Thoughtful, detailed coverage of the Mac, iPhone, and iPad, plus the best-selling Take Control ebooks.

 

 

Pick an apple! 
 
Avoid Simple Typos

If, like me, you find yourself typing 2911 in place of 2011 entirely too often, you can have Mac OS X (either Lion or Snow Leopard) fix such typos for you automatically. Just open the Language & Text pane of System Preferences, click the Text button at the top, and then add a text substitution by clicking the + button underneath the list. It won't work everywhere (for that you'll want a utility like Smile's TextExpander), but it should work in applications like Pages and TextEdit, and in Save dialog boxes.

Submitted by
John W Baxter

 
 

STEROID Warning!

Send Article to a Friend

An INIT called STEROID has been discovered to be a Trojan Horse. It falsely claims to accelerate QuickDraw on 9" monitors but in fact contains a time bomb that will erase all mounted volumes (floppies and hard disks) on July 1st, 1990. Apparently erased files can be recovered with SUM II (Symantec Utilities for Macintosh) and probably with other file recovery utilities. Needless to say, disable this INIT immediately and do not depend on one of the file recovery utilities. Strangely enough, having the Communication Toolbox installed seems to prevent STEROID from working.

The details of STEROID's identity are as follows:

     TYPE              : INIT
     CREATOR           : qdac
     CODE SIZE         : 1080
     DATA SIZE         : 267
     ID                : 148
     INIT Resource Name: QuickDraw Accelerator
     File Name        : "  Steroid" (First 2 characters are ASCII 1)
     Created           : June 2, 1990, 11:24 AM
     Version           : Steroid 1.1

Note the two invisible characters in front of the file name. They ensure that STEROID will load before SAM and other virus prevention utilities that might stop STEROID. Paul Cozza, author of SAM (Symantec AntiVirus for Macintosh) says that SAM would flag STEROID if and only if SAM loads before STEROID, which does not happen currently due to the two invisible characters before STEROID's name. No unknown INITs should ever be allowed to run before SAM for just this reason.

If you use SAM, you can enter the following virus definition in Virus Clinic to allow both SAM Intercept and Virus Clinic to detect this Trojan during scans.

     Virus Name:    Steroid Trojan
     Resource Type: INIT
     Resource ID:   148
     Resource Size: 1080 Search String: ADE9 343C 000A 4EFA FFF2
                                        4A78 (hex)
     String Offset: 96

If you use Virus Detective 4.x, you can enter the following search string to find STEROID.

Resource INIT & Size<1200 & WData FE680C6E#E4EBA#F60 ; For finding Steroid Trojan

Information from:
Chuq Von Rospach -- chuq@Apple.COM
Joel B. Levin -- levin@BBN.COM
Paul Cozza -- SAM Author

 

Updated! PDFpen for iPad 1.7: Designed for iOS 7, faster, and
better-looking. Edit your PDFs anywhere. Sign contracts, make
changes, fill forms, and more. All while you’re on the move.
Syncs via iCloud and Dropbox. <http://smle.us/tbpdfpen-ipad>