently located close to all cities in central Contra Costa County including Walnut Creek, Lafayette, Martinez, Pacheco, Concord, Moraga, and Orinda.
Wade Cantrell – Owner, Cantrell’s Computer Sales & Service
