SecureMac has discovered a trojan horse in the wild that affects Mac OS X, including Snow Leopard (OS X 10.6). The trojan horse, trojan.osx.boonana.a, is spreading through social networking sites, including Facebook, disguised as a video. The trojan is currently appearing as a link in messages on social networking sites with the subject "Is this you in this video?"

When a user clicks the infected link, the trojan initially runs as a Java applet, which downloads other files to the computer, including an installer, which launches automatically. When run, the installer modifies system files to bypass the need for passwords, allowing outside access to all files on the system.

The java component of the trojan horse is cross-platform, and includes other files that affect Mac OS X as well as Microsoft Windows. There have been reports of similar behavior in recent trojan horses targeting Microsoft Windows, but they have not included cross-platform capabilities until now. The trojan attempts to hide its internet communications and actions through obfuscated code spread through multiple files, and will attempt to contact additional command servers if the primary servers are unavailable.

Boonana Trojan Horse Removal Tool removes Boonana Trojan Horse, Java/Boonana.A, Boonana, Troj/Boonana-A, Trojan.Jnanabot, JAVA_JNANA.A, Trojan-Downloader.Java.Alboto.a and Trojan:Java/Boonana

Using Boonana Trojan Removal Tool: Upon launching Boonana Trojan Removal Tool, click the Scan button to scan for the Boonana trojan horse. Boonana Trojan Removal Tool will scan your computer for the Boonana trojan horse, and alert you if it is detected. If the Boonana trojan horse is detected, Boonana Trojan Removal Tool will give you the option to remove it.

Requirements:
OS X 10.4 - 10.6
Universal Binary