Originally Posted by patman76
The best way to protect yourself on a Mac is not to use an administrator account for day to day running.
You should create a user account for every day usage. Only use the administrator account to install system wide applications and to apply system updates.
This will protect you from such malware, as the user account will need administrator authorisation to run any hidden apps/scripts that try to modify the system - any jpeg that requires authorisation to modify anything should set off the alarm bells!
Actually, under MacOSX, even with admin rights, you still need to enter the admin password to use admin rights.
If you log in as root (not recommended, and actually disabled by default), you get full admin access without re-entering passwords.