Furthermore, upon uninstalling the original program, OSX/OpinionSpy remains installed on your Mac.
OSX/OpinionSpy can also upgrade itself automatically with no user intervention and relaunch itself via Mac OS X’s launchd, the system-wide process that manages a number of automated systems, background daemons, and launch processes. It also regularly transmits encrypted data to a variety of servers, which contains e-mail addresses, iChat message headers, and URLs-as well as potentially personal data like usernames, passwords, credit card numbers, bookmarks, and browsing history. Intego says the spyware then opens an HTTP backdoor on port 8254, scans all accessible local and networked volumes, and injects code into Safari, Firefox, and iChat in memory (meaning it doesn’t alter the applications themselves). OSX/OpinionSpy then installs a process called “PremierOpinion” that runs as root. The spyware in question is called OSX/OpinionSpy and it’s a variant of Windows spyware that has existed since 2008.Īs to the spyware’s invasive actions, it allegedly dupes users into handing over their admin passwords with a dialog claiming that it “market research” software will be installed to collect browsing and purchasing history.
#Uninstall intego virusbarrier x6 mac os x
In a press release, Intego states that a number of apps and screen savers distributed through sites like MacUpdate, VersionTracker, and Softpedia are installing a little more software than users bargain for Apple’s Mac OS X Downloads site also contained entries for some of the apps, though the download links appear to now be inactive.