OSX_GEONEI.LQ
Publish Date: 24 de октября de 2014
AdWare.OSX.Geonei.b (Kaspersky)
PLATFORM:
Mac OS
OVER ALL RISK RATING:
DAMAGE POTENTIAL::
DISTRIBUTION POTENTIAL::
REPORTED INFECTION:
INFORMATION EXPOSURE:
Low
Medium
High
Critical
Threat Type:
Adware
Destructiveness:
No
Encrypted:
No
In the wild::
Yes
OVERVIEW
Puede haberlo instalado manualmente un usuario.
TECHNICAL DETAILS
File size: 495,439 bytes
File type: Other
Memory resident: Yes
INITIAL SAMPLES RECEIVED DATE: 16 сентября 2014
Detalles de entrada
Puede haberlo instalado manualmente un usuario.
Instalación
Este malware infiltra el/los siguiente(s) archivo(s):
- /private/etc/launchd.conf - detected as OSX_GEONCONF.SM or OSX_GEONCONF.SMA
- /Volumes/Installer/Installer.app
- /Volumes/InstallGenieo
- /Applications/Genieo.app
- /Applications/Uninstall Genieo.app
- /Applications/InstallMac/Reset Search.app
- /users/{user}/Library/Caches/com.genieoinnovation.Installer/Cache.db
- /users/{user}/Library/Preferences/com.genieo.settings.plist
- /users/{user}/Library/Application Support/com.genieoinnovation.Installer/Completer.app
- /Library/LaunchAgents/com.genieo.competer.update.plist
- /Library/LaunchAgents/com.genieo.competer.download.plist
- /private/tmp/tmpinstallmc.dmg
- /private/tmp/GenieoInstall.dmg