[MacTUG] Fwd: DNSChanger Trojan Removal Tool for Mac OS X

[Steve Hellyer]

What I found interesting about this is where you get this virus...
"has been found on numerous pornographic websites disguising itself as  
a video codec."

Wonder what class this was research for. ;-) <kidding>

Steve

On 9-Apr-08, at 9:08 AM, Glenn Anderson wrote:

>
>
> Begin forwarded message:
>> From: Keith Peck <kdpeck at ist.uwaterloo.ca>
>> Date: April 8, 2008 2:05:24 PM EDT (CA)
>> To: isthd at lists.uwaterloo.ca
>> Cc: Glenn Anderson <anderson at uwaterloo.ca>, Dani Roloson <daroloson at math.uwaterloo.ca 
>> >
>> Subject: DNSChanger Trojan Removal Tool for Mac OS X
>>
>> Reg Quinton's security scans on uw-wireless have been sending out  
>> alarms to users running Mac OS X that are infected with a  
>> DNSChanger Trojan
>> aka FreeVideo Trojan, or OSX.RSPlug.A Trojan Horse, etc.
>>
>> I've seen just a couple so far but expect that there will be more.
>>
>> The good news is that there is a tool available to fix the problem...
>>
>> --------------
>>
>> http://macscan.securemac.com/dnschanger-trojan-removal-tool-for-mac-os-x/#more-37
>>
>> DNSChanger Removal Tool detects and removes latest spyware  
>> targeting Mac OS X.  DNSChanger Trojan (also known as OSX.RSPlug.A  
>> Trojan Horse) attacks users attempting to play a fake video file.
>>
>> Upon attempting to play the video, the victim receives the  
>> following message:
>>
>> Quicktime Player is unable to play movie file.
>> Please click here to download new version of codec.
>>
>> Upon running the installer, the user’s DNS records are modified,  
>> redirecting incoming internet traffic through the attacker’s  
>> servers, where it can be hijacked and injected with malicious  
>> websites and pornographic advertisements. The trojan also installs  
>> a watchdog process that ensures the victim’s DNS records stay  
>> modified on a minute-by-minute basis.
>>
>> SecureMac’s DNSChanger Removal Tool allows users to check to see if  
>> the trojan has been installed on their computer; if it has, the  
>> software helps to identify and remove the offending file. After a  
>> system reboot, the users’ DNS records will be repaired.
>>
>> This tool is free.
>>
>> For more information or to download a copy of DNSChanger Removal  
>> Tool, visit SecureMac.com or download directly from http://macscan.securemac.com/files/DNSChangerRemovalTool.dmg 
>>  .
>>
>> --------------
>>
>> Keith Peck
>> Client Services, Information Systems and Technology
>> University of Waterloo, Waterloo, Ontario, Canada, N2L 3G1.
>> MC 1052, (519) 888-4567 x.37770
>> kdpeck at uwaterloo.ca
>>
>>
>>
>
> Glenn Anderson
> Client Services, IST
> University of Waterloo
> Waterloo, On
> 519-888-4567 x33327
> anderson at uwaterloo.ca
>
>
>
> _______________________________________________
> MacTUG mailing list
> MacTUG at lists.uwaterloo.ca
> https://lists.uwaterloo.ca/mailman/listinfo/mactug

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.uwaterloo.ca/pipermail/mactug/attachments/20080410/633d326a/attachment.html