If not, we’re always looking for new problems to solve! Email yours to including screen captures as appropriate, and whether you want your full name used. We’ve compiled a list of the questions we get asked most frequently along with answers and links to columns: read our super FAQ to see if your question is covered. This Mac 911 article is in response to a question submitted by Macworld reader Brianna.
In a newer version of any of the productivity apps, you can open this ’09-saved file and once again save it or save it as a new file to bring it into full, modern compatibility. You are prompted for each file whether to save, which overwrites the earlier version, or save as, which lets you create a new, “up-to-date” separate file. Now you have 30 days to open pre-’09 files and save them using these apps.
The iWork ’09 trial software installer reqiures a security bypass, as it’s so old. When complete, launches Pages ’09, Numbers ’09, or Keynote ’09. Installation seems to take a long time, but wait it out. (This one is new enough that you can launch it normally.)
This installs the iWork ’09 suite in trial form.įrom Apple’s software update page, download the iWork 9.3 updater.ĭouble-click the disk image to mount it and run the installer. The Finder warns you that the package is from an unidentified developer. From the Finder, Control-click the installer package on the disk image and choose Open. Yes, it’s still on the company’s site!īecause the trial software is so old, Apple’s digital certificates to validate the installer have failed. *Note: My thanks to Angela Thigpen for her assistance with the research on this threat and information provided in this article.Download Apple’s iWork ’09 trial version. Symantec recommends that users who wish to try the trial version of iWork ’09 should download it directly from Apple at. The inbound and outbound network traffic is also AES encrypted. It then attempts to connect to the following remote hosts: Finally, the Trojan acts as a back door and opens a port on the local host for connections. The Trojan then restarts itself from its new location in /System/Library/StartupItems/iWorkServices, and decrypts an AES encrypted configuration file, which is located in /private/tmp/.iWorkServices. It then modifies the following file to ensure that it runs when the compromised computer restarts: The Trojan then copies itself to both of the following locations: System/Library/StartupItems/iWorkServices If not, it will create the following folder: Then, it checks to see if it was executed with the file name iWorkServices. The Trojan first determines if it is the root user on the compromised computer and if not, it will end. This allows the Trojan to run natively on both PowerPC and x86 architectures.
The Trojan, OSX.Iservice, targets the Mac OS and is compiled as a Mach-O multi-architecture binary. When the Trojanized installer is executed, it also runs the malicious program iworkservices. The iWorkServices.pkg contains the Trojan executable named iworkservices, and is approximately 404KB in size. The Trojanized package contains some parts of the official Apple iWork ’09 trial version, but also includes a malicious installer named iWorkServices.pkg. In contrast, the legitimate trial version of iWork ’09 that is available from Apple is named iWork09Trial.dmg and is slightly over 451MB. Disguised as a copy of the legitimate trial version of Apple’s iWork ‘09, the phony iWork ’09 installer has the filename iWork09.zip and is approximately 450MB in size. We originally reported on this yesterday on our Norton Protection Blog-take a look at the article New Trojan Attacks Pirates. Symantec has become aware of a Trojan currently being shared on peer-to-peer (P2P) networks. Unfortunately, the idea of getting one over on a big corporation fuels a lot of file sharing, and malicious software authors bank on that.
What this means is that there is no free lunch, nor is there free Apple iWork '09, unless you download the trial version directly from Apple. What do you call it when pirating software works against you? OSX.Iservice.