asides

“Video ActiveX Object Error” now in Macintosh

Have you visited movie websites, particularly porn ones and encounters an error “Video ActiveX Object Error;” did it prompt you to download and install a file to be able to display the video? If you have installed the video codec called MacCodec then you may have been infected with OSX.RSPlug.A.

The PC-based fake codec used to trick users is now available on Mac systems. It has been described by Intego as:

A malicious Trojan Horse has been found on several pornography web sites, claiming to install a video codec necessary to view free pornographic videos on Macs. A great deal of spam has been posted to many Mac forums, in an attempt to lead users to these sites. When the users arrive on one of the web sites, they see still photos from reputed porn videos, and if they click on the stills, thinking they can view the videos, they arrive on a web page that says the following:

Quicktime Player is unable to play movie file.
Please click here to download new version of codec.

After the page loads, a disk image (.dmg) file automatically downloads to the user’s Mac. If the user has checked Open “Safe” Files After Downloading in Safari’s General preferences (or similar settings in other browsers), the disk image will mount, and the installer package it contains will launch Installer. If not, and the user wishes to install this codec, they double-click the disk image to mount it, then double-click the package file, named install.pkg.

If the user then proceeds with installation, the Trojan horse installs; installation requires an administrator’s password, which grants the Trojan horse full root privileges. No video codec is installed, and if the user returns to the web site, they will simply come to the same page and receive a new download.

Below are the images for the fake wanings:

Add to Favorites:     Subscribe:

How to Remove “Video ActiveX Object Error” now in Macintosh:

Provided on this page is our suggested (by Webmaster) removal procedure and User's suggestion shared with us. However, we cannot control and evaluate all User's shared post so please use it at your own risks. If no suggestion is present to remove specific threat, you may try our Standard Procedure here.

Discussion

9 comments for ““Video ActiveX Object Error” now in Macintosh”

1. Many thanks for this

   On principle I refuse to do anything for a programme which takes over my computer until I do. I just open a new browser window or switch off

   Shooting themselves in the foot. I can’t be bothered looking at their sites any more

   Posted by Dixie dean | December 8, 2007, 9:16 pm

2. Thank you for this information. It’s possibly saved me a lot of heartache.

   Posted by And Plus 1 | December 28, 2007, 6:03 am

3. OMG! I was 2 seconds away from just clicking “continue” because it wouldn’t let me even change pages on Safari and I’ve pretty much had the mentality that Mac’s are virus proof (naive, I know) but I am so glad I decided to force quit and check it first! THANK YOU for this information!!

   Posted by Mazzy69 | April 12, 2008, 11:51 am

4. HELP!!! I just downloaded the codec!! I have a mac. PLEASE tell me what to do to remove this threat!!!

   Posted by Mike | April 12, 2008, 3:02 pm

5. My Safari was set to Open “Safe” Files After Downloading, but i did not authorize any installantion wich required admnistrator’s password.
   Is my system infected?

   Please help me out!

   Thanks in advance.

   Posted by Leo | May 1, 2008, 1:56 am

6. None of these ActiveX removal tools are for Mac. Where is a Mac tool available?

   Tnx!

   g

   Posted by George Gale | May 3, 2008, 4:50 pm

7. Woops I fell 100% into the trap ! But I’m pretty sure my MacBook doesn’t risk much anyways. Just in case, what would be signs that the Trojan is active ? How could I remove it if it seems to be threatening my system ?

   Posted by Charles | May 8, 2008, 11:25 pm

8. thnk u 4 that all..

   Posted by raymond cantalejo | May 21, 2008, 8:49 am

9. thank u 4 imformation about that im happy now to wacth ….

   Posted by raymond cantalejo | May 21, 2008, 8:50 am

Post a comment

Name *

E-mail *

Web site

Comment