Show us your desktop

[Jeremy]

Looks great Ash. Which Mac theme are you using?

[Ashwin]

Looks great Ash. Which Mac theme are you using?

Thanks Jeremy,

Here you go:

Lion Skin Pack 10 (x86)

You Must Be Registered and Logged On To View "URL" BBCode Contents...

There is a 64 bit version too, and many more skins at:

You Must Be Registered and Logged On To View "URL" BBCode Contents...

Got the wallpaper from:

You Must Be Registered and Logged On To View "URL" BBCode Contents...

[Jeremy]

Thank you for the links Ash, I very much appreciate it. Going to check them out.

[Jeremy]

Ash and others be very careful with those Lion themes. After I clicked on the download link from Deviant art it took me to a malicious website that made Norton go crazy. Just by loading the site it was trying to secretly download malicious executables to my machine, and that was with me not even downloading the lion pack. Here is the information regarding the malicious files along with some screenshots:

Category: Quarantine
Date & Time Risk Activity Status Recommended Action Path - Filename
2011-09-29 1:29:55 - High - 1xvxhr_2.exe.part (Suspicious.Cloud.2) detected by Download Insight - Quarantined,Resolved - No Action Required - c:\users\jeremy\appdata\local\temp\1xvxhr_2.exe.pa rt

Category: Quarantine
Date & Time Risk Activity Status Recommended Action Path - Filename
2011-09-29 1:29:55 - High - 1xvxhr_2.exe.part (WS.Trojan.H) - detected by Download Insight - Quarantined,Resolved - No Action Required - c:\users\jeremy\appdata\local\temp\1xvxhr_2.exe.pa rt

Attachment 350
Attachment 351 Attachment 352

[Avinash]

Thank you Jeremy for posting this. But u missed by few minutes. I already installed it on PC which had AVG installed and it didnt detected anything.

Just after seeing your message, I just uninstalled it. Need to check if everything is alright on PC.

[Jeremy]

The actual lion pack theme may be clean (I do not know I did not download it after Norton blocked it) it was just by visiting that site that it tried to secretly download 1xvxhr_2.exe.part (Suspicious.Cloud.2) and 1xvxhr_2.exe.part (WS.Trojan.H)

[Ashwin]

@Jeremy I clicked on both the links (x86 and x64). They downloaded from deviantart and not any mirror site

Yesterday, I had downloaded the pack directly from

You Must Be Registered and Logged On To View "URL" BBCode Contents...

Found an alternative skin for Mac, try this one:

removed link, coz it screwed my PC

[Avinash]

I got something similar to Jeremy when I checked with Norton.

Attachment 353

[Ashwin]

Think it must be a false positive.

update: MBAM Quickscan says my PC is clean
http://i1139.photobucket.com/albums/...canmacskin.png

Update 2:

Full system scan result. (forgot to take screenshot )

Malwarebytes' Anti-Malware 1.51.2.1300

You Must Be Registered and Logged On To View "URL" BBCode Contents...

Database version: 7805

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

29-09-2011 15:47:56
mbam-log-2011-09-29 (15-47-56).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|)
Objects scanned: 321076
Time elapsed: 2 hour(s), 35 minute(s), 59 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[Jeremy]

Think it must be a false positive.

Yes there is a possibility it is a false positive. However it is definitely suspicious to have a website attempt to secretly download an executable file without the user's knowledge or consent. Since you downloaded directly from Deviant Art and not the Mirrored site you should be good, which I am very relieved. I am glad your scans came out clean too. It makes me feel better.