Boonana Trojan Horse Removal Tool
Your rating: Now say why...

(1) 4.5

Remove the Boonana trojan.   Free
Add to my Watch List
Email me when discounted
Boonana Trojan Horse Removal Tool is a free product by SecureMac to remove the Boonana trojan horse, trojan.osx.boonana

The trojan is spreading through social networking sites, including Facebook, disguised as a video. The trojan is currently appearing as a link in messages on social networking sites with the subject "Is this you in this video?"

When a user clicks the infected link, the trojan initially runs as a Java applet, which downloads other files to the computer, including an installer, which launches automatically. When run, the installer modifies system
What's New
Version 1.1:
  • Added Mac OS X 10.4 support.
  • Interface changes
Requirements
Intel/PPC, Mac OS X 10.4 or later



MacUpdate - Boonana Trojan Horse Removal Tool




  • MacScan
    +2

  • ClamXav
    +2

  • DNSChanger Rem...
    +2
Boonana Trojan Hor... User Discussion (Write a Review)
ver. 1.x:
(1)
Your rating: Now say why...
Overall:
(1)

sort: smiles | time
burypromote
-4

-4
Pondurenga Das commented on 02 Nov 2010
I am told that the trojan horse is not a real threat, but the removal tool seems to be a real problem. It will not let me remove it. If you have figured how to get rid of this program please tell me.
Pondurenga Das
Pondurenga@unstress.com
[Version 1.0]

1 Reply

burypromote
+3

+41
Securemac.com, Inc. (developer) replied on 02 Nov 2010
Boonana Trojan Horse removal tool does not include any installers or uninstallers. It is a stand-alone application that does not run in the background. To remove Boonana Removal tool from your machine, make sure the application is quit and drag to the trash. You can reach our team directly at macsec@securemac.com for full support of our products.
burypromote
+2

+41
Securemac.com, Inc. (developer) commented on 29 Oct 2010
Hello SZQ,
We've updated our advisory page ( http://www.securemac.com/boonana-bulletin.php ) on Boonana Trojan horse and also have listed an analysis page ( http://www.securemac.com/boonana-info.php ) for the boonana trojan horse complete with screenshots.
[Version 1.0]


burypromote
+3

+27
Szq commented on 28 Oct 2010
The developer writeup implies the Trojan can bypass the need to enter a password to install this Trojan. Its a little ambiguous and potentially misleading in the way it is worded.
Perhaps SecureMac can provide some clarification on this?

It is my understanding you are prompted for your password, AFTER which it doesn't need your password to cause more mayhem (kinda obvious!). SecureMac seem to imply it uses Java to bypass the need to ever enter a password.
[Version 1.0]

1 Reply

burypromote
+1

+27
Szq replied on 29 Oct 2010
Thank you for the update.

The Trojan requires authentication and does not bypass Mac OS authentication prompts. Good to know.
There are currently no troubleshooting comments. If you are experiencing a problem with this app, please post a comment.


-9

Indio rated on 08 Dec 2010

[Version 1.1]


Downloads:4,887
Version Downloads:2,872
Type:Utilities : Security
License:Free
Date:05 Nov 2010
Platform:PPC 32 / Intel 32 / OS X
Price:Free0.00
Overall (Version 1.x):
Features:
Ease of Use:
Value:
Stability:
Displaying 1-3 of 3
Displaying 1-1 of 1
-
-
-
Please login or create a new
MacUpdate Member account
to use this feature
Watch Lists are available to
MacUpdate Desktop Members
Upgrade Now
Install with MacUpdate Desktop.
Save time moving files & cleaning
up space wasting archives.
Boonana Trojan Horse Removal Tool is a free product by SecureMac to remove the Boonana trojan horse, trojan.osx.boonana

The trojan is spreading through social networking sites, including Facebook, disguised as a video. The trojan is currently appearing as a link in messages on social networking sites with the subject "Is this you in this video?"

When a user clicks the infected link, the trojan initially runs as a Java applet, which downloads other files to the computer, including an installer, which launches automatically. When run, the installer modifies system files to bypass the need for passwords, allowing outside access to all files on the system. Additionally, the trojan sets itself to run invisibly in the background at startup, and periodically checks in with command and control servers to report information on the infected system. While running, the trojan horse hijacks user accounts to spread itself further via spam messages. Users have reported the trojan is spreading through e-mail as well as social media sites.

The java component of the trojan horse is cross-platform, and includes other files that affect Mac OS X as well as Microsoft Windows. There have been reports of similar behavior in recent trojan horses targeting Microsoft Windows, but they have not included cross-platform capabilities until now. The trojan attempts to hide its Internet communications and actions through obfuscated code spread through multiple files, and will attempt to contact additional command servers if the primary servers are unavailable.

This trojan horse is currently in the wild affecting users of both operating systems. This free trojan horse removal tool will quickly audit the system for the trojan horse and remove the files.


- -