Home - The Geeky Guys - Data Recovery & IT Services

OSX/OpinionSpy Mac Virus alert

Dear Mac Users

Please be aware of a virus threat I have just found out about and take action where needed.

The following programs have the OSX/OpinionSpy virus and please take a look at http://blog.intego.com/2010/06/01/preliminary-list-of-applications-that-install-osxopinionspy-spyware/ to get the latest news.

Preliminary List of Applications that Install OSX/OpinionSpy Spyware

Intego announced earlier today that the OSX/OpinionSpy spyware has been found in a number of applications and screen savers that are distributed on several web sites. This spyware performs a number of malicious actions, from scanning files to recording user activity, as well as sending information about this activity to remote servers and opening a backdoor on infected Macs.

As we said in our initial security alert, the spyware itself is not contained in these applications, but is downloaded during the installation process. The information provided with some of these applications contains a misleading text that users must accept explaining that a “market research” program is installed with them, but not all of these specify this. Some of these programs are also distributed directly from developers’ web sites with no such warning.

The spyware is installed as an application named PremierOpinion.

Below is a list of the screensavers and applications that we have found so far which install this spyware.

Screensavers: all these screensavers are made by the same company, 7art-screensavers, and are available from their web site, http://7art-screensavers.com.

Secret Land ScreenSaver v.2.8
Color Therapy Clock ScreenSaver v.2.8
7art Foliage Clock ScreenSaver v.2.8
Nature Harmony Clock ScreenSaver v.2.8
Fiesta Clock ScreenSaver v.2.8
Fractal Sun Clock ScreenSaver v.2.8
Full Moon Clock ScreenSaver v.2.8
Sky Flight Clock ScreenSaver v.2.8
Sunny Bubbles Clock ScreenSaver v.2.9
Everlasting Flowering Clock ScreenSaver v.2.8
Magic Forest Clock ScreenSaver v.2.8
Freezelight Clock ScreenSaver v.2.9
Precious Stone Clock ScreenSaver v.2.8
Silver Snow Clock ScreenSaver v.2.8
Water Color Clock ScreenSaver v.2.8
Love Dance Clock ScreenSaver v.2.8
Galaxy Rhythm Clock ScreenSaver v.2.8
7art Eternal Love Clock ScreenSaver v.2.8
Fire Element Clock ScreenSaver v.2.8
Water Element Clock ScreenSaver v.2.8
Emerald Clock ScreenSaver v.2.8
Radiating Clock ScreenSaver v.2.8
Rocket Clock ScreenSaver v.2.8
Serenity Clock ScreenSaver v.2.8
Gravity Free Clock ScreenSaver v.2.8
Crystal Clock ScreenSaver v.2.6
One World Clock ScreenSaver v.2.8
Sky Watch ScreenSaver v.2.8
Lighthouse Clock ScreenSaver v.2.8

Applications: so far, Intego has only found this spyware in one application:

MishInc FLV To Mp3, http://www.mishinc.info/mac_flv_to_mp3.php

Intego is continuing its search for other applications that install this spyware. We will post more information regarding this spyware here as it is uncovered.