Ancient Dragon
Retired & Loving It
30,046 posts since Aug 2005
Reputation Points: 5,662
Solved Threads: 2,342
One of the Trojans gains root access without requiring a password by exploiting a gaping security hole in Mac OS X 10.4 and 10.5 via ARDAgent, the remote desktop daemon. To protect yourself against it, open /Applications/Utilities/Terminal, and run the following command:
sudo chmod 0555 \
/System/Library/CoreServices/RemoteManagement/ARDAgent.app/\
Contents/MacOS/ARDAgent
enter your password, and the setuid bit will be removed from the application.
There is no known workaround for protecting yourself against the Poker virus at this time. Good luck.
John A
Vampirical Lurker
7,630 posts since Apr 2006
Reputation Points: 2,240
Solved Threads: 339