OSX.Janicab.A ... and there is malware on the Mac

I'm a big advocate of the theory that you don't need a [virus scanner->virus scanner-mac] on the Mac, because nothing is running on it anyway, whatever viruses come in, because mostly it's .exe files that are directly used for the attack programmed by Windows PCs. With the success of iPhone & Co, however, OS X has also become more interesting for [malware->malware] specialists and here and there a bad guy can be found who wants to make the Mac unsafe. In the current case, this is a Trojans named “OSX.Janicab.A”.

This even manages to disguise itself as a PDF, but to be on the move as an executable program. The programmers of the malware have used a trick in the character coding that somehow introduces a right-left notation and thus also camouflages the ending of the program. Don't ask me how to do it. I have it here read through, but didn't understand anything about it. :)

This is how you can recognize the Trojan despite the PDF camouflage

As with all programs from the Internet, this supposed PDF also comes up with the question of the password if you want to open it. The password, however, should definitely NOT be entered, as this would give the Trojan the rights to do nonsense on the Mac.

But there are two things that should make an attentive Mac user suspicious if they happen to come across the Trojan:

1. Normally, no PDF wants to have the password to execute when opening!
2. The warning from OS X that appears when you double-click the Trojan is written from right to left and looks very strange. At this point, at the latest, all alarm bells should ring.

Remove OSX.Janicab.A using antivirus software

If you are unsure whether you are already "infected" by the Trojan or if you want to protect your system with an anti-virus program, you can go to "Norton Internet Security 5.0" grasp. With the latest update, this [virus scanner for Mac->norton-internet-security-5-0] also has the signature of the OSX.Janicab.A Trojan on it and can remove it effectively.

Jen Kleinholz( Founder & Sir Apfelot )

Jens has been running the blog since 2012. He acts as Sir Apfelot for his readers and helps them with technical problems. In his spare time he rides electric unicycles, takes photos (preferably with the iPhone, of course), climbs around in the Hessian mountains or hikes with the family. His articles deal with Apple products, news from the world of drones or solutions to current bugs.